$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: pxfBg5RvvYdqMA/bGMOs9hkJaSj9vGwEDfmFQdcxpvg= Subject key identifier: 6A:FC:11:28:9B:FB:33:18:6E:73:2B:C0:3E:88:F4:08:2B:3B:89:63 Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 01F6 Signing time: Thu 05 Jun 2025 01:53:18 +0000 Manifest this update: Thu 05 Jun 2025 01:53:17 +0000 Manifest next update: Thu 12 Jun 2025 01:53:17 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: KWwSfJw9E+eZ7oTU9vyvgCve1mPqCC1sFCFH+hI2fhc=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Jun 5 01:53:17 2025 GMT Not After : Jun 12 01:53:17 2025 GMT Subject: CN=6840f88d-f09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:75:82:8c:e7:c7:94:24:c9:0f:60:b1:d9: e7:53:eb:41:23:e2:13:7e:4a:02:6e:5a:c6:0d:fb: b7:2a:82:bb:6e:bd:e2:1c:44:5c:03:16:d3:9f:33: c5:dc:8a:39:ac:ed:28:68:5e:f5:2c:19:a7:fe:82: 6d:50:f7:dc:e1:0c:30:dc:2e:67:3e:65:6d:0e:40: ee:09:e7:50:0f:78:f8:8c:65:f4:e1:7d:46:ff:3f: 8b:dd:6e:e1:a6:18:37:cf:ec:2e:8e:c1:c9:43:c0: 33:06:c2:e5:a2:2d:96:a6:bc:89:41:88:98:03:eb: eb:1e:e2:79:20:70:e4:58:c4:88:15:e6:17:4f:7f: 65:db:50:25:e8:44:a2:38:2d:83:f9:f1:0b:13:e2: ba:c4:f8:0d:3c:a9:e2:09:1d:f0:66:0a:91:2f:b9: de:4c:26:1b:46:5a:2f:c5:30:1a:4b:67:01:f3:44: 6c:7b:5e:2f:53:d9:2f:89:4a:35:15:25:4c:44:39: 3e:25:d4:70:16:22:c9:3b:d0:4d:b1:8c:d3:23:c0: f5:ef:ee:7e:8a:e2:27:24:20:87:f7:88:02:04:e3: cd:3e:af:f2:95:d0:62:ba:93:b0:ed:5d:ce:b2:f3: 37:a5:a5:c5:42:41:f8:9a:60:19:ac:75:4b:85:10: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FC:11:28:9B:FB:33:18:6E:73:2B:C0:3E:88:F4:08:2B:3B:89:63 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:66:80:17:e8:4a:08:f1:f9:46:b3:45:c2:60:be:c7:ea:00: 85:38:d9:1a:49:b0:fd:a7:5e:22:fa:27:dc:9b:60:44:ed:45: d1:6a:5d:f0:8c:df:b6:44:5e:42:1b:48:d7:e1:38:5d:b8:21: d7:63:8a:42:02:ba:78:7d:bb:b8:f2:d2:2b:ab:92:68:11:4d: f2:89:9a:78:8c:08:62:57:74:fc:08:69:57:71:60:e9:d4:c6: ea:f3:91:89:ec:e9:38:e2:e5:68:e4:2c:87:c3:59:b4:36:d2: 09:18:5b:1f:1d:2e:17:c3:98:3c:27:6b:0d:c3:43:f2:5a:4b: 56:78:a4:23:80:03:21:c6:56:53:52:7a:17:ce:6d:5b:45:9c: d5:31:67:69:c8:17:36:48:46:99:71:e0:6c:f2:aa:2f:e4:7b: 0f:d6:f2:8a:f5:49:eb:78:c3:c2:ec:73:b7:b9:c0:bc:0b:f6: 93:78:2c:e8:95:eb:d5:e2:05:e1:8f:53:80:ad:00:88:c1:91: f8:61:d6:3a:6d:ea:d0:19:9f:17:1b:69:ab:35:84:1e:e6:e3: 3b:ad:cf:1e:b5:9d:e5:38:8f:c1:75:95:31:b4:3e:bf:a3:ed: 32:a0:1e:42:2a:53:7e:b1:d8:16:70:8b:05:17:d9:0a:93:d3: ca:c1:20:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUwNjA1MDE1MzE3WhcNMjUwNjEyMDE1MzE3WjAYMRYwFAYD VQQDEw02ODQwZjg4ZC1mMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiB1goznx5QkyQ9gsdnnU+tBI+ITfkoCblrGDfu3KoK7br3iHERcAxbTnzPF 3Io5rO0oaF71LBmn/oJtUPfc4Qww3C5nPmVtDkDuCedQD3j4jGX04X1G/z+L3W7h phg3z+wujsHJQ8AzBsLloi2WpryJQYiYA+vrHuJ5IHDkWMSIFeYXT39l21Al6ESi OC2D+fELE+K6xPgNPKniCR3wZgqRL7neTCYbRlovxTAaS2cB80Rse14vU9kviUo1 FSVMRDk+JdRwFiLJO9BNsYzTI8D17+5+iuInJCCH94gCBOPNPq/yldBiupOw7V3O svM3paXFQkH4mmAZrHVLhRA2LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr8ESib +zMYbnMrwD6I9AgrO4ljMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCZoAX6EoI8flGs0XCYL7H6gCFONkaSbD9p14i+ifcm2BE7UXRal3w jN+2RF5CG0jX4ThduCHXY4pCArp4fbu48tIrq5JoEU3yiZp4jAhiV3T8CGlXcWDp 1Mbq85GJ7Ok44uVo5CyHw1m0NtIJGFsfHS4Xw5g8J2sNw0PyWktWeKQjgAMhxlZT UnoXzm1bRZzVMWdpyBc2SEaZceBs8qov5HsP1vKK9UnreMPC7HO3ucC8C/aTeCzo levV4gXhj1OArQCIwZH4YdY6berQGZ8XG2mrNYQe5uM7rc8etZ3lOI/BdZUxtD6/ o+0yoB5CKlN+sdgWcIsFF9kKk9PKwSCm -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:37 2025 by rpki-client