$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: hU7CeSTd+35FhoqEfDDITN8G7vAsoB0jEJY+tPwvQJI= Subject key identifier: 00:61:37:9D:FC:C7:A9:C2:CB:AE:5D:A1:2B:2E:0F:1E:D3:0A:8B:02 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0C9F Signing time: Fri 30 May 2025 18:24:42 +0000 Manifest this update: Fri 30 May 2025 18:24:42 +0000 Manifest next update: Fri 06 Jun 2025 18:24:42 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: WG/PW91bHnFElFehFsCPfRNv5/OQwtClGHG1TYhG8BM=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: May 30 18:24:42 2025 GMT Not After : Jun 6 18:24:42 2025 GMT Subject: CN=6839f7ea-521a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:9e:ca:bb:c6:d1:de:8c:ab:f9:a3:00:a5: aa:e7:ae:db:3e:22:fd:51:b9:fe:48:1c:39:fd:6e: 37:a8:3d:0d:fe:7b:99:44:4e:84:7e:ac:ff:3b:9a: 06:ac:f6:5f:82:0d:74:ef:53:d6:e0:cf:a0:c0:80: 7e:51:d7:0e:68:e7:46:5e:30:2b:50:dd:4a:8e:b2: 7e:88:3a:a7:1d:e9:bb:ff:4c:1c:67:d9:f8:13:9a: 97:82:ea:7a:b5:b5:83:05:5f:1a:3f:27:db:fb:4a: 06:b4:1f:9e:46:74:0b:ee:4e:b0:99:9f:79:20:87: a2:92:3c:dc:9a:db:ac:cc:29:fe:0e:de:00:90:81: 27:8c:4d:43:f6:bd:56:70:89:94:47:eb:1b:d7:55: c7:bf:4c:2c:fd:70:fc:94:c7:23:57:52:ea:62:3f: db:56:a8:e3:e7:bd:fc:14:35:7f:d0:59:f9:ce:28: 9b:ac:29:ca:8c:45:8b:9c:ef:e5:2f:38:34:65:c5: 68:14:71:01:43:52:de:5f:3c:7e:73:a6:45:e9:69: ab:1a:35:e0:a6:2b:a5:0c:b4:19:e7:4b:18:36:ee: 1d:e1:03:03:0c:08:11:5b:af:38:d5:20:3e:2b:e8: e0:b7:1c:75:0e:e7:aa:6e:fa:6c:be:a1:27:e2:c1: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:37:9D:FC:C7:A9:C2:CB:AE:5D:A1:2B:2E:0F:1E:D3:0A:8B:02 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ab:5a:39:bf:b7:7f:94:da:b7:6f:bb:b0:61:2f:69:63:3f: df:12:00:d5:d8:9d:15:c8:f1:37:0c:c5:e3:ec:18:e3:42:9e: 41:f9:49:cc:d9:b1:10:28:e5:47:a0:90:b0:82:21:39:32:08: 24:ad:14:c8:b3:9c:d2:64:02:50:3f:de:06:9c:5c:db:2d:50: 46:5d:1b:63:9c:dc:4c:41:6f:e7:26:c4:eb:e2:22:d7:87:00: 87:8b:54:d8:34:ae:b2:b2:dc:f1:7f:f5:18:9e:26:7f:76:8b: eb:94:48:1a:d5:b0:31:ac:06:ce:a0:b9:59:cb:dd:16:e0:5c: 0a:d5:a9:28:29:a3:e0:ed:9b:04:89:2a:a9:aa:45:01:30:f6: d5:b4:3b:73:7d:56:16:41:9f:f0:e2:45:3d:a8:45:84:92:a4: 18:f8:4f:c9:1d:5c:29:fa:a1:a7:a9:26:ef:6e:fd:da:b0:48: df:9a:ac:78:1d:6b:a0:bb:f7:2e:5b:f5:63:2c:59:1b:ee:7e: 68:f0:89:51:30:81:ae:7f:df:5a:dd:f5:4f:f4:0d:d7:c8:27: 0d:2c:4c:aa:7f:8c:da:16:b3:07:76:c7:c3:30:86:0a:b3:b8: 4c:fe:49:6b:03:90:cb:63:ca:88:92:1d:b2:a2:a1:03:b9:70: 31:97:a0:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUwNTMwMTgyNDQyWhcNMjUwNjA2MTgyNDQyWjAYMRYwFAYD VQQDEw02ODM5ZjdlYS01MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkyeyrvG0d6Mq/mjAKWq567bPiL9Ubn+SBw5/W43qD0N/nuZRE6Efqz/O5oG rPZfgg1071PW4M+gwIB+UdcOaOdGXjArUN1KjrJ+iDqnHem7/0wcZ9n4E5qXgup6 tbWDBV8aPyfb+0oGtB+eRnQL7k6wmZ95IIeikjzcmtuszCn+Dt4AkIEnjE1D9r1W cImUR+sb11XHv0ws/XD8lMcjV1LqYj/bVqjj5738FDV/0Fn5ziibrCnKjEWLnO/l Lzg0ZcVoFHEBQ1LeXzx+c6ZF6WmrGjXgpiulDLQZ50sYNu4d4QMDDAgRW6841SA+ K+jgtxx1DueqbvpsvqEn4sEFvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABhN538 x6nCy65doSsuDx7TCosCMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7q1o5v7d/lNq3b7uwYS9pYz/fEgDV2J0VyPE3DMXj7BjjQp5B+UnM 2bEQKOVHoJCwgiE5MggkrRTIs5zSZAJQP94GnFzbLVBGXRtjnNxMQW/nJsTr4iLX hwCHi1TYNK6ystzxf/UYniZ/dovrlEga1bAxrAbOoLlZy90W4FwK1akoKaPg7ZsE iSqpqkUBMPbVtDtzfVYWQZ/w4kU9qEWEkqQY+E/JHVwp+qGnqSbvbv3asEjfmqx4 HWugu/cuW/VjLFkb7n5o8IlRMIGuf99a3fVP9A3XyCcNLEyqf4zaFrMHdsfDMIYK s7hM/klrA5DLY8qIkh2yoqEDuXAxl6Ai -----END CERTIFICATE-----Generated at Sat May 31 17:06:23 2025 by rpki-client