$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: pJr+vqamoxKevLzBNITitZC7bTCkdGASSMX8Fmz39r0= Subject key identifier: 0C:4E:58:2A:22:88:F2:38:7F:B0:16:63:DF:90:ED:8A:7D:32:29:FC Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 9D Signing time: Sat 19 Jul 2025 06:30:00 +0000 Manifest this update: Sat 19 Jul 2025 06:30:00 +0000 Manifest next update: Sat 26 Jul 2025 06:30:00 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: r2mlgVQM4WG4iCwBBjv8o7ZoCSGYXe3yn46jJRx8QeM=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Jul 19 06:30:00 2025 GMT Not After : Jul 26 06:30:00 2025 GMT Subject: CN=687b3b68-73d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:79:b5:fe:2d:6a:c1:6a:53:b3:b8:22:e9: 85:a4:ab:05:f0:99:0d:fe:38:9b:97:a4:a7:f2:96: 26:93:85:79:1c:d0:d9:67:d6:cd:4e:4c:64:31:42: e2:bf:7a:af:ae:25:12:70:0c:23:53:c2:bb:1c:b9: ba:8a:71:fa:ce:88:95:7b:2f:0a:33:5e:54:77:c0: 62:aa:54:8c:c2:33:4a:20:6e:df:c1:08:6a:8b:8f: b4:2b:7d:44:78:3a:df:ff:b2:8b:85:db:80:b6:8e: b6:11:0d:14:36:bd:7e:6f:b0:38:56:81:e7:03:56: 84:2a:93:99:65:35:68:c2:06:0c:44:4d:48:28:12: 00:94:b2:ca:14:3e:7d:38:31:40:4f:9d:6b:1e:6b: 1d:de:ec:7c:d6:64:70:1e:a9:a9:42:45:0f:b1:60: 8e:65:dd:2d:4f:10:74:45:7e:36:89:31:c6:de:a3: b4:dc:b0:c8:e0:3a:b4:48:00:98:ea:30:50:e5:b3: 2a:b4:53:99:ab:41:99:e1:72:98:4f:00:f1:4b:50: 49:51:db:47:c3:bd:33:2d:8d:4e:3d:00:db:e8:59: 7f:76:cd:a6:1d:66:df:80:aa:60:ff:07:d1:6b:50: a3:29:81:6a:48:6f:82:ca:06:ee:06:71:04:a5:fb: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:58:2A:22:88:F2:38:7F:B0:16:63:DF:90:ED:8A:7D:32:29:FC X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b1:53:05:81:89:d7:a1:08:9a:ab:2a:77:8e:25:e7:fb:be: 3e:09:27:51:23:48:66:c3:9e:47:a9:0c:df:9e:b1:9e:39:16: 29:41:42:b6:21:82:3e:4a:99:64:b5:43:ce:85:99:61:7b:ac: 32:94:a3:af:85:82:75:f4:59:85:0e:dd:f1:88:4d:d1:d7:34: 14:20:7c:9a:4d:20:ca:40:32:52:22:cb:6e:a1:8a:b0:bd:b6: 2a:da:e2:ab:56:c6:18:79:f0:4b:75:54:26:e6:ec:a0:a4:cf: df:cb:52:ab:c3:92:5e:91:0b:87:f7:44:a9:23:91:fe:d0:72: 0c:3e:f4:33:e9:18:2f:cd:ef:9a:91:43:ff:1d:10:03:e8:a3: 5c:a6:71:63:04:51:80:ae:00:e3:8a:f6:75:ae:07:66:7c:a2: 30:2a:b3:e3:3f:1a:7d:23:c7:7c:f5:98:c8:e7:b6:7d:fb:b6: e4:5f:6f:78:e8:af:7f:54:41:19:f9:6e:c5:8e:e6:da:42:9b: fe:7b:78:11:c0:ab:c7:35:70:a2:05:66:a6:22:43:79:0e:4b: e2:20:4a:39:fc:d9:9c:d3:2f:a8:9d:11:18:24:3f:56:dd:36: a8:c5:49:fc:12:2a:e8:d3:8c:0c:ba:b9:9d:d8:dd:51:c7:e9: 88:ff:49:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUwNzE5MDYzMDAwWhcNMjUwNzI2MDYzMDAwWjAYMRYwFAYD VQQDEw02ODdiM2I2OC03M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7F5tf4tasFqU7O4IumFpKsF8JkN/jibl6Sn8pYmk4V5HNDZZ9bNTkxkMULi v3qvriUScAwjU8K7HLm6inH6zoiVey8KM15Ud8BiqlSMwjNKIG7fwQhqi4+0K31E eDrf/7KLhduAto62EQ0UNr1+b7A4VoHnA1aEKpOZZTVowgYMRE1IKBIAlLLKFD59 ODFAT51rHmsd3ux81mRwHqmpQkUPsWCOZd0tTxB0RX42iTHG3qO03LDI4Dq0SACY 6jBQ5bMqtFOZq0GZ4XKYTwDxS1BJUdtHw70zLY1OPQDb6Fl/ds2mHWbfgKpg/wfR a1CjKYFqSG+CygbuBnEEpftTBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxOWCoi iPI4f7AWY9+Q7Yp9Min8MB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBsVMFgYnXoQiaqyp3jiXn+74+CSdRI0hmw55HqQzfnrGeORYpQUK2 IYI+SplktUPOhZlhe6wylKOvhYJ19FmFDt3xiE3R1zQUIHyaTSDKQDJSIstuoYqw vbYq2uKrVsYYefBLdVQm5uygpM/fy1Krw5JekQuH90SpI5H+0HIMPvQz6Rgvze+a kUP/HRAD6KNcpnFjBFGArgDjivZ1rgdmfKIwKrPjPxp9I8d89ZjI57Z9+7bkX294 6K9/VEEZ+W7FjubaQpv+e3gRwKvHNXCiBWamIkN5DkviIEo5/Nmc0y+onREYJD9W 3TaoxUn8Eiro04wMurmd2N1Rx+mI/0mr -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:53 2025 by rpki-client