$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: u8fkxHKR6i1x0Q1O9/8XbQbyZkQ0dVC8F+l26NHM6jw= Subject key identifier: 65:52:F1:D6:17:C8:CE:54:4E:C8:FE:93:26:65:F2:09:E5:6C:1B:94 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 0407 Signing time: Mon 21 Jul 2025 00:51:27 +0000 Manifest this update: Mon 21 Jul 2025 00:51:27 +0000 Manifest next update: Mon 28 Jul 2025 00:51:27 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: P+gb6XLV9oCqjZRaQ5tIW0C1yaZ+1QpGeDF9ark9mdc=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=) 3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=) 4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: P7ML1zua1vWGcEbBxHBGy+N0awfVzYw0xfSbdU5Alt4=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Jul 21 00:51:27 2025 GMT Not After : Jul 28 00:51:27 2025 GMT Subject: CN=687d8f0f-aa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:2a:ce:f1:0a:86:9b:c7:b2:a2:12:a2:84: 1b:f7:26:27:3b:ee:7d:86:16:42:70:c6:83:89:d5: 06:98:e0:ae:21:c3:94:b2:2d:15:11:56:91:03:c2: 22:df:9a:52:65:f5:dd:92:81:3b:92:aa:90:7b:23: 80:2e:b8:1c:d2:98:a9:1d:9f:bc:d4:32:a6:9a:6a: f6:83:b6:aa:45:63:17:3a:e6:45:da:f8:49:78:d8: 09:92:75:b7:a9:c8:95:72:09:15:09:4a:37:01:8c: dc:0e:65:ee:56:41:04:3a:f8:86:6c:7b:a0:38:7e: 9e:7b:66:a0:4e:6c:b7:39:dc:d9:00:e3:5d:3b:83: 3d:de:f2:ec:1b:b0:40:0a:ee:42:0c:66:0e:39:d6: 96:75:99:d1:1d:80:5a:ab:eb:2a:fb:b1:24:93:38: d2:e8:f2:71:da:7e:81:5c:9c:a5:7c:5d:e7:dd:df: 3b:d2:7a:b2:16:ca:b1:aa:05:95:39:63:ad:5c:7a: 98:e3:2b:21:a3:ad:f8:63:86:20:5b:08:ab:d5:4d: bc:2a:e8:63:6d:3b:1c:be:0b:41:9d:41:f6:73:d7: db:20:7f:8e:2f:d3:3a:e8:25:5e:c2:ff:39:08:3e: 6a:ff:16:1e:b6:69:83:f1:87:aa:11:3b:1f:64:23: 4c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:F1:D6:17:C8:CE:54:4E:C8:FE:93:26:65:F2:09:E5:6C:1B:94 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:96:aa:dc:81:1b:f3:93:fd:dc:f7:d2:9a:30:05:4e:39:97: 2c:31:32:49:8c:1d:f1:8f:d0:c2:ce:3f:a1:1c:0c:86:5d:d9: 63:c5:bf:69:c4:7b:36:00:71:c2:1f:95:13:89:db:a6:31:3a: 38:7f:66:a4:12:27:7b:1d:9d:25:bb:11:e7:d3:fa:e3:4b:a2: a9:5c:11:cc:92:a3:a7:3d:72:77:9a:2a:0d:9c:63:bd:c8:8d: b9:8a:7a:63:17:55:77:2b:70:8c:43:39:f2:a9:9e:41:52:ac: e0:ec:d2:6d:7a:4f:15:48:48:5b:5f:44:c3:ef:66:c4:a7:d8: a9:c1:51:fa:e2:ad:02:50:66:2b:fc:d6:ca:65:e3:12:dc:7f: c1:81:d4:10:88:22:d6:24:a1:25:e6:84:f4:02:b2:d3:f1:13: 6c:fc:66:cd:cf:f3:d6:84:73:fe:dc:28:68:2c:52:09:ca:f5: 73:6f:df:4c:43:97:f8:40:27:f7:54:7d:92:49:0d:48:d7:94: f7:a9:bd:fe:8b:a2:ca:e8:01:d2:79:e7:15:01:8a:1a:df:8a: ae:41:a3:71:60:6e:8b:3b:9b:ad:69:a2:b9:c5:ca:64:b0:12: da:1b:a1:54:a2:41:7f:95:3e:c0:8e:a1:b3:d8:cb:da:69:32: 6e:1c:43:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUwNzIxMDA1MTI3WhcNMjUwNzI4MDA1MTI3WjAYMRYwFAYD VQQDEw02ODdkOGYwZi1hYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TMqzvEKhpvHsqISooQb9yYnO+59hhZCcMaDidUGmOCuIcOUsi0VEVaRA8Ii 35pSZfXdkoE7kqqQeyOALrgc0pipHZ+81DKmmmr2g7aqRWMXOuZF2vhJeNgJknW3 qciVcgkVCUo3AYzcDmXuVkEEOviGbHugOH6ee2agTmy3OdzZAONdO4M93vLsG7BA Cu5CDGYOOdaWdZnRHYBaq+sq+7EkkzjS6PJx2n6BXJylfF3n3d870nqyFsqxqgWV OWOtXHqY4ysho634Y4YgWwir1U28KuhjbTscvgtBnUH2c9fbIH+OL9M66CVewv85 CD5q/xYetmmD8YeqETsfZCNMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVS8dYX yM5UTsj+kyZl8gnlbBuUMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4lqrcgRvzk/3c99KaMAVOOZcsMTJJjB3xj9DCzj+hHAyGXdljxb9p xHs2AHHCH5UTidumMTo4f2akEid7HZ0luxHn0/rjS6KpXBHMkqOnPXJ3mioNnGO9 yI25inpjF1V3K3CMQznyqZ5BUqzg7NJtek8VSEhbX0TD72bEp9ipwVH64q0CUGYr /NbKZeMS3H/BgdQQiCLWJKEl5oT0ArLT8RNs/GbNz/PWhHP+3ChoLFIJyvVzb99M Q5f4QCf3VH2SSQ1I15T3qb3+i6LK6AHSeecVAYoa34quQaNxYG6LO5utaaK5xcpk sBLaG6FUokF/lT7AjqGz2MvaaTJuHEN5 -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:42 2025 by rpki-client