$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json) Hash identifier: o6WmiHGj9gw/NvYyovojP51/DLjOssMaQeKko2A+K8E= Subject key identifier: 81:1C:89:49:42:03:D8:22:D7:C1:84:EF:8A:47:F0:08:90:A5:31:05 Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft Manifest number: 06 Signing time: Tue 01 Jul 2025 08:58:20 +0000 Manifest this update: Tue 01 Jul 2025 08:58:19 +0000 Manifest next update: Tue 08 Jul 2025 08:58:19 +0000 Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: LcDAI+nEmCsmZHdu+0IKQaqQiCLt/bn+eoVufDoYRZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Validity Not Before: Jul 1 08:58:19 2025 GMT Not After : Jul 8 08:58:19 2025 GMT Subject: CN=6863a32b-0461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f5:59:7f:c3:60:93:6e:b7:05:a7:67:9a:93: e7:31:7c:74:03:71:d4:8d:40:6c:29:50:73:b7:da: 2b:cd:01:27:6a:42:9d:a0:cc:7b:39:71:88:11:51: 74:d4:2a:9a:f9:77:16:19:8c:4d:23:e6:dc:e3:63: dd:72:e2:9d:9c:50:fd:ac:5f:9a:b4:d0:87:14:4e: 5a:3d:8c:10:c2:d1:b2:fe:b6:ea:d0:9c:37:a9:46: 59:29:eb:4a:d4:e6:4b:1c:ee:c7:fb:14:7e:f2:0b: c4:6f:74:ca:ff:fb:98:4b:96:55:e7:95:6b:5c:50: 7c:bd:68:b6:c7:50:0a:56:c5:d2:40:b2:8d:31:f2: c6:31:c4:dd:06:84:0e:56:af:0e:df:d6:db:ac:47: 1e:78:c9:63:11:da:29:f0:4d:63:e1:9b:f9:df:35: fd:fb:0c:e4:fd:e2:b6:7c:ad:71:45:19:d6:41:0d: a3:d8:79:7b:64:55:99:72:aa:d6:aa:27:df:ee:a9: 5e:6a:5f:d4:61:07:45:a6:47:88:d4:ad:95:85:f5: f9:9c:54:dc:50:7d:e8:af:fd:2f:f7:d3:37:ed:68: e1:92:5c:21:e4:dd:a4:dc:01:f1:3f:84:e0:05:18: 97:b9:83:81:d7:06:04:63:e3:d1:d3:e1:29:49:2c: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:89:49:42:03:D8:22:D7:C1:84:EF:8A:47:F0:08:90:A5:31:05 X509v3 Authority Key Identifier: keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:90:aa:3a:b8:10:b9:f4:93:d9:aa:7c:51:4a:1c:2f:98:c4: f6:3a:3d:6d:00:da:74:00:9c:97:62:62:a0:06:a6:9d:df:56: 6a:d5:b2:b7:66:d3:ab:8f:5b:0d:c2:f8:da:9a:33:13:ac:ed: ce:a3:ae:03:97:ef:d2:2a:6d:fe:b8:05:e2:f9:cc:6c:3d:3c: 76:df:0b:7a:1e:9d:ff:e0:3a:3f:4e:66:a2:28:31:4d:e9:1b: 43:e3:b1:70:be:e3:fa:ce:d9:99:63:42:f2:34:14:80:67:f4: ce:84:c3:3c:41:9c:7f:48:c1:c6:b5:9c:8e:e8:db:36:65:f1: 50:c2:60:c1:37:c0:6e:4e:0a:cc:d2:3b:6d:b6:31:fa:57:aa: 50:16:ee:29:39:71:fb:e8:76:e0:2f:04:cd:90:f0:e9:54:a7: 14:42:06:31:74:76:62:37:9a:f3:13:81:51:dc:f9:31:9b:36: e4:6b:d5:e1:e9:a6:71:09:cf:1d:ad:06:6b:27:be:5f:a2:3d: ce:8d:4f:8d:99:27:74:ea:84:a7:b5:41:62:5f:b0:4c:e8:25: bf:3a:60:e5:ac:fb:e5:74:75:19:e2:5c:67:8f:1b:71:b6:de: 3d:1b:95:ac:6c:6d:42:6a:2c:a7:62:e9:5c:ce:b3:56:1b:46: e8:1e:fd:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNjI1NUFGMUM1NEM3MEY2MDc0RDhCMEFDQTFBQjVDQjg3 ODM4NzYyNzAeFw0yNTA3MDEwODU4MTlaFw0yNTA3MDgwODU4MTlaMBgxFjAUBgNV BAMTDTY4NjNhMzJiLTA0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD49Vl/w2CTbrcFp2eak+cxfHQDcdSNQGwpUHO32ivNASdqQp2gzHs5cYgRUXTU Kpr5dxYZjE0j5tzjY91y4p2cUP2sX5q00IcUTlo9jBDC0bL+turQnDepRlkp60rU 5ksc7sf7FH7yC8RvdMr/+5hLllXnlWtcUHy9aLbHUApWxdJAso0x8sYxxN0GhA5W rw7f1tusRx54yWMR2inwTWPhm/nfNf37DOT94rZ8rXFFGdZBDaPYeXtkVZlyqtaq J9/uqV5qX9RhB0WmR4jUrZWF9fmcVNxQfeiv/S/30zftaOGSXCHk3aTcAfE/hOAF GJe5g4HXBgRj49HT4SlJLGpfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgRyJSUID 2CLXwYTvikfwCJClMQUwHwYDVR0jBBgwFoAUYlWvHFTHD2B02LCsoatcuHg4dicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzkzRUZFMkI0NEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWxXdkhGVEhEMkIwMkxDc29hdGN1SGc0ZGljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzkzRUZFMkI0NEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJC MDJMQ3NvYXRjdUhnNGRpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2Qqjq4ELn0k9mqfFFKHC+YxPY6PW0A2nQAnJdiYqAGpp3fVmrVsrdm 06uPWw3C+NqaMxOs7c6jrgOX79Iqbf64BeL5zGw9PHbfC3oenf/gOj9OZqIoMU3p G0PjsXC+4/rO2ZljQvI0FIBn9M6EwzxBnH9Iwca1nI7o2zZl8VDCYME3wG5OCszS O222MfpXqlAW7ik5cfvoduAvBM2Q8OlUpxRCBjF0dmI3mvMTgVHc+TGbNuRr1eHp pnEJzx2tBmsnvl+iPc6NT42ZJ3TqhKe1QWJfsEzoJb86YOWs++V0dRniXGePG3G2 3j0blaxsbUJqLKdi6VzOs1YbRuge/QM= -----END CERTIFICATE-----Generated at Tue Jul 1 19:19:46 2025 by rpki-client