$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: ThVbrQqsTD5yhiGWAuD9iJOOSsEghUtkhkOYrB+64Cg= Subject key identifier: 20:65:23:B2:45:75:02:01:77:0E:08:41:46:27:67:14:2B:1F:00:12 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C4D Signing time: Fri 18 Jul 2025 18:44:36 +0000 Manifest this update: Fri 18 Jul 2025 18:44:36 +0000 Manifest next update: Fri 25 Jul 2025 18:44:36 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: T/Nj/AwJgVWn2mxt4BoEoMufVcoRnC7/cLPx2TQOmYo=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Jul 18 18:44:36 2025 GMT Not After : Jul 25 18:44:36 2025 GMT Subject: CN=687a9614-3379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:19:ed:81:17:01:2e:47:1d:e2:57:76:db: 52:97:a5:07:52:bd:e7:23:0e:24:45:0b:81:8a:ee: 63:a9:49:11:b9:6c:ae:52:fc:33:ba:ed:50:78:d0: 28:5c:e8:f0:c2:89:f9:3a:55:54:06:d3:d9:de:97: be:57:2a:08:2b:78:da:76:cf:5f:2c:17:2a:8f:47: 00:f5:4e:34:1d:7e:1c:96:48:bc:90:1b:bc:6e:ab: 32:45:fe:8e:7f:7c:83:3b:bc:1e:4b:a8:4a:40:63: e6:7f:bc:32:76:0c:0b:72:06:08:2f:2c:82:a7:fe: 4a:2b:c1:0e:92:03:cd:d2:6e:3d:c2:37:40:39:90: 9f:49:ef:65:0d:1f:12:9e:ca:4e:37:af:9b:ba:46: 10:e3:ba:3c:e0:6d:f5:d6:8a:35:32:4e:d3:3c:52: e1:3b:5f:87:d0:85:06:55:64:fe:e4:31:8a:a6:0d: 33:c2:23:93:dc:94:5a:82:05:cc:79:18:17:f5:c5: 42:66:2f:8c:37:6e:0d:fb:14:42:36:cd:5f:09:91: 51:96:14:7a:9b:33:47:65:ec:7e:38:7f:2b:ae:c5: cc:32:71:0f:2c:bd:34:27:70:31:47:af:77:00:1b: 0c:c1:dd:f9:21:a3:06:f5:e3:d9:b5:2e:31:be:00: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:65:23:B2:45:75:02:01:77:0E:08:41:46:27:67:14:2B:1F:00:12 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:99:eb:13:94:d9:a0:2b:eb:e0:8d:ff:08:4d:ba:ba:97:14: 12:33:cc:96:1c:01:8b:3a:b3:ba:63:15:9c:2b:2f:10:95:b9: df:3d:4e:c5:82:43:35:fc:50:ba:82:a2:f7:c2:94:4c:66:da: 34:6e:39:61:41:5f:07:54:53:e4:7a:09:2e:b4:ff:b4:c0:c0: d3:bf:c4:94:0c:df:b7:1b:d7:89:1a:91:c6:43:aa:5c:45:05: df:f2:88:ce:55:31:f3:52:3d:f0:7c:da:cc:45:89:d2:30:ad: 18:04:06:08:73:69:ea:d5:57:86:02:33:3b:8c:4a:ef:78:1c: 07:f1:69:f5:33:f0:b0:e5:c6:f1:96:51:9e:65:0f:2d:2a:dc: 74:f7:18:74:7d:ac:99:b6:77:6c:ef:1b:8c:2a:86:98:9c:2e: 84:5f:b3:f2:d3:bd:a7:74:e4:5a:08:e0:f3:6a:90:a1:f1:33: 4a:86:01:8e:4a:47:bf:72:17:00:48:16:eb:25:94:1a:76:34: 06:a8:be:be:ec:d3:b9:92:a0:51:53:e4:8d:02:4c:ae:55:a5: 12:03:60:73:a4:c5:d9:c1:72:87:25:53:29:87:4b:7c:75:e1: 0f:17:9c:7c:95:e5:56:4a:89:03:61:cc:a4:6c:ef:be:b4:58: 31:4f:93:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNzE4MTg0NDM2WhcNMjUwNzI1MTg0NDM2WjAYMRYwFAYD VQQDEw02ODdhOTYxNC0zMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbwZ7YEXAS5HHeJXdttSl6UHUr3nIw4kRQuBiu5jqUkRuWyuUvwzuu1QeNAo XOjwwon5OlVUBtPZ3pe+VyoIK3jads9fLBcqj0cA9U40HX4clki8kBu8bqsyRf6O f3yDO7weS6hKQGPmf7wydgwLcgYILyyCp/5KK8EOkgPN0m49wjdAOZCfSe9lDR8S nspON6+bukYQ47o84G311oo1Mk7TPFLhO1+H0IUGVWT+5DGKpg0zwiOT3JRaggXM eRgX9cVCZi+MN24N+xRCNs1fCZFRlhR6mzNHZex+OH8rrsXMMnEPLL00J3AxR693 ABsMwd35IaMG9ePZtS4xvgDdcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBlI7JF dQIBdw4IQUYnZxQrHwASMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvmesTlNmgK+vgjf8ITbq6lxQSM8yWHAGLOrO6YxWcKy8QlbnfPU7F gkM1/FC6gqL3wpRMZto0bjlhQV8HVFPkegkutP+0wMDTv8SUDN+3G9eJGpHGQ6pc RQXf8ojOVTHzUj3wfNrMRYnSMK0YBAYIc2nq1VeGAjM7jErveBwH8Wn1M/Cw5cbx llGeZQ8tKtx09xh0fayZtnds7xuMKoaYnC6EX7Py072ndORaCODzapCh8TNKhgGO Ske/chcASBbrJZQadjQGqL6+7NO5kqBRU+SNAkyuVaUSA2BzpMXZwXKHJVMph0t8 deEPF5x8leVWSokDYcykbO++tFgxT5PG -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:16 2025 by rpki-client