$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: yzmmbZEww+5zfT7H8Xk5I9SSlhXQGb0ir0ccgngxX+I= Subject key identifier: 16:FF:9A:73:85:0D:F7:97:FA:D6:19:0F:FD:55:A9:36:4B:77:5E:F9 Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 01E4 Signing time: Sat 21 Jun 2025 00:37:18 +0000 Manifest this update: Sat 21 Jun 2025 00:37:18 +0000 Manifest next update: Sat 28 Jun 2025 00:37:18 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: e2uTXHKa7UNSHmjU4LMw+Do69dFcyAPWO+PmHtuBu7k=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Jun 21 00:37:18 2025 GMT Not After : Jun 28 00:37:18 2025 GMT Subject: CN=6855febe-5720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:7a:21:24:8c:8a:6f:86:ec:a9:e7:21:16: fb:70:67:1f:fb:67:27:44:dc:38:8b:7b:92:d1:98: 28:15:98:d1:40:88:1b:1b:f2:7f:5a:81:ec:1d:5a: 90:c5:42:98:09:26:ab:3e:13:04:82:ac:bd:4b:d8: 69:f2:f3:43:00:82:8b:a2:d4:48:e2:b8:c2:dd:d3: 08:6e:5f:9b:b6:0d:b1:66:76:84:de:64:27:9a:a5: 0a:22:39:8f:64:f1:46:66:ef:81:99:80:a1:56:70: d3:d8:7f:9e:64:85:12:81:3c:2a:85:4d:55:03:5a: 31:02:2b:36:b7:f6:fa:69:d3:47:c6:42:cf:b5:61: 85:3f:01:00:ff:87:95:e7:b5:39:27:40:4f:bf:d6: 8f:48:d9:82:af:ab:b2:8e:d3:e1:bf:31:7c:c6:f5: 47:a2:3d:bb:ce:42:8a:92:cf:f8:8c:b9:2b:c0:af: 82:28:c2:87:85:32:a7:a4:01:1e:66:2e:64:67:7d: ad:db:fb:9a:43:b8:23:aa:1b:16:e1:46:f4:12:4c: 86:09:a1:3d:e3:62:ee:1f:39:c2:a7:49:57:66:f8: 44:c7:39:2a:02:f1:5b:91:f5:d6:43:b4:a6:67:4f: f7:b8:c5:c3:55:fd:04:bd:3d:4b:f8:f2:67:0b:3d: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:9A:73:85:0D:F7:97:FA:D6:19:0F:FD:55:A9:36:4B:77:5E:F9 X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:85:59:65:cf:5a:40:13:aa:1a:e8:7d:88:9d:42:23:31: 70:50:64:c3:5e:bd:84:15:5f:bb:2e:a5:86:30:75:56:68:a3: 56:1c:da:a6:0c:1c:a4:a7:a0:b9:4c:93:c6:15:9a:5d:6c:7f: 63:86:f7:fd:a8:c8:72:ed:ea:77:b3:f1:52:9d:cd:16:82:27: 3a:e1:0c:ae:43:fa:b5:d1:a4:f6:2a:97:7d:bb:88:70:0b:d8: 8e:65:fd:76:82:19:69:f9:42:f9:cd:ba:48:34:57:cd:f5:7f: ef:50:2f:b8:12:56:05:16:80:27:22:31:fa:88:2a:32:44:fc: b2:68:d4:f7:22:14:3f:61:47:00:8f:53:42:e0:fa:04:8c:ba: 7a:66:01:5d:61:a9:1d:22:03:47:e5:d0:b3:52:b5:79:8f:a1: 4a:33:ee:1d:5a:2c:8e:b6:09:a1:8b:fc:f5:73:f8:9b:93:da: d7:f9:f5:6d:a1:a1:64:59:2d:c5:32:7a:7e:0b:70:7d:98:7c: 6f:4b:98:9a:2d:21:3f:7a:8a:95:4b:5e:19:80:78:da:26:47: e1:3e:95:6e:83:37:51:d3:cb:7f:32:95:5e:ac:4e:7f:16:75: 72:91:b0:48:08:f5:60:35:20:ad:35:f7:9a:75:0a:5d:97:64: 50:c1:84:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUwNjIxMDAzNzE4WhcNMjUwNjI4MDAzNzE4WjAYMRYwFAYD VQQDEw02ODU1ZmViZS01NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cZ6ISSMim+G7KnnIRb7cGcf+2cnRNw4i3uS0ZgoFZjRQIgbG/J/WoHsHVqQ xUKYCSarPhMEgqy9S9hp8vNDAIKLotRI4rjC3dMIbl+btg2xZnaE3mQnmqUKIjmP ZPFGZu+BmYChVnDT2H+eZIUSgTwqhU1VA1oxAis2t/b6adNHxkLPtWGFPwEA/4eV 57U5J0BPv9aPSNmCr6uyjtPhvzF8xvVHoj27zkKKks/4jLkrwK+CKMKHhTKnpAEe Zi5kZ32t2/uaQ7gjqhsW4Ub0EkyGCaE942LuHznCp0lXZvhExzkqAvFbkfXWQ7Sm Z0/3uMXDVf0EvT1L+PJnCz06fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb/mnOF DfeX+tYZD/1VqTZLd175MB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkpIVZZc9aQBOqGuh9iJ1CIzFwUGTDXr2EFV+7LqWGMHVWaKNWHNqm DBykp6C5TJPGFZpdbH9jhvf9qMhy7ep3s/FSnc0Wgic64QyuQ/q10aT2Kpd9u4hw C9iOZf12ghlp+UL5zbpINFfN9X/vUC+4ElYFFoAnIjH6iCoyRPyyaNT3IhQ/YUcA j1NC4PoEjLp6ZgFdYakdIgNH5dCzUrV5j6FKM+4dWiyOtgmhi/z1c/ibk9rX+fVt oaFkWS3FMnp+C3B9mHxvS5iaLSE/eoqVS14ZgHjaJkfhPpVugzdR08t/MpVerE5/ FnVykbBICPVgNSCtNfeadQpdl2RQwYSS -----END CERTIFICATE-----Generated at Sat Jun 21 14:15:29 2025 by rpki-client