$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: TGi6TRrBAO6g5ex8N8NEJX8V7mhMcgb7YJbADfxOkA0= Subject key identifier: 1C:D2:B3:9E:9D:CE:EB:52:5E:F2:A1:17:42:78:27:B7:C0:0D:F2:0E Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 04 Signing time: Sun 15 Jun 2025 07:17:12 +0000 Manifest this update: Sun 15 Jun 2025 07:17:11 +0000 Manifest next update: Sun 22 Jun 2025 07:17:11 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: aHSZj3k8/2IfkN6BDzWeGH1MNsc2V2vK8BxE8Yl7wZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Jun 15 07:17:11 2025 GMT Not After : Jun 22 07:17:11 2025 GMT Subject: CN=684e7377-47a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:fe:a4:65:e9:4f:0b:72:7a:6d:8d:ba:f9: 37:21:e1:b4:f2:cb:41:39:6b:e8:00:cb:5e:bd:a3: 73:12:09:02:5c:92:d8:c9:93:c6:c8:bc:27:de:2c: 62:0d:b8:2d:eb:5e:5b:ed:8a:7f:f8:a0:99:63:7c: e4:8a:51:4e:86:a5:85:25:f4:a8:19:4f:e9:4e:d5: 86:4a:53:a2:2e:b3:d9:08:8e:61:1b:dd:ad:fd:8e: a7:53:d1:6f:ec:d3:12:86:8a:f7:9a:0b:f8:12:4a: 51:10:16:2e:65:da:f9:85:ea:3f:c0:9b:3b:bc:19: 42:5d:c3:ee:0a:9e:cc:8b:d1:7a:8c:18:01:e7:96: c3:f6:82:ba:aa:a0:d7:fb:a6:d6:1c:5a:dd:c9:76: 92:a3:84:05:7c:8f:60:67:8b:5c:7b:e3:9d:f6:43: 7a:42:b1:49:03:a9:61:ca:3c:f7:aa:9f:d3:1f:d1: d4:e3:42:b1:14:e6:71:fa:c1:eb:5e:61:9c:6e:b8: 4c:5b:35:19:91:60:b9:f7:bd:9b:52:00:20:d2:84: 6c:c3:8d:b0:db:0b:fa:44:c7:c5:a9:2f:b3:7d:db: 0e:64:91:e5:f3:71:19:48:19:9f:c3:ed:a7:e0:77: d3:25:9e:09:6e:94:3d:13:fa:ef:4c:cf:ea:a9:ee: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:B3:9E:9D:CE:EB:52:5E:F2:A1:17:42:78:27:B7:C0:0D:F2:0E X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3d:7c:52:40:02:4a:86:12:70:9f:23:d7:9f:1a:e1:d5:34: ce:87:3e:4c:95:38:ee:95:6d:21:ce:2b:fb:c3:c9:f5:cc:ab: 58:e5:69:78:a2:ce:b3:fd:86:5a:a4:2f:64:b7:eb:28:67:d2: 3f:fc:66:3c:c2:34:a7:a8:89:6a:89:34:5c:6c:cc:89:bc:2e: ce:24:f4:09:d0:2a:c2:35:bb:64:aa:3a:65:ed:25:96:db:7f: 01:69:69:90:08:98:6f:b8:03:7b:f3:28:d3:f8:54:d2:fd:8d: c1:1f:29:eb:6d:0d:76:57:f3:d1:41:41:5d:42:12:d1:d6:a2: ae:03:ed:44:dc:39:82:f2:d1:27:4f:25:3e:71:f5:95:40:06: 7e:61:ca:c7:6f:b8:81:8d:7b:bc:32:54:e4:97:f6:a0:01:90: c3:96:62:7e:08:45:b3:88:4c:81:96:22:84:26:7c:e9:89:6f: f2:01:17:fb:c6:b0:b1:fd:5c:08:f5:d6:5a:e6:79:f9:c8:e0: 1c:58:41:26:30:51:77:48:94:3e:d3:b9:4a:6c:87:8c:14:42: db:f0:9e:bc:c3:d0:7f:3f:c6:2a:59:b4:9e:e6:78:95:27:fa: 92:43:34:ac:ed:ca:57:6e:c1:1e:12:28:9d:09:fe:ea:f8:3b: b7:f2:1c:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTA2MTUwNzE3MTFaFw0yNTA2MjIwNzE3MTFaMBgxFjAUBgNV BAMTDTY4NGU3Mzc3LTQ3YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Iv6kZelPC3J6bY26+Tch4bTyy0E5a+gAy169o3MSCQJcktjJk8bIvCfeLGIN uC3rXlvtin/4oJljfOSKUU6GpYUl9KgZT+lO1YZKU6Ius9kIjmEb3a39jqdT0W/s 0xKGiveaC/gSSlEQFi5l2vmF6j/Amzu8GUJdw+4KnsyL0XqMGAHnlsP2grqqoNf7 ptYcWt3JdpKjhAV8j2Bni1x74532Q3pCsUkDqWHKPPeqn9Mf0dTjQrEU5nH6wete YZxuuExbNRmRYLn3vZtSACDShGzDjbDbC/pEx8WpL7N92w5kkeXzcRlIGZ/D7afg d9MlnglulD0T+u9Mz+qp7gYDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHNKznp3O 61Je8qEXQngnt8AN8g4wHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKk9fFJAAkqGEnCfI9efGuHVNM6HPkyVOO6VbSHOK/vDyfXMq1jlaXii zrP9hlqkL2S36yhn0j/8ZjzCNKeoiWqJNFxszIm8Ls4k9AnQKsI1u2SqOmXtJZbb fwFpaZAImG+4A3vzKNP4VNL9jcEfKettDXZX89FBQV1CEtHWoq4D7UTcOYLy0SdP JT5x9ZVABn5hysdvuIGNe7wyVOSX9qABkMOWYn4IRbOITIGWIoQmfOmJb/IBF/vG sLH9XAj11lrmefnI4BxYQSYwUXdIlD7TuUpsh4wUQtvwnrzD0H8/xipZtJ7meJUn +pJDNKztylduwR4SKJ0J/ur4O7fyHNk= -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:14 2025 by rpki-client