$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: t2tvcJ9YhmutuxainrMaxYEWVPOWLH0+WFwx9XZ8g3g= Subject key identifier: F5:2C:CE:E0:2F:EE:4A:BC:0A:F9:0C:26:4A:58:9A:B1:B9:5A:54:C6 Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 3487 Signing time: Sat 31 May 2025 14:56:30 +0000 Manifest this update: Sat 31 May 2025 14:56:30 +0000 Manifest next update: Sat 07 Jun 2025 14:56:30 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: KyvulfF+K+e1lrElwiRPirePDl/vDqhaT8s7952l1bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: May 31 14:56:30 2025 GMT Not After : Jun 7 14:56:30 2025 GMT Subject: CN=683b189e-11c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:f6:5c:e5:a4:97:78:9f:69:f5:1a:5f:e7: 5c:ec:73:60:04:41:c9:06:b7:05:57:73:b5:05:89: 12:20:bc:78:32:8e:61:d9:2a:c5:fa:e6:51:d6:4a: 11:d1:1d:46:e1:5d:c1:74:dc:1a:af:e1:d2:02:d8: 6e:e1:7e:05:59:1c:ae:37:7c:1a:20:b4:82:6e:52: cc:16:72:09:cd:e6:76:8a:33:ea:78:f4:21:4d:e2: 01:5f:41:f3:9d:86:3a:38:9f:1d:7a:d2:59:f3:3e: b6:40:6a:39:1f:10:20:77:37:b3:87:a0:4c:d1:71: d8:91:b0:37:3c:15:0c:c7:fa:7a:f8:05:68:3e:fe: 7f:97:da:3e:59:37:40:92:e4:f0:f8:28:3a:59:cb: 1f:a8:a6:3d:ed:a5:44:1d:9a:5e:e2:aa:52:42:3f: cf:93:25:32:b3:78:92:2a:21:86:3f:4c:56:2e:56: 3d:1c:1c:20:0c:0f:96:17:ae:f9:b8:f3:b7:9b:a7: c8:b6:ce:d2:36:5f:34:fd:85:78:79:f7:69:30:16: bd:d6:7e:72:44:8d:44:dd:c4:4e:32:58:1a:b1:bb: 49:ce:ae:56:43:1f:af:d6:cb:40:10:2c:27:d7:87: 07:c1:02:41:22:e3:fd:48:0e:af:a7:0a:49:d4:fb: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2C:CE:E0:2F:EE:4A:BC:0A:F9:0C:26:4A:58:9A:B1:B9:5A:54:C6 X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:52:2c:dd:1d:d9:0e:49:d5:55:69:d8:aa:ae:be:ea:b6:e1: e6:ef:42:fc:3a:0d:96:ad:c3:f2:24:42:e2:f9:ec:57:85:fb: 03:af:64:9c:93:31:30:d6:72:45:0b:e9:38:fe:1a:19:76:4a: 34:88:e8:7c:8f:9d:80:15:fd:5e:7f:49:ff:ae:76:fa:8d:59: 4b:7e:ca:51:af:50:e2:4c:1f:ea:db:02:d9:00:d6:5f:fd:82: e2:24:d9:4b:2d:f7:bf:cf:f7:87:fb:71:8f:cc:b9:da:c2:25: 78:5d:a0:b2:6b:4a:59:cd:a4:0f:c7:ae:91:01:34:36:16:0a: 8c:ec:02:4a:a4:ef:0c:fa:3d:43:93:04:87:c1:75:2d:70:de: 7a:7b:57:5d:2a:b4:3e:a8:62:83:12:63:e8:9d:b0:54:27:b8: c1:55:0b:14:f6:79:a0:6d:66:28:13:5b:1d:f0:90:d4:17:26: 1d:71:ac:2a:2f:58:dc:af:d1:55:85:3e:3c:8a:e3:66:ad:b7: d6:a9:8d:62:0e:ca:c2:5f:2b:43:0f:40:e2:4f:e1:c4:c4:b7: 82:3b:a2:01:72:0d:00:ca:99:a8:fc:95:2f:31:83:9c:ca:c4: 67:ed:ca:a1:32:a3:e7:2f:23:1e:51:67:3c:29:07:49:85:07: 95:c4:a4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjUwNTMxMTQ1NjMwWhcNMjUwNjA3MTQ1NjMwWjAYMRYwFAYD VQQDEw02ODNiMTg5ZS0xMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzn2XOWkl3ifafUaX+dc7HNgBEHJBrcFV3O1BYkSILx4Mo5h2SrF+uZR1koR 0R1G4V3BdNwar+HSAthu4X4FWRyuN3waILSCblLMFnIJzeZ2ijPqePQhTeIBX0Hz nYY6OJ8detJZ8z62QGo5HxAgdzezh6BM0XHYkbA3PBUMx/p6+AVoPv5/l9o+WTdA kuTw+Cg6WcsfqKY97aVEHZpe4qpSQj/PkyUys3iSKiGGP0xWLlY9HBwgDA+WF675 uPO3m6fIts7SNl80/YV4efdpMBa91n5yRI1E3cROMlgasbtJzq5WQx+v1stAECwn 14cHwQJBIuP9SA6vpwpJ1PsBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUszuAv 7kq8CvkMJkpYmrG5WlTGMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQUizdHdkOSdVVadiqrr7qtuHm70L8Og2WrcPyJELi+exXhfsDr2Sc kzEw1nJFC+k4/hoZdko0iOh8j52AFf1ef0n/rnb6jVlLfspRr1DiTB/q2wLZANZf /YLiJNlLLfe/z/eH+3GPzLnawiV4XaCya0pZzaQPx66RATQ2FgqM7AJKpO8M+j1D kwSHwXUtcN56e1ddKrQ+qGKDEmPonbBUJ7jBVQsU9nmgbWYoE1sd8JDUFyYdcawq L1jcr9FVhT48iuNmrbfWqY1iDsrCXytDD0DiT+HExLeCO6IBcg0Aypmo/JUvMYOc ysRn7cqhMqPnLyMeUWc8KQdJhQeVxKTe -----END CERTIFICATE-----Generated at Sat May 31 17:11:22 2025 by rpki-client