$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: r35CFzQTESev5hAuW/yTqJ2gRtrPwiXKbwdrzq4mSbA= Subject key identifier: D4:BE:B9:B1:BB:43:AF:99:03:A2:75:17:3E:A9:94:50:9A:0E:B0:F6 Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 08D6 Signing time: Sat 14 Jun 2025 20:15:22 +0000 Manifest this update: Sat 14 Jun 2025 20:15:22 +0000 Manifest next update: Sat 21 Jun 2025 20:15:22 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: R3CtMVOc0ZSg9B7K8GRXHd4/zbZIBWDBs66LdtWS+wM=) 2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=) 3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455, serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: Jun 14 20:15:22 2025 GMT Not After : Jun 21 20:15:22 2025 GMT Subject: CN=684dd85a-fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4b:99:0a:df:d2:8f:73:a3:be:47:85:64:29: 11:8d:35:16:40:12:4c:d4:4b:45:76:dc:d4:48:0e: cc:6b:b9:de:8b:cf:d5:62:81:44:54:8d:ad:9a:a4: 58:b6:e4:24:b8:1e:61:cc:16:56:cd:be:91:09:99: 0a:9c:6f:0e:62:d0:63:6c:35:66:0e:9b:04:59:1d: 12:6f:1d:d8:fa:95:c5:15:85:7d:88:42:b6:6f:9d: c6:68:a3:29:7e:01:5e:5e:ad:db:b8:0a:81:48:a7: f3:67:73:af:22:38:9c:91:5c:d9:36:d0:7d:7d:3e: 0e:7f:f5:c3:91:31:7e:f7:e2:9c:5c:84:e4:4c:33: b7:73:1d:78:d6:c1:a6:da:33:5c:6a:86:33:7b:0e: bc:d8:f9:37:56:1c:24:c6:14:76:7e:29:75:35:11: e2:af:22:8a:29:d1:6d:54:36:ae:4e:67:88:3a:a8: d4:59:b2:ee:77:18:25:71:f0:b0:af:77:00:57:ba: f7:87:19:eb:fe:04:fb:67:ac:72:08:19:ea:f5:1c: c4:ad:22:5f:be:1b:5f:0f:2e:bd:cf:e1:95:69:86: bc:53:fa:da:75:f5:07:d0:d1:62:a6:29:d3:62:78: 8c:5e:27:9c:f2:80:d4:83:e1:79:f5:e6:69:a0:e8: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BE:B9:B1:BB:43:AF:99:03:A2:75:17:3E:A9:94:50:9A:0E:B0:F6 X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2e:67:3d:a2:ee:47:fa:95:c7:66:0e:ab:3c:a3:07:a6:a9: 51:22:74:2d:86:45:51:ad:d5:e7:d8:46:a7:b4:04:53:fd:74: 11:f2:5a:bb:41:17:6e:59:1a:82:5a:68:d0:36:31:20:1a:ac: ed:d5:e9:24:dd:5b:2d:b1:3a:ca:b5:26:96:0a:4c:ed:92:36: fb:14:25:8a:d1:5d:13:34:20:5f:b7:3f:f3:af:39:7f:8e:b2: 3f:1e:a5:d9:c7:d9:bd:57:cc:91:de:7c:0d:17:9e:cb:44:aa: 1f:f1:41:ac:0e:de:85:ce:04:6e:4e:80:c1:75:9a:ae:8b:f8: 4c:7c:e2:04:8e:ea:05:f4:92:81:8c:ae:c0:9c:c8:eb:47:a3: f4:b6:df:e7:6a:1f:cc:54:b7:26:16:a5:2f:1f:a5:a0:9f:14: 93:a9:c2:c4:78:23:f0:dd:6a:3f:4c:3f:13:9d:33:a7:bb:4f: db:03:26:9e:e1:e5:cb:05:6e:82:ea:51:0f:25:30:a1:a2:05: 99:66:0e:a3:a0:c2:ad:d0:43:17:1f:68:ce:8d:39:a0:ed:35: fc:3b:2b:f1:fb:97:83:03:ce:e4:e0:ea:5b:91:63:ca:e9:6f: db:f9:a2:52:2d:ae:bf:aa:2e:ff:30:9e:26:b0:95:a7:4c:93: 6e:d4:42:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjUwNjE0MjAxNTIyWhcNMjUwNjIxMjAxNTIyWjAYMRYwFAYD VQQDEw02ODRkZDg1YS1mY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+0uZCt/Sj3OjvkeFZCkRjTUWQBJM1EtFdtzUSA7Ma7nei8/VYoFEVI2tmqRY tuQkuB5hzBZWzb6RCZkKnG8OYtBjbDVmDpsEWR0Sbx3Y+pXFFYV9iEK2b53GaKMp fgFeXq3buAqBSKfzZ3OvIjickVzZNtB9fT4Of/XDkTF+9+KcXITkTDO3cx141sGm 2jNcaoYzew682Pk3VhwkxhR2fil1NRHiryKKKdFtVDauTmeIOqjUWbLudxglcfCw r3cAV7r3hxnr/gT7Z6xyCBnq9RzErSJfvhtfDy69z+GVaYa8U/radfUH0NFipinT YniMXiec8oDUg+F59eZpoOjGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS+ubG7 Q6+ZA6J1Fz6plFCaDrD2MB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxLmc9ou5H+pXHZg6rPKMHpqlRInQthkVRrdXn2EantART/XQR8lq7 QRduWRqCWmjQNjEgGqzt1ekk3VstsTrKtSaWCkztkjb7FCWK0V0TNCBftz/zrzl/ jrI/HqXZx9m9V8yR3nwNF57LRKof8UGsDt6FzgRuToDBdZqui/hMfOIEjuoF9JKB jK7AnMjrR6P0tt/nah/MVLcmFqUvH6WgnxSTqcLEeCPw3Wo/TD8TnTOnu0/bAyae 4eXLBW6C6lEPJTChogWZZg6joMKt0EMXH2jOjTmg7TX8Oyvx+5eDA87k4OpbkWPK 6W/b+aJSLa6/qi7/MJ4msJWnTJNu1EKh -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:59 2025 by rpki-client