$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: C9aCUUooKgEVR5BfjSux9uxNX8Eg4AS/y2r8/YGldAk= Subject key identifier: F6:21:B2:7D:51:3B:1D:FD:2A:58:2A:0B:84:EA:26:AD:CE:13:C6:CC Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 0411 Signing time: Sun 15 Jun 2025 00:08:23 +0000 Manifest this update: Sun 15 Jun 2025 00:08:22 +0000 Manifest next update: Sun 22 Jun 2025 00:08:22 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: G2ldlW4LkLQnl1KEzVuyL+aFkQhvmIunIhdJQLFef7g=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Jun 15 00:08:22 2025 GMT Not After : Jun 22 00:08:22 2025 GMT Subject: CN=684e0ef6-926d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:f7:70:32:49:a3:3e:47:b3:71:91:7a:9f: a5:0e:f9:26:96:36:9a:a0:15:bf:d2:66:ea:5f:ab: 3d:d4:21:9f:96:ec:99:7f:a2:16:89:61:25:7a:81: 3b:29:4a:82:8c:7b:b2:1e:09:3a:b4:69:8d:85:f2: 8f:a7:97:cc:be:e5:b0:9f:05:af:b3:ad:9b:de:6b: f1:83:45:e9:a8:83:7b:6f:65:56:83:bb:c4:f9:69: 81:62:e6:9a:7d:7f:74:21:56:c4:4d:55:e5:dd:e6: cf:fe:82:21:f9:28:06:32:49:dc:f2:72:7a:16:56: 78:3c:ad:62:4e:47:a0:b1:38:bd:32:3c:63:17:84: e8:fe:b3:71:93:f7:a5:7b:94:25:46:92:f5:6c:cd: 24:6c:0e:07:2e:6a:4e:9e:b1:62:52:3f:e1:7a:c2: 9e:f8:d0:a3:3a:05:21:e4:3d:b0:f8:aa:dc:d4:0b: 6c:53:e4:41:3b:d1:11:2e:6d:48:b2:f0:ae:71:be: 83:1d:45:1e:91:68:bb:af:03:47:8c:e2:ef:06:52: 12:f3:d1:12:19:e1:a2:0a:6e:15:a1:b0:bd:ac:45: c8:71:e6:61:65:f2:76:7e:a2:6d:f9:a0:7f:9b:a6: 5b:3e:14:aa:c6:80:a2:47:a1:73:2f:54:e4:08:85: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:B2:7D:51:3B:1D:FD:2A:58:2A:0B:84:EA:26:AD:CE:13:C6:CC X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4d:f0:ac:e8:f4:6b:50:4c:9f:49:ba:b0:53:8a:26:99:1c: c2:d9:30:13:33:da:00:05:ef:ce:e2:0a:2f:0f:0f:db:1b:7b: 86:eb:60:18:86:1a:40:eb:5f:bb:98:9f:0c:37:cf:be:1e:95: 33:f5:c5:96:90:fa:ce:11:8f:a2:05:5a:9b:ac:e0:bf:08:03: 2f:68:f6:6c:9c:84:da:08:ac:3e:31:20:1b:fb:5a:cd:50:52: 03:b1:67:5b:df:ba:3e:6d:99:1d:3a:6b:ec:fa:e0:c1:82:00: d4:41:94:41:e2:8c:22:a7:2f:b8:a9:ee:47:04:a1:ba:d1:d6: 68:00:3f:0c:58:2c:52:3d:f7:bc:80:3b:77:d8:1c:4c:ac:ab: b6:3b:3e:8e:58:95:1f:04:81:5a:43:75:e6:0a:10:e5:62:ba: 80:fc:45:00:c8:aa:51:7f:35:18:dc:98:00:58:83:dd:d3:10: 75:b8:70:cc:17:bc:79:c5:f9:4e:95:6d:3b:e5:aa:ec:83:bc: 0a:81:a8:03:44:a6:32:d4:8f:11:90:f5:e6:e0:74:5e:2b:b1: e8:aa:10:fd:81:0a:21:47:c1:88:1f:fa:0b:6d:cd:fd:15:a2: 16:39:a7:ee:38:af:cd:ce:db:f8:42:54:8e:b3:5d:b9:63:22: ec:38:c7:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwNjE1MDAwODIyWhcNMjUwNjIyMDAwODIyWjAYMRYwFAYD VQQDEw02ODRlMGVmNi05MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHf3cDJJoz5Hs3GRep+lDvkmljaaoBW/0mbqX6s91CGfluyZf6IWiWEleoE7 KUqCjHuyHgk6tGmNhfKPp5fMvuWwnwWvs62b3mvxg0XpqIN7b2VWg7vE+WmBYuaa fX90IVbETVXl3ebP/oIh+SgGMknc8nJ6FlZ4PK1iTkegsTi9MjxjF4To/rNxk/el e5QlRpL1bM0kbA4HLmpOnrFiUj/hesKe+NCjOgUh5D2w+Krc1AtsU+RBO9ERLm1I svCucb6DHUUekWi7rwNHjOLvBlIS89ESGeGiCm4VobC9rEXIceZhZfJ2fqJt+aB/ m6ZbPhSqxoCiR6FzL1TkCIWsGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYhsn1R Ox39KlgqC4TqJq3OE8bMMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYTfCs6PRrUEyfSbqwU4ommRzC2TATM9oABe/O4govDw/bG3uG62AY hhpA61+7mJ8MN8++HpUz9cWWkPrOEY+iBVqbrOC/CAMvaPZsnITaCKw+MSAb+1rN UFIDsWdb37o+bZkdOmvs+uDBggDUQZRB4owipy+4qe5HBKG60dZoAD8MWCxSPfe8 gDt32BxMrKu2Oz6OWJUfBIFaQ3XmChDlYrqA/EUAyKpRfzUY3JgAWIPd0xB1uHDM F7x5xflOlW075arsg7wKgagDRKYy1I8RkPXm4HReK7HoqhD9gQohR8GIH/oLbc39 FaIWOafuOK/Nztv4QlSOs125YyLsOMdu -----END CERTIFICATE-----Generated at Sun Jun 15 10:26:36 2025 by rpki-client