$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: aH8xq7VHKeRp7au1u7IUAgqGE8KiTZGRdqATfg5E+Ug= Subject key identifier: 58:84:65:10:D8:DB:38:3E:34:DA:16:52:23:66:1A:E5:C2:0F:25:EF Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 0125 Signing time: Sun 15 Jun 2025 03:52:53 +0000 Manifest this update: Sun 15 Jun 2025 03:52:53 +0000 Manifest next update: Sun 22 Jun 2025 03:52:53 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: yk9nIMBwtHDMhsMUuIxLsW73vUJc8rdHQPx5bYfmPRE=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Jun 15 03:52:53 2025 GMT Not After : Jun 22 03:52:53 2025 GMT Subject: CN=684e4395-2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3a:bc:83:ed:62:55:bb:a1:4e:76:eb:16:62: 9f:ad:76:ab:9e:1d:83:1e:b8:df:7f:b1:f0:4a:3e: a2:30:98:42:c3:39:0a:0a:51:a2:50:29:d4:0d:68: ed:00:07:0b:6b:b4:0d:7a:2c:9f:70:32:a6:8b:93: 09:c3:78:d8:af:52:92:a7:d9:4d:16:fa:cd:55:63: 51:4b:af:0f:8b:71:9a:25:11:fd:03:ea:94:9b:c4: ab:a1:85:73:32:59:7a:e0:fb:b7:e3:82:a1:98:16: 0a:f3:7f:d7:d8:2e:43:17:81:3d:c2:35:3e:85:27: 54:22:9f:28:d8:da:6a:42:6a:cf:c8:7e:60:7d:4c: 9e:dc:c1:dc:78:8f:c8:4b:cd:0f:15:92:df:67:70: 67:e2:86:42:ee:7f:bd:15:f3:9c:8b:91:a9:83:84: 05:7c:a1:44:4a:f7:74:21:7e:cf:da:90:5f:c3:5b: 78:86:18:22:28:2b:86:10:88:0b:81:a2:ab:76:c3: 38:02:0e:4c:53:22:d7:40:a9:67:f3:d3:1a:16:63: a1:b3:a0:fc:09:24:4a:de:e2:f3:52:45:db:b6:cb: b0:c7:29:a9:84:8d:b5:af:ed:65:5c:34:c7:6e:1b: 82:0a:cf:7b:44:52:7a:e9:1d:50:88:44:d5:ae:57: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:65:10:D8:DB:38:3E:34:DA:16:52:23:66:1A:E5:C2:0F:25:EF X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:20:d1:a7:8f:7b:b5:b3:e8:2f:85:35:85:59:cf:d9:5c:97: 43:51:0e:15:79:a3:4e:27:42:41:58:50:52:f6:74:1c:c5:f8: d5:01:1a:c5:74:9d:03:dd:e0:8e:54:f3:46:cd:3f:0a:2a:6f: 96:0f:89:e5:fa:91:c4:ce:57:3b:3d:c3:a5:d0:e7:04:f7:be: f2:25:c1:c1:31:2f:4d:f6:e1:af:3d:93:1a:b3:05:72:ca:fc: 29:eb:2c:0d:c4:19:e9:1f:c0:0d:0d:cf:de:57:aa:d4:f5:43: df:db:ea:ca:af:a7:13:52:82:38:1c:cf:d7:f5:2f:35:6a:e8: 3e:05:18:43:f6:04:04:0d:2e:44:d4:8f:58:49:8b:2a:8f:f6: a3:26:df:5f:ec:b1:a8:da:d3:30:24:ba:60:fd:e4:5b:6c:53: 8e:dc:8c:ff:98:00:15:1b:ba:61:0e:82:68:a7:dc:a6:c5:c8: a7:77:81:9e:42:d2:37:c8:9b:4b:47:f7:e8:e3:49:1d:e8:f7: a6:02:12:59:e5:ed:03:cf:32:5a:61:12:17:83:21:59:02:9f: f8:a5:87:c6:ae:0a:54:10:27:62:8f:76:40:91:be:d0:14:ae: 8f:3d:f9:6c:83:cf:66:21:35:a6:92:11:17:35:9f:4e:ea:f2: 3e:2b:32:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwNjE1MDM1MjUzWhcNMjUwNjIyMDM1MjUzWjAYMRYwFAYD VQQDEw02ODRlNDM5NS0yMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+zq8g+1iVbuhTnbrFmKfrXarnh2DHrjff7HwSj6iMJhCwzkKClGiUCnUDWjt AAcLa7QNeiyfcDKmi5MJw3jYr1KSp9lNFvrNVWNRS68Pi3GaJRH9A+qUm8SroYVz Mll64Pu344KhmBYK83/X2C5DF4E9wjU+hSdUIp8o2NpqQmrPyH5gfUye3MHceI/I S80PFZLfZ3Bn4oZC7n+9FfOci5Gpg4QFfKFESvd0IX7P2pBfw1t4hhgiKCuGEIgL gaKrdsM4Ag5MUyLXQKln89MaFmOhs6D8CSRK3uLzUkXbtsuwxymphI21r+1lXDTH bhuCCs97RFJ66R1QiETVrle2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiEZRDY 2zg+NNoWUiNmGuXCDyXvMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjINGnj3u1s+gvhTWFWc/ZXJdDUQ4VeaNOJ0JBWFBS9nQcxfjVARrF dJ0D3eCOVPNGzT8KKm+WD4nl+pHEzlc7PcOl0OcE977yJcHBMS9N9uGvPZMaswVy yvwp6ywNxBnpH8ANDc/eV6rU9UPf2+rKr6cTUoI4HM/X9S81aug+BRhD9gQEDS5E 1I9YSYsqj/ajJt9f7LGo2tMwJLpg/eRbbFOO3Iz/mAAVG7phDoJop9ymxcind4Ge QtI3yJtLR/fo40kd6PemAhJZ5e0DzzJaYRIXgyFZAp/4pYfGrgpUECdij3ZAkb7Q FK6PPflsg89mITWmkhEXNZ9O6vI+KzLx -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:43 2025 by rpki-client