$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json) Hash identifier: 4Mq2fiGa/G5bpMRIE5Dt2RLiGIcpr3J5VMtCmIIlHHM= Subject key identifier: 21:C3:52:EA:73:8B:95:26:81:BC:B5:3E:F0:A9:AC:CB:4F:4D:06:4B Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Certificate serial: 154F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft Manifest number: 1532 Signing time: Sat 14 Jun 2025 16:45:48 +0000 Manifest this update: Sat 14 Jun 2025 16:45:48 +0000 Manifest next update: Sat 21 Jun 2025 16:45:48 +0000 Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: TXdJoNCERssowEucK83Xi9vNqFfR2k3wYacFIWGb5jE=) 2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: T/iBe2dOkx7zzvxg/wmUc7S9pQxzrtqgSuY0naWemjs=) 3: 4964556A599A11ED99A5B776C4F9AE02.roa (hash: 9e7ICQ4jW3D1WMroavfa4Tl30ubr7SxEPMasiVYbPNU=) 4: 1F265C7C55E911EC8D6F804DC4F9AE02.roa (hash: rpY42lZ0PYRsXEONCJv0/Z9/FyNu31Pn/qQQWh3e8vA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5455 (0x154f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Validity Not Before: Jun 14 16:45:48 2025 GMT Not After : Jun 21 16:45:48 2025 GMT Subject: CN=684da73c-3a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:57:49:42:a0:27:f7:22:b3:ce:62:ab:e0: 8a:02:3e:25:a6:1e:16:ba:ac:34:1d:e6:b8:a5:3c: 3a:58:ab:ad:7c:26:17:e3:e0:f4:97:1d:1c:be:85: e1:28:b6:6e:f5:1a:49:69:13:71:b0:77:5b:8f:d0: 09:fc:29:4d:0a:f6:60:99:f5:fa:79:00:90:09:de: a2:77:95:23:cf:77:03:92:b7:6b:50:d7:a6:35:61: 72:88:62:23:9e:c3:78:fd:27:69:31:82:44:33:7a: 8f:2b:d2:18:81:0c:39:48:74:13:18:1c:20:b7:b1: 83:11:a1:13:80:02:d2:2b:8c:6e:56:00:85:a6:9d: 9f:c8:e3:ed:18:c8:bc:62:28:96:2a:a7:aa:34:1e: 31:0e:ee:2f:1a:c0:3b:7e:45:ac:e8:9a:34:00:2c: 5a:84:c5:d0:6f:80:ab:5e:46:f8:27:c6:ea:2f:f9: 1b:c9:ec:0e:4b:6f:9d:e9:6a:fa:ef:25:82:ce:9f: 0f:9e:0c:0b:6f:af:b4:57:34:1e:95:cd:d0:02:df: dd:58:1e:43:0a:38:b2:65:cf:ea:2d:90:9c:38:0b: 03:04:5d:af:82:8d:a7:75:0c:d6:8d:69:bd:b6:c2: 89:48:e9:58:35:01:b6:42:fa:b5:c4:1a:5e:54:2a: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:52:EA:73:8B:95:26:81:BC:B5:3E:F0:A9:AC:CB:4F:4D:06:4B X509v3 Authority Key Identifier: keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a8:4a:e5:26:75:56:97:01:f6:88:de:d2:d3:8c:e2:48:4a: 56:a9:59:2a:5e:0d:ea:06:76:19:d5:aa:c6:e8:bd:6f:c8:57: 5f:4d:1b:41:87:fe:6e:95:b0:6e:fb:d3:a3:24:20:84:ca:c2: 44:1a:fe:c4:a8:8d:8c:91:b9:66:7f:e4:38:c3:79:7d:1b:cc: 72:1d:07:3a:7c:48:b2:32:2e:02:45:81:3d:c1:3e:b4:8e:4c: bb:e2:f7:83:59:46:66:7f:0c:eb:a2:73:ac:01:62:0f:43:25: 75:05:7a:18:86:1a:c8:98:9d:82:91:14:4c:b9:f8:a9:11:6c: df:f9:30:50:af:8e:f6:54:cb:e8:89:f1:de:44:01:83:df:c7: 4e:75:ab:2a:70:f8:21:19:80:2c:33:70:67:60:ad:c7:e8:83: 68:2a:d6:b3:83:07:99:7f:20:5a:c9:47:9f:b1:15:c1:c5:d8: 64:f1:36:e8:5f:ba:00:26:00:81:a1:87:33:12:1f:66:e6:7d: 29:6c:66:8d:8b:12:3e:b2:33:df:d8:a8:6a:80:a1:fe:cd:af: c8:15:fa:e3:2b:91:5a:43:ad:2f:1b:87:2e:1e:d8:e7:8a:5e: 6c:7d:dd:33:c8:f9:33:6f:1f:87:70:87:99:0e:b9:89:27:1e: 70:da:d7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4 Mzg4MjRFQzMwHhcNMjUwNjE0MTY0NTQ4WhcNMjUwNjIxMTY0NTQ4WjAYMRYwFAYD VQQDEw02ODRkYTczYy0zYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7spXSUKgJ/cis85iq+CKAj4lph4Wuqw0Hea4pTw6WKutfCYX4+D0lx0cvoXh KLZu9RpJaRNxsHdbj9AJ/ClNCvZgmfX6eQCQCd6id5Ujz3cDkrdrUNemNWFyiGIj nsN4/SdpMYJEM3qPK9IYgQw5SHQTGBwgt7GDEaETgALSK4xuVgCFpp2fyOPtGMi8 YiiWKqeqNB4xDu4vGsA7fkWs6Jo0ACxahMXQb4CrXkb4J8bqL/kbyewOS2+d6Wr6 7yWCzp8PngwLb6+0VzQelc3QAt/dWB5DCjiyZc/qLZCcOAsDBF2vgo2ndQzWjWm9 tsKJSOlYNQG2Qvq1xBpeVCqonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHDUupz i5Umgby1PvCprMtPTQZLMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5 NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDk5RS80NjA0OEM3MDQ5NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZB RHV0Q0pib2kxdm1EaUNUc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHqErlJnVWlwH2iN7S04ziSEpWqVkqXg3qBnYZ1arG6L1vyFdfTRtB h/5ulbBu+9OjJCCEysJEGv7EqI2Mkblmf+Q4w3l9G8xyHQc6fEiyMi4CRYE9wT60 jky74veDWUZmfwzronOsAWIPQyV1BXoYhhrImJ2CkRRMufipEWzf+TBQr472VMvo ifHeRAGD38dOdasqcPghGYAsM3BnYK3H6INoKtazgweZfyBayUefsRXBxdhk8Tbo X7oAJgCBoYczEh9m5n0pbGaNixI+sjPf2KhqgKH+za/IFfrjK5FaQ60vG4cuHtjn il5sfd0zyPkzbx+HcIeZDrmJJx5w2tfd -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:13 2025 by rpki-client