$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: 1dd/g/5jQeKmUIadVZXiizyYlYdFO2oLNKkz0IaCci8= Subject key identifier: 57:04:E3:05:F8:88:79:DA:12:23:A8:19:A7:22:A1:33:4F:5E:44:8A Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 012B Signing time: Fri 13 Jun 2025 03:36:22 +0000 Manifest this update: Fri 13 Jun 2025 03:36:21 +0000 Manifest next update: Fri 20 Jun 2025 03:36:21 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: MSZAZhj5qc2rCQeQpIZQfLd6ZOVn6q1PxkX4AwQL6hE=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Jun 13 03:36:21 2025 GMT Not After : Jun 20 03:36:21 2025 GMT Subject: CN=684b9cb6-3e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:ca:21:09:53:23:8e:2d:95:4c:18:e0:93: 43:40:6f:e1:2a:1b:96:15:36:15:7d:b5:ca:f6:de: 6a:8b:64:63:04:fc:40:ee:64:2c:34:ed:71:41:17: 19:f5:41:dd:de:02:6e:bc:7b:bb:61:34:f3:be:2f: 28:1e:2b:50:d2:b6:ca:86:b9:3d:57:9e:39:40:02: af:fa:53:cd:73:da:b4:74:38:8f:e9:f3:8a:5b:6c: 53:45:57:4c:d1:77:b3:7c:ab:f9:fb:30:e0:ff:8a: ee:f8:22:25:6d:67:1d:b8:71:59:5a:77:91:74:81: 77:bb:2c:19:c6:41:aa:71:f3:c3:54:d5:4e:ee:6e: 27:6a:cd:be:0f:fc:34:06:bd:a0:e7:a9:37:74:cd: 7d:8c:df:8d:08:96:51:8b:f6:8d:2b:48:f9:d7:a8: 87:43:f4:0c:fa:d8:12:98:d5:ce:11:40:59:26:79: 51:45:c6:eb:c3:c5:48:63:9b:7a:9b:f0:f3:59:de: ee:78:0f:1b:fe:39:d6:1d:11:72:b6:04:50:da:1d: 04:d2:dc:0b:d4:c2:be:53:e5:78:b0:3d:82:fb:fa: ef:de:4c:95:c4:47:de:16:a9:00:a7:76:12:8d:a7: bb:72:a2:69:de:10:b8:c7:30:a0:da:83:ee:1c:83: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:04:E3:05:F8:88:79:DA:12:23:A8:19:A7:22:A1:33:4F:5E:44:8A X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f1:26:3b:2e:08:e0:68:e1:81:0a:be:27:e9:c6:c6:ae:9d: 50:19:12:94:43:5a:7b:5d:22:a6:a1:e9:b3:c5:ee:12:b1:e9: ec:4f:2f:f5:cd:5d:17:fb:99:bc:9c:8c:28:6e:f0:5f:0e:97: 4d:d8:25:9a:02:4e:02:da:db:f2:69:c8:4a:a5:30:e5:f4:31: 85:ee:74:15:10:4b:e2:82:b6:c7:d6:e4:5c:57:cf:ad:d8:c0: 46:ec:e6:c9:16:d9:62:06:3a:90:cb:1a:f8:37:58:dd:22:85: 99:4d:07:83:a5:c8:54:8b:f7:3e:6f:47:25:af:ab:5c:91:44: 8a:3b:ea:6d:ad:77:73:5b:6a:1f:02:93:5d:4b:90:70:94:af: ba:a8:3b:17:84:38:a6:29:b6:4e:cd:59:15:4a:15:04:b9:c2: 32:70:92:d2:1f:26:10:04:36:31:73:de:ba:6c:3b:2e:e5:f3: ea:aa:0a:77:6c:f6:c8:f3:a1:4c:70:70:b7:6b:3b:24:00:16: ed:ce:c9:6d:8f:c3:d5:b7:ba:a0:6c:ff:09:02:7c:36:bd:7b: 44:a0:05:66:96:14:ec:49:32:ba:ad:ec:e6:49:dd:22:a9:76: d9:c6:c5:0a:6f:14:4b:4c:c6:8f:50:06:f4:c4:95:95:a7:32: 75:7d:54:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjUwNjEzMDMzNjIxWhcNMjUwNjIwMDMzNjIxWjAYMRYwFAYD VQQDEw02ODRiOWNiNi0zZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHDKIQlTI44tlUwY4JNDQG/hKhuWFTYVfbXK9t5qi2RjBPxA7mQsNO1xQRcZ 9UHd3gJuvHu7YTTzvi8oHitQ0rbKhrk9V545QAKv+lPNc9q0dDiP6fOKW2xTRVdM 0XezfKv5+zDg/4ru+CIlbWcduHFZWneRdIF3uywZxkGqcfPDVNVO7m4nas2+D/w0 Br2g56k3dM19jN+NCJZRi/aNK0j516iHQ/QM+tgSmNXOEUBZJnlRRcbrw8VIY5t6 m/DzWd7ueA8b/jnWHRFytgRQ2h0E0twL1MK+U+V4sD2C+/rv3kyVxEfeFqkAp3YS jae7cqJp3hC4xzCg2oPuHIMHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcE4wX4 iHnaEiOoGacioTNPXkSKMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/8SY7LgjgaOGBCr4n6cbGrp1QGRKUQ1p7XSKmoemzxe4SsensTy/1 zV0X+5m8nIwobvBfDpdN2CWaAk4C2tvyachKpTDl9DGF7nQVEEvigrbH1uRcV8+t 2MBG7ObJFtliBjqQyxr4N1jdIoWZTQeDpchUi/c+b0clr6tckUSKO+ptrXdzW2of ApNdS5BwlK+6qDsXhDimKbZOzVkVShUEucIycJLSHyYQBDYxc966bDsu5fPqqgp3 bPbI86FMcHC3azskABbtzsltj8PVt7qgbP8JAnw2vXtEoAVmlhTsSTK6rezmSd0i qXbZxsUKbxRLTMaPUAb0xJWVpzJ1fVSB -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:38 2025 by rpki-client