$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: Uz2HBPyi9rH9cXqF6+Ilyo3ywGCGXh/Cr/EagplfsZY= Subject key identifier: 7C:E5:65:01:6E:EB:B7:DD:24:0D:82:C5:78:73:B0:7B:7B:83:B2:50 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 026F Signing time: Sun 15 Jun 2025 01:24:59 +0000 Manifest this update: Sun 15 Jun 2025 01:24:59 +0000 Manifest next update: Sun 22 Jun 2025 01:24:59 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: mSWX11tFxssGfyU6gc2UdHRuX/jeJtirYGF5AMsEiqg=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Jun 15 01:24:59 2025 GMT Not After : Jun 22 01:24:59 2025 GMT Subject: CN=684e20eb-4f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:eb:78:e1:ac:ee:f3:7c:72:7e:6b:67:ee: 17:a9:43:43:ac:f9:88:6e:d0:c8:cb:95:5a:ff:5f: be:35:89:f0:04:91:73:54:6c:1d:f6:86:dc:d0:16: 15:3c:1e:3e:12:b8:56:ff:b4:a4:e5:1f:61:de:d8: 18:e6:be:8b:2c:69:a1:5c:1b:d0:e1:c6:b3:0a:39: f5:4f:3e:33:f5:f1:82:82:51:34:f0:21:52:97:f8: 0c:07:ab:1c:ef:78:e8:52:77:73:21:7c:86:69:e1: 64:32:a1:29:f1:3a:69:ae:94:b7:0f:d2:3c:30:34: 73:bd:b0:d6:c1:4a:6f:37:fe:53:1c:aa:81:a7:7f: 88:34:a0:06:31:12:eb:80:11:41:11:e8:5f:72:85: f3:41:db:1f:a1:c8:36:f8:2a:9c:c7:ee:1d:a0:f9: 3a:44:6c:32:0c:77:c3:cc:a6:4d:4d:83:d3:4e:53: 2f:f2:a9:44:74:86:39:83:02:6a:ab:89:89:b4:20: 5b:ba:42:40:02:3e:67:f8:2f:ea:95:5c:0f:8e:d0: 09:32:7f:e1:e7:ee:28:97:46:d9:d5:15:19:96:bf: 81:18:81:d7:93:dc:b6:13:39:8a:46:5a:cc:fb:97: ef:46:7b:11:a4:4e:78:a9:b2:16:4f:31:ed:d2:cb: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:65:01:6E:EB:B7:DD:24:0D:82:C5:78:73:B0:7B:7B:83:B2:50 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6d:c8:63:2c:de:ef:11:f1:2d:e0:ef:4e:0b:b9:fb:34:78: 6f:ae:68:93:f7:09:eb:91:ca:a1:a8:5f:b2:e0:4b:2b:9e:35: 11:38:ab:6f:a3:43:80:c3:72:9a:48:91:4b:e6:2e:1e:6a:68: 76:62:cc:fa:83:e0:d4:02:4a:94:10:68:8f:5a:08:27:cb:bf: 88:9e:fb:87:d3:4c:95:7f:35:b0:63:ed:67:e6:9c:fb:3d:4c: 96:2c:d9:cb:4d:89:c7:f2:71:7b:53:eb:f7:1e:e7:b9:e1:40: c3:66:17:c0:f4:a2:97:24:bb:a4:f8:22:e5:68:ba:c8:9c:7f: 80:8e:19:27:6e:a3:cf:db:a4:4c:73:5c:99:f1:9c:f0:12:d7: 69:80:24:aa:0b:76:b3:ae:8b:72:aa:7b:01:ed:59:e4:e2:15: ff:db:b1:e4:90:dc:1f:a6:46:4a:64:b1:20:d6:00:4e:af:9f: 55:cc:4d:37:e1:89:35:72:05:bf:7a:7f:8f:e9:8a:34:a2:ee: bd:b9:1e:03:4a:60:9a:f2:12:6d:89:0c:a3:b1:c3:59:56:4d: c2:0f:3c:bd:fa:7a:66:f5:1f:81:ff:b3:6f:de:dd:b9:6d:8a: 6c:7a:a2:4e:a3:aa:ef:30:de:d6:56:37:6a:52:f0:51:35:fc: 72:d7:b1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUwNjE1MDEyNDU5WhcNMjUwNjIyMDEyNDU5WjAYMRYwFAYD VQQDEw02ODRlMjBlYi00ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYHreOGs7vN8cn5rZ+4XqUNDrPmIbtDIy5Va/1++NYnwBJFzVGwd9obc0BYV PB4+ErhW/7Sk5R9h3tgY5r6LLGmhXBvQ4cazCjn1Tz4z9fGCglE08CFSl/gMB6sc 73joUndzIXyGaeFkMqEp8TpprpS3D9I8MDRzvbDWwUpvN/5THKqBp3+INKAGMRLr gBFBEehfcoXzQdsfocg2+Cqcx+4doPk6RGwyDHfDzKZNTYPTTlMv8qlEdIY5gwJq q4mJtCBbukJAAj5n+C/qlVwPjtAJMn/h5+4ol0bZ1RUZlr+BGIHXk9y2EzmKRlrM +5fvRnsRpE54qbIWTzHt0ss4tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzlZQFu 67fdJA2CxXhzsHt7g7JQMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfbchjLN7vEfEt4O9OC7n7NHhvrmiT9wnrkcqhqF+y4EsrnjUROKtv o0OAw3KaSJFL5i4eamh2Ysz6g+DUAkqUEGiPWggny7+InvuH00yVfzWwY+1n5pz7 PUyWLNnLTYnH8nF7U+v3Hue54UDDZhfA9KKXJLuk+CLlaLrInH+AjhknbqPP26RM c1yZ8ZzwEtdpgCSqC3azrotyqnsB7Vnk4hX/27HkkNwfpkZKZLEg1gBOr59VzE03 4Yk1cgW/en+P6Yo0ou69uR4DSmCa8hJtiQyjscNZVk3CDzy9+npm9R+B/7Nv3t25 bYpseqJOo6rvMN7WVjdqUvBRNfxy17H2 -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:17 2025 by rpki-client