$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: BWj9VBWlRxTLx7cK6K39VIj3BBMPU9v3ER0WnAIpRZE= Subject key identifier: FC:F8:45:61:30:55:2F:72:73:9F:A6:51:1E:D3:60:B3:6D:1E:1C:9E Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 1E Signing time: Tue 17 Jun 2025 06:45:42 +0000 Manifest this update: Tue 17 Jun 2025 06:45:42 +0000 Manifest next update: Tue 24 Jun 2025 06:45:42 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: sF+fEHf5GdPVc4Y0mxzaFfj7yoJwLvyoeBjh2R3Ttnk=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: AsQWM+7HuozWTCBGDmXSa7QBPRIjHi4ee9IcaHPhl78=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: bD+Fep8IQgDA8vluXrT5vCvPbCgLZmMh8P2tGfHiM1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Jun 17 06:45:42 2025 GMT Not After : Jun 24 06:45:42 2025 GMT Subject: CN=68510f16-9596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d6:3f:53:86:22:cf:70:6b:56:90:4f:a3:26: 42:44:5a:27:23:cb:98:2d:a0:b1:51:62:67:43:d6: d3:0c:9a:33:b0:e2:90:4b:fa:7e:02:f4:3d:d4:2e: b1:43:c4:0f:c0:c4:0e:67:ab:65:9d:36:02:26:b3: a8:30:a9:da:75:e0:c5:2a:75:f9:b8:c7:df:8c:4c: be:a7:ac:00:94:84:92:88:ff:b7:86:ba:84:29:3c: d1:ea:48:9e:7a:94:da:43:26:68:09:22:00:fa:61: 96:12:44:93:42:6d:06:32:7d:fa:9b:0d:12:55:e9: 38:11:80:5c:4a:26:5c:37:f6:6b:b4:ff:f5:69:29: 9f:f7:85:8a:dc:10:f8:fe:cd:14:03:1a:ea:2c:a1: 72:aa:db:59:71:23:3a:f6:8e:0e:ed:67:f9:5e:fd: 4b:ca:fb:01:45:1b:2d:c8:8f:71:ec:3a:7c:50:bf: c0:69:82:89:ee:5b:01:dc:a0:fe:37:a8:70:0a:1f: cb:35:03:13:4a:1a:39:67:8c:14:1d:d0:97:c9:0c: d8:1b:b6:6d:9a:e3:27:7f:d3:2c:38:6e:6e:10:00: 38:68:72:3d:18:92:32:2d:8b:da:b6:c9:f7:6b:9b: 17:f6:43:e4:ce:b7:72:11:65:16:63:e4:52:69:cc: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F8:45:61:30:55:2F:72:73:9F:A6:51:1E:D3:60:B3:6D:1E:1C:9E X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:43:89:df:5f:ca:3e:4c:d8:07:d4:f9:65:96:fe:46:dd:be: 49:d6:50:aa:29:ea:3a:41:6d:5b:2d:bc:18:4f:cc:03:75:61: d1:9b:97:27:13:56:51:fc:b5:07:37:fb:5b:02:0d:57:93:b2: 6e:35:e6:49:c9:8b:ff:8d:2f:83:78:99:4e:df:dd:50:b5:dc: d4:9c:2a:d8:42:f2:c5:05:7b:ed:44:e1:0b:34:34:27:ab:e9: c0:11:ab:90:4b:29:b5:6f:49:8a:bf:a7:d6:28:ee:64:a4:79: 32:99:7b:12:c9:c9:7e:99:e3:7a:11:c8:dd:c9:04:44:18:49: ad:e5:09:db:0b:0b:e5:1d:89:cc:33:60:68:5f:ed:88:9b:54: 3b:6d:91:bc:f1:33:c8:93:4a:08:23:39:2f:cd:98:79:82:a7: 98:ed:66:74:f8:e4:9a:71:99:35:e2:c7:fa:c3:06:89:d7:e2: 06:06:5c:4d:2d:af:ef:86:c3:bb:72:88:f6:76:6f:1f:66:56: 7a:16:8b:82:6a:45:3d:b3:14:6e:9c:c5:e5:67:77:d4:2c:52: 0a:40:cd:52:19:d8:19:eb:7f:61:85:9a:ad:52:37:82:52:87: 58:b6:04:40:69:0c:77:76:db:ed:a3:12:16:73:f4:62:0c:74: 2b:7e:c6:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTA2MTcwNjQ1NDJaFw0yNTA2MjQwNjQ1NDJaMBgxFjAUBgNV BAMTDTY4NTEwZjE2LTk1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi1j9ThiLPcGtWkE+jJkJEWicjy5gtoLFRYmdD1tMMmjOw4pBL+n4C9D3ULrFD xA/AxA5nq2WdNgIms6gwqdp14MUqdfm4x9+MTL6nrACUhJKI/7eGuoQpPNHqSJ56 lNpDJmgJIgD6YZYSRJNCbQYyffqbDRJV6TgRgFxKJlw39mu0//VpKZ/3hYrcEPj+ zRQDGuosoXKq21lxIzr2jg7tZ/le/UvK+wFFGy3Ij3HsOnxQv8BpgonuWwHcoP43 qHAKH8s1AxNKGjlnjBQd0JfJDNgbtm2a4yd/0yw4bm4QADhocj0YkjIti9q2yfdr mxf2Q+TOt3IRZRZj5FJpzMoPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/PhFYTBV L3Jzn6ZRHtNgs20eHJ4wHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOBDid9fyj5M2AfU+WWW/kbdvknWUKop6jpBbVstvBhPzAN1YdGblycT VlH8tQc3+1sCDVeTsm415knJi/+NL4N4mU7f3VC13NScKthC8sUFe+1E4Qs0NCer 6cARq5BLKbVvSYq/p9Yo7mSkeTKZexLJyX6Z43oRyN3JBEQYSa3lCdsLC+Udicwz YGhf7YibVDttkbzxM8iTSggjOS/NmHmCp5jtZnT45JpxmTXix/rDBonX4gYGXE0t r++Gw7tyiPZ2bx9mVnoWi4JqRT2zFG6cxeVnd9QsUgpAzVIZ2Bnrf2GFmq1SN4JS h1i2BEBpDHd22+2jEhZz9GIMdCt+xuQ= -----END CERTIFICATE-----Generated at Wed Jun 18 16:05:28 2025 by rpki-client