$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: B/G15gPV71gWQyEsRo6+n20GOAAa8/IVd+ySPMvMORU= Subject key identifier: DC:96:18:9A:3C:5D:28:41:2D:80:01:14:51:F8:22:6A:B2:B7:3E:B5 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 0102 Signing time: Sat 31 May 2025 04:42:27 +0000 Manifest this update: Sat 31 May 2025 04:42:27 +0000 Manifest next update: Sat 07 Jun 2025 04:42:27 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: j2rnsS5up25A0C4gZ4FFXCI/qkkXwirm/D6309zM2Gk=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: May 31 04:42:27 2025 GMT Not After : Jun 7 04:42:27 2025 GMT Subject: CN=683a88b3-71f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:a0:71:bf:90:d5:0d:0a:a5:3b:96:e9:fc: b9:f1:1a:ed:cd:7a:da:99:55:d7:6d:00:cd:c3:0e: 8a:51:07:49:e3:2c:36:4c:cf:f7:04:e9:28:02:1e: 81:35:16:8b:71:76:8f:ed:32:e0:6c:6b:68:6d:4a: 52:ea:34:10:66:c9:50:f0:69:c3:b2:cd:59:fb:b6: 3e:9b:88:d9:86:5c:47:2b:61:7f:99:db:f4:0d:01: 65:82:e2:fa:76:f8:30:cd:40:d9:bb:8a:50:26:42: cf:9b:1a:0b:14:a2:c2:35:93:4d:5f:28:90:ef:68: db:7c:1c:b3:6d:fa:01:95:0b:0f:62:37:f8:df:fd: 86:a5:24:b4:4f:ef:ec:43:63:c6:96:60:dd:b8:ca: b0:14:bf:f3:5b:83:1e:50:66:14:17:1f:07:bf:6e: 7d:b8:57:8c:9f:8b:6d:9e:3d:5d:0e:a9:80:75:32: b9:c5:b0:72:c2:d6:86:79:81:d9:b3:4c:27:ee:7e: 2e:5b:1c:8f:b1:d1:f3:24:55:af:b2:d4:d6:8b:b2: 83:1d:82:fb:bb:cb:41:2e:9f:7e:00:a8:65:35:d4: 0d:79:ea:47:97:df:c2:70:94:6b:04:1e:6d:ce:2a: d9:21:8b:a6:17:2c:36:d0:5e:57:6e:f9:6c:25:98: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:18:9A:3C:5D:28:41:2D:80:01:14:51:F8:22:6A:B2:B7:3E:B5 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:9a:20:71:1a:6f:44:a9:a3:ec:b2:29:5e:2e:28:ec:5a: 7b:ea:c2:dd:81:04:92:b2:c7:9f:2f:5f:45:27:98:97:e3:d2: 2a:7e:92:44:06:8f:81:1f:5a:18:23:e9:23:00:c2:66:41:63: d2:82:57:01:38:3f:86:fb:03:b1:43:58:a7:22:13:f5:d2:60: 08:32:90:70:6d:5d:fe:3f:24:bb:a8:34:60:e1:28:65:fa:66: bc:6b:80:db:51:81:0d:c7:a0:ad:35:b4:53:8c:da:a0:b2:23: be:81:0b:67:f0:f8:06:80:27:d0:b8:47:da:10:f6:f7:b7:66: a2:61:14:e0:f1:42:db:35:f9:48:48:43:14:77:f0:ed:dd:29: 91:12:82:19:c1:2e:a0:58:67:0c:46:68:d9:44:54:76:86:b7: d5:1a:51:fa:92:bc:76:e1:9b:0b:3f:85:2e:03:15:51:db:dc: d0:6a:48:35:19:8d:d8:6b:a8:91:a6:ac:a5:39:61:fe:72:22: 9a:56:5e:7b:43:46:e0:c1:cb:5f:82:db:36:4d:bd:cc:7e:10: db:2e:76:d0:59:1e:35:0f:0c:46:d6:ba:c6:f9:bf:c3:cd:f4: 9b:e5:0e:5a:c3:5a:c0:28:f1:31:03:4c:cd:0c:b7:87:32:0b: e1:0b:d4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwNTMxMDQ0MjI3WhcNMjUwNjA3MDQ0MjI3WjAYMRYwFAYD VQQDEw02ODNhODhiMy03MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mmgcb+Q1Q0KpTuW6fy58RrtzXramVXXbQDNww6KUQdJ4yw2TM/3BOkoAh6B NRaLcXaP7TLgbGtobUpS6jQQZslQ8GnDss1Z+7Y+m4jZhlxHK2F/mdv0DQFlguL6 dvgwzUDZu4pQJkLPmxoLFKLCNZNNXyiQ72jbfByzbfoBlQsPYjf43/2GpSS0T+/s Q2PGlmDduMqwFL/zW4MeUGYUFx8Hv259uFeMn4ttnj1dDqmAdTK5xbBywtaGeYHZ s0wn7n4uWxyPsdHzJFWvstTWi7KDHYL7u8tBLp9+AKhlNdQNeepHl9/CcJRrBB5t zirZIYumFyw20F5XbvlsJZiNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyWGJo8 XShBLYABFFH4Imqytz61MB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTFpogcRpvRKmj7LIpXi4o7Fp76sLdgQSSssefL19FJ5iX49IqfpJE Bo+BH1oYI+kjAMJmQWPSglcBOD+G+wOxQ1inIhP10mAIMpBwbV3+PyS7qDRg4Shl +ma8a4DbUYENx6CtNbRTjNqgsiO+gQtn8PgGgCfQuEfaEPb3t2aiYRTg8ULbNflI SEMUd/Dt3SmREoIZwS6gWGcMRmjZRFR2hrfVGlH6krx24ZsLP4UuAxVR29zQakg1 GY3Ya6iRpqylOWH+ciKaVl57Q0bgwctfgts2Tb3MfhDbLnbQWR41DwxG1rrG+b/D zfSb5Q5aw1rAKPExA0zNDLeHMgvhC9TT -----END CERTIFICATE-----Generated at Sat May 31 15:09:34 2025 by rpki-client