$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: eYePvIG9tHTixAEU+Mv9Qnx/Y/PWxf8GnV5lLvdqkw4= Subject key identifier: C0:D6:8C:01:0E:B9:11:47:F3:47:69:81:1B:EF:54:95:59:C3:AD:D1 Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 040A Signing time: Mon 09 Jun 2025 00:01:18 +0000 Manifest this update: Mon 09 Jun 2025 00:01:17 +0000 Manifest next update: Mon 16 Jun 2025 00:01:17 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: pwYG6tFb7yAqUX3FJwlqsQjr55MdJr5FbNMyjqoDsH0=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Jun 9 00:01:17 2025 GMT Not After : Jun 16 00:01:17 2025 GMT Subject: CN=6846244e-7568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:cc:2e:ee:93:59:0f:e1:77:b6:77:b3:3b: 36:47:01:81:c6:0a:a9:a7:a3:2e:93:44:fa:c9:21: ae:9b:c3:72:a7:60:53:47:fd:3a:42:09:5c:20:1b: 17:f7:a3:49:7a:02:94:8d:6b:13:a5:78:98:ae:24: b0:8a:b8:84:f0:f0:18:ba:d5:66:f4:61:d7:4d:b4: db:a6:67:60:e5:57:5f:25:44:ea:e7:c5:2d:52:1e: 59:16:21:d9:54:50:21:75:55:f3:d3:02:3e:09:83: e3:f5:53:21:ca:a1:80:ea:c4:9e:d6:24:86:69:1b: 30:c6:9a:98:d7:bb:7c:de:57:f3:84:b5:1e:39:dd: 4c:52:e1:17:2f:83:c0:a8:ad:90:fa:40:4c:6d:1d: 96:1e:90:da:fb:24:ea:47:20:8d:47:b0:02:5a:8c: e0:b0:71:01:bd:ba:c4:d0:20:cf:a5:16:c3:70:d6: c8:bd:22:60:44:59:e6:d3:38:e7:09:90:d0:57:42: a9:f7:a5:c4:e3:52:44:d6:81:f1:91:52:d4:75:81: 8e:aa:73:32:e9:c7:4c:c6:3b:c7:6c:6f:c4:b0:df: 80:e4:06:ab:e6:a3:c8:6b:7c:b0:52:26:56:27:06: 10:fb:64:57:6e:79:c7:8f:69:3f:40:4b:4c:1b:70: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:8C:01:0E:B9:11:47:F3:47:69:81:1B:EF:54:95:59:C3:AD:D1 X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:b6:c5:de:dc:d6:87:2e:08:e4:3e:c6:1f:e0:c7:cf:c6:df: 00:e7:eb:f1:d6:e8:49:61:18:8c:88:00:43:24:61:82:fe:db: ce:4b:53:80:b6:af:cc:03:20:6d:3c:aa:50:5e:8c:be:9c:a5: c6:9d:55:4f:5d:36:e8:4e:69:6d:b4:8c:17:54:cb:ed:99:c3: 7c:70:e8:65:06:d6:d1:5d:da:37:08:6f:d9:e3:de:ef:07:d4: b3:ab:c5:53:a3:87:4b:cb:4d:d0:d3:4b:43:82:90:94:df:e9: 3e:6b:80:e9:47:f7:df:be:67:17:2b:cd:3e:43:79:ca:2f:40: c9:00:10:4a:5c:ee:6c:2e:61:cf:a8:26:19:eb:3d:c7:86:3b: 49:45:65:a5:b0:96:dc:be:eb:77:51:34:e9:a3:02:a2:03:3e: 94:e4:40:d8:93:50:28:41:1a:90:ee:b5:a0:70:3e:79:7e:6a: 8a:cd:ab:10:16:92:6f:7b:ac:a5:c8:43:e9:d9:7c:c9:e8:61: b7:9d:c3:ad:b2:51:b8:94:fa:d7:dd:0b:05:97:f4:df:56:ec: c1:9f:aa:33:f4:38:8e:d8:a2:86:34:d0:cb:b9:0c:8b:87:6f: 74:5f:20:63:0b:c2:bb:85:92:21:8f:2f:81:1c:02:28:11:c9: 49:65:33:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwNjA5MDAwMTE3WhcNMjUwNjE2MDAwMTE3WjAYMRYwFAYD VQQDEw02ODQ2MjQ0ZS03NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWfMLu6TWQ/hd7Z3szs2RwGBxgqpp6Muk0T6ySGum8Nyp2BTR/06QglcIBsX 96NJegKUjWsTpXiYriSwiriE8PAYutVm9GHXTbTbpmdg5VdfJUTq58UtUh5ZFiHZ VFAhdVXz0wI+CYPj9VMhyqGA6sSe1iSGaRswxpqY17t83lfzhLUeOd1MUuEXL4PA qK2Q+kBMbR2WHpDa+yTqRyCNR7ACWozgsHEBvbrE0CDPpRbDcNbIvSJgRFnm0zjn CZDQV0Kp96XE41JE1oHxkVLUdYGOqnMy6cdMxjvHbG/EsN+A5Aar5qPIa3ywUiZW JwYQ+2RXbnnHj2k/QEtMG3AtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDWjAEO uRFH80dpgRvvVJVZw63RMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/tsXe3NaHLgjkPsYf4MfPxt8A5+vx1uhJYRiMiABDJGGC/tvOS1OA tq/MAyBtPKpQXoy+nKXGnVVPXTboTmlttIwXVMvtmcN8cOhlBtbRXdo3CG/Z497v B9Szq8VTo4dLy03Q00tDgpCU3+k+a4DpR/ffvmcXK80+Q3nKL0DJABBKXO5sLmHP qCYZ6z3HhjtJRWWlsJbcvut3UTTpowKiAz6U5EDYk1AoQRqQ7rWgcD55fmqKzasQ FpJve6ylyEPp2XzJ6GG3ncOtslG4lPrX3QsFl/TfVuzBn6oz9DiO2KKGNNDLuQyL h290XyBjC8K7hZIhjy+BHAIoEclJZTNd -----END CERTIFICATE-----Generated at Mon Jun 9 22:29:15 2025 by rpki-client