$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: tvE/nH6G5F78rogzM/+ksv/WYnMPT7OSw0dg+XWZP4k= Subject key identifier: 38:DC:DC:F3:27:5B:D4:0E:03:B2:97:A6:C2:02:E4:A4:23:A7:F4:5F Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 0103 Signing time: Sat 31 May 2025 04:39:22 +0000 Manifest this update: Sat 31 May 2025 04:39:21 +0000 Manifest next update: Sat 07 Jun 2025 04:39:21 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: uhjuVsf9j+YEqPokl+keQruCqz6JV5jTA+q3KCHVZ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: May 31 04:39:21 2025 GMT Not After : Jun 7 04:39:21 2025 GMT Subject: CN=683a87f9-9363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:b8:ff:6e:a0:5c:80:39:f4:65:ec:63:93: df:1d:3a:77:f8:37:77:bb:5b:07:3e:5e:f8:9b:70: d3:21:57:ca:73:ca:45:61:0e:7f:2c:ea:f5:5c:a7: fc:c6:51:e2:a2:ac:61:9f:03:4c:ee:0d:1f:6f:4f: 74:e8:4a:0e:d7:c2:eb:54:77:90:33:c3:0f:88:3a: 6f:1f:c8:21:d8:24:95:c6:e1:1a:cc:06:b8:61:38: 35:81:99:79:bd:11:3e:fe:e9:a9:c0:c3:2b:e7:7d: 1a:bb:19:b1:06:a4:9e:d3:20:c6:f1:2a:bb:7d:6b: 58:bf:39:88:7c:d3:6e:f2:78:b5:b0:94:59:cf:54: 61:7d:ef:43:70:4e:a5:c9:fd:57:1e:e6:57:90:cd: 29:8e:d9:7a:8a:b9:d0:05:5d:97:1f:55:29:22:16: 48:f3:f0:eb:6b:2d:59:ec:68:fc:f7:b6:ff:4c:c6: 3c:7f:9f:cc:3a:73:0e:fd:44:81:c0:ec:97:5c:b1: aa:79:47:bb:89:fb:da:e2:a0:ca:b4:98:5a:fb:69: 1d:14:b4:b6:72:d8:8c:21:ed:47:12:ed:1e:f8:94: c9:69:0c:9e:08:42:08:6e:fc:5f:b8:c8:0e:2a:20: 06:11:b3:72:dd:c8:b7:77:98:58:45:59:7d:9a:dd: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:DC:F3:27:5B:D4:0E:03:B2:97:A6:C2:02:E4:A4:23:A7:F4:5F X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c8:d5:5d:ec:6d:a0:4e:3b:0c:63:0a:dc:f2:43:92:f2:65: 24:1e:c9:49:88:80:e5:38:50:8b:1a:94:c3:36:e1:7b:76:be: 18:86:a4:b0:29:a6:8c:6a:41:a0:41:0b:32:6d:3f:62:92:1a: 8a:31:e6:1c:f5:08:fa:2c:b3:e7:5c:5c:22:bb:05:b6:be:38: 48:52:10:45:dc:4a:aa:6d:f3:98:df:c7:9e:f9:2e:42:d3:19: 0d:6d:10:c3:2a:44:f2:3a:3d:47:20:91:3d:9f:55:b9:34:96: d8:43:b3:65:08:5e:c6:b1:a3:5a:0a:fa:6d:03:4f:f0:9d:16: a8:60:33:56:0f:c4:55:9d:dc:c8:3b:16:44:ab:81:de:c1:87: d1:4f:cf:7c:84:63:6f:21:49:8e:c2:8f:ce:f2:7b:c0:2f:91: 03:88:23:39:2c:83:4b:6f:d0:73:90:6a:49:d2:fb:c4:14:92: d4:c1:b4:4e:9d:6f:f6:cf:ba:fb:46:9c:59:ae:14:d8:34:85: aa:c1:47:26:13:5c:24:50:c5:4c:07:94:42:d8:2f:e1:da:20: d3:16:2a:c2:da:3e:54:3f:99:38:fc:61:30:d4:6c:59:c6:c4: c4:3f:36:5d:5f:b2:dd:40:0d:fe:66:6e:16:8c:37:ea:d4:f3: 86:da:50:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUwNTMxMDQzOTIxWhcNMjUwNjA3MDQzOTIxWjAYMRYwFAYD VQQDEw02ODNhODdmOS05MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoS4/26gXIA59GXsY5PfHTp3+Dd3u1sHPl74m3DTIVfKc8pFYQ5/LOr1XKf8 xlHioqxhnwNM7g0fb0906EoO18LrVHeQM8MPiDpvH8gh2CSVxuEazAa4YTg1gZl5 vRE+/umpwMMr530auxmxBqSe0yDG8Sq7fWtYvzmIfNNu8ni1sJRZz1Rhfe9DcE6l yf1XHuZXkM0pjtl6irnQBV2XH1UpIhZI8/Dray1Z7Gj897b/TMY8f5/MOnMO/USB wOyXXLGqeUe7ifva4qDKtJha+2kdFLS2ctiMIe1HEu0e+JTJaQyeCEIIbvxfuMgO KiAGEbNy3ci3d5hYRVl9mt1l5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjc3PMn W9QOA7KXpsIC5KQjp/RfMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANyNVd7G2gTjsMYwrc8kOS8mUkHslJiIDlOFCLGpTDNuF7dr4YhqSw KaaMakGgQQsybT9ikhqKMeYc9Qj6LLPnXFwiuwW2vjhIUhBF3EqqbfOY38ee+S5C 0xkNbRDDKkTyOj1HIJE9n1W5NJbYQ7NlCF7GsaNaCvptA0/wnRaoYDNWD8RVndzI OxZEq4HewYfRT898hGNvIUmOwo/O8nvAL5EDiCM5LINLb9BzkGpJ0vvEFJLUwbRO nW/2z7r7RpxZrhTYNIWqwUcmE1wkUMVMB5RC2C/h2iDTFirC2j5UP5k4/GEw1GxZ xsTEPzZdX7LdQA3+Zm4WjDfq1POG2lA7 -----END CERTIFICATE-----Generated at Sat May 31 17:07:39 2025 by rpki-client