$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: 2ktaYNpChdbPmG3HSSBfnRpkpKxJdXuc6gMlQt6tGqQ= Subject key identifier: 7F:B2:06:38:83:3D:37:2B:10:1B:6B:15:2B:4A:E5:05:5E:6B:B3:F1 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0267 Signing time: Sat 31 May 2025 01:57:17 +0000 Manifest this update: Sat 31 May 2025 01:57:17 +0000 Manifest next update: Sat 07 Jun 2025 01:57:17 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: WmUJP3+GKzHBIeDwZgeJhkorXNMt3NpOHZ4SNZgqRCU=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: May 31 01:57:17 2025 GMT Not After : Jun 7 01:57:17 2025 GMT Subject: CN=683a61fd-20c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:8a:70:6a:1f:eb:ea:67:fe:a0:ae:df:67: ae:ad:41:f8:32:12:c2:49:82:30:a9:e5:bd:04:bb: 7d:76:dc:87:21:b3:0b:6a:30:1c:b6:6c:2d:01:77: 57:5a:ad:00:16:fe:4d:85:f3:1b:3a:fc:9b:90:7a: 63:11:1f:ff:f1:19:4d:fd:39:86:c5:84:1a:ff:c4: 01:69:b7:f9:84:6c:e8:43:1f:db:2a:97:b8:c2:14: cd:5b:52:04:8f:34:30:63:77:7d:89:aa:af:68:fd: 25:51:2e:43:2f:67:f1:ef:91:db:19:b4:45:16:a1: 6f:97:b4:40:7e:89:ec:5d:d8:7a:35:e0:75:65:9f: ba:83:40:ed:91:cd:79:21:c3:69:2d:7b:09:8f:35: 41:8e:31:ea:24:8b:36:6f:b0:5b:85:5e:90:50:5d: 16:60:83:b5:d9:cc:d1:64:c8:e0:43:27:cb:e6:dd: ad:cd:ab:fb:90:12:d4:61:6c:69:4b:14:d9:d6:fe: 35:88:bf:5d:3e:0e:c9:02:4d:a0:7e:b0:4f:c9:c6: 9e:26:05:38:d7:6a:9c:52:d3:4d:9e:a8:fa:16:5a: 97:a6:8a:11:46:2d:b5:a4:ec:7f:81:c7:9f:12:c0: 2b:22:b0:64:ff:4f:fa:35:7a:eb:91:c5:65:3e:27: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:06:38:83:3D:37:2B:10:1B:6B:15:2B:4A:E5:05:5E:6B:B3:F1 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b1:0f:da:22:ed:c2:8f:e6:f8:af:68:e5:ee:01:f8:1c:8d: cb:df:6c:03:f4:65:ca:69:2f:47:d3:98:77:aa:30:15:b2:85: bc:70:f4:c1:12:2b:f7:78:f2:bd:d4:b6:e7:3b:e4:fb:e0:e3: 1c:ab:45:39:de:df:8a:59:25:b7:e9:36:ba:de:79:30:fb:45: 68:67:7e:87:46:3e:7a:1b:0a:4a:4e:91:8a:84:82:7e:14:2d: 02:43:a5:a7:ca:52:b3:f4:f6:ac:17:fc:51:53:4f:65:59:43: c8:16:d1:ae:73:bc:8d:c2:fc:f0:e6:4e:cd:07:c9:8e:0d:49: 78:3a:48:21:9d:0c:95:b7:08:a9:49:ab:6a:a6:12:94:04:8f: 0f:30:ab:fc:81:67:9b:2d:7c:93:92:bd:1a:8b:3d:bc:90:6b: e9:bd:80:8d:33:14:89:ca:f1:93:62:13:48:7e:96:2b:90:c9: 17:6d:ef:81:3d:f5:9d:db:3c:a4:22:fd:2d:d8:84:d8:9e:b7: c0:fa:b3:a3:3a:fc:ac:42:d7:00:60:78:e9:ce:ac:2a:ac:fd: 86:e1:4f:94:e1:e8:2e:c3:b2:43:14:4e:58:b7:a9:83:6e:d8: f4:34:52:bc:f9:20:51:b5:8a:00:45:34:b5:04:33:f4:fa:14: bc:c9:18:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwNTMxMDE1NzE3WhcNMjUwNjA3MDE1NzE3WjAYMRYwFAYD VQQDEw02ODNhNjFmZC0yMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVKKcGof6+pn/qCu32eurUH4MhLCSYIwqeW9BLt9dtyHIbMLajActmwtAXdX Wq0AFv5NhfMbOvybkHpjER//8RlN/TmGxYQa/8QBabf5hGzoQx/bKpe4whTNW1IE jzQwY3d9iaqvaP0lUS5DL2fx75HbGbRFFqFvl7RAfonsXdh6NeB1ZZ+6g0Dtkc15 IcNpLXsJjzVBjjHqJIs2b7BbhV6QUF0WYIO12czRZMjgQyfL5t2tzav7kBLUYWxp SxTZ1v41iL9dPg7JAk2gfrBPycaeJgU412qcUtNNnqj6FlqXpooRRi21pOx/gcef EsArIrBk/0/6NXrrkcVlPif6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+yBjiD PTcrEBtrFStK5QVea7PxMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVsQ/aIu3Cj+b4r2jl7gH4HI3L32wD9GXKaS9H05h3qjAVsoW8cPTB Eiv3ePK91LbnO+T74OMcq0U53t+KWSW36Ta63nkw+0VoZ36HRj56GwpKTpGKhIJ+ FC0CQ6WnylKz9PasF/xRU09lWUPIFtGuc7yNwvzw5k7NB8mODUl4OkghnQyVtwip SatqphKUBI8PMKv8gWebLXyTkr0aiz28kGvpvYCNMxSJyvGTYhNIfpYrkMkXbe+B PfWd2zykIv0t2ITYnrfA+rOjOvysQtcAYHjpzqwqrP2G4U+U4eguw7JDFE5Yt6mD btj0NFK8+SBRtYoARTS1BDP0+hS8yRgx -----END CERTIFICATE-----Generated at Sat May 31 16:52:08 2025 by rpki-client