$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json) Hash identifier: SqwIZu8EqHFfFuyevbEVOke0Qa3QajfpAyZ7KFF1fAc= Subject key identifier: D3:76:27:C2:3F:AD:0A:E4:8B:C0:3D:93:A7:6D:AA:05:E0:E3:15:9C Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft Manifest number: A3 Signing time: Fri 13 Jun 2025 05:09:35 +0000 Manifest this update: Fri 13 Jun 2025 05:09:35 +0000 Manifest next update: Fri 20 Jun 2025 05:09:34 +0000 Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: a2lbWjAxOyWDZQQ73Ehpuuv+tBZG0JUoIe5umHxPggI=) 2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Jun 13 05:09:35 2025 GMT Not After : Jun 20 05:09:34 2025 GMT Subject: CN=684bb28f-7437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:ab:69:0f:d4:b6:f9:e0:fe:d5:f8:53:17: ee:f5:3a:2f:d0:5f:d0:22:78:51:2d:1c:d6:27:0b: c6:f1:20:4b:53:dc:2a:0f:f8:0b:53:6d:41:e6:43: 91:a1:11:f6:df:00:c0:30:91:f3:5f:1f:88:ac:ee: 51:ce:bd:d1:a4:1f:e6:0d:77:b8:38:c1:9f:bb:63: 33:ee:f6:2e:f3:7d:30:b0:d6:eb:9d:f1:92:cd:78: 31:ae:e6:fb:d6:70:3f:fb:7d:04:b4:ef:b9:b8:27: 70:47:63:99:d0:fa:2c:a6:d0:6a:b1:ca:ea:0e:41: f2:b6:ee:7b:1e:4c:35:f1:90:f8:41:01:01:9e:46: c8:18:0e:41:10:d2:a2:c1:04:56:00:aa:b5:4d:f7: 96:4d:6d:c5:4c:05:b4:08:45:c3:2c:99:0d:03:65: fb:ea:4d:1a:aa:78:df:88:4b:10:98:d1:9b:fa:07: ce:9b:67:f5:c6:53:a6:ee:3f:12:ba:0f:7e:2c:ac: 28:b8:52:1d:a6:20:0a:98:53:b0:98:89:5d:c0:d5: 90:fe:91:fd:52:3f:a9:a5:31:cf:f2:36:be:62:cd: 24:63:b1:79:27:fe:6d:1c:f8:f1:e1:1b:70:79:92: bf:fc:33:0c:87:1a:5e:67:32:42:8c:93:35:a5:59: a9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:76:27:C2:3F:AD:0A:E4:8B:C0:3D:93:A7:6D:AA:05:E0:E3:15:9C X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d4:21:1e:d6:0b:d8:4d:dc:f1:9b:91:a8:8a:1d:95:f6:85: 67:64:80:15:a1:31:cf:df:d8:4c:85:bd:41:53:00:01:c1:fe: 11:01:d4:a9:0d:85:21:3a:48:c6:33:24:66:92:cf:08:b9:3c: 9d:14:16:68:2e:89:5e:7a:97:f8:96:f6:2d:9d:5a:9a:61:89: a4:d3:22:bf:02:2e:71:04:35:e8:b4:17:0c:12:30:97:06:a2: 99:bb:b9:2e:c9:da:30:9b:5a:ff:10:e7:aa:9f:4f:45:2f:37: 2b:83:4e:67:a1:74:34:82:2c:46:fe:ba:76:22:0a:75:e9:07: 87:21:4d:3c:18:84:e0:23:c8:e7:2e:42:2a:1e:8e:55:b0:37: 09:ed:fb:9d:8b:56:44:12:7c:eb:da:b5:37:b7:e1:71:d2:08: 66:20:d6:97:4d:64:07:46:e7:fa:56:1e:69:4c:93:25:cd:60: e4:b4:7d:ce:13:3e:47:80:c7:f3:5a:a3:c1:fd:e1:8b:ad:b9: 5c:f0:64:d7:2c:be:30:e9:fd:2a:20:6c:90:5a:2a:80:be:e4: dc:fd:fb:1f:44:ae:7e:ba:76:79:20:40:19:06:aa:be:7b:cb: 2d:d6:ea:8e:9e:76:ac:26:80:d2:d5:36:d4:a1:0e:72:94:fa: 8a:f6:ec:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjUwNjEzMDUwOTM1WhcNMjUwNjIwMDUwOTM0WjAYMRYwFAYD VQQDEw02ODRiYjI4Zi03NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kyraQ/Utvng/tX4Uxfu9Tov0F/QInhRLRzWJwvG8SBLU9wqD/gLU21B5kOR oRH23wDAMJHzXx+IrO5Rzr3RpB/mDXe4OMGfu2Mz7vYu830wsNbrnfGSzXgxrub7 1nA/+30EtO+5uCdwR2OZ0PosptBqscrqDkHytu57Hkw18ZD4QQEBnkbIGA5BENKi wQRWAKq1TfeWTW3FTAW0CEXDLJkNA2X76k0aqnjfiEsQmNGb+gfOm2f1xlOm7j8S ug9+LKwouFIdpiAKmFOwmIldwNWQ/pH9Uj+ppTHP8ja+Ys0kY7F5J/5tHPjx4Rtw eZK//DMMhxpeZzJCjJM1pVmp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN2J8I/ rQrki8A9k6dtqgXg4xWcMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD1CEe1gvYTdzxm5Goih2V9oVnZIAVoTHP39hMhb1BUwABwf4RAdSp DYUhOkjGMyRmks8IuTydFBZoLoleepf4lvYtnVqaYYmk0yK/Ai5xBDXotBcMEjCX BqKZu7kuydowm1r/EOeqn09FLzcrg05noXQ0gixG/rp2Igp16QeHIU08GITgI8jn LkIqHo5VsDcJ7fudi1ZEEnzr2rU3t+Fx0ghmINaXTWQHRuf6Vh5pTJMlzWDktH3O Ez5HgMfzWqPB/eGLrblc8GTXLL4w6f0qIGyQWiqAvuTc/fsfRK5+unZ5IEAZBqq+ e8st1uqOnnasJoDS1TbUoQ5ylPqK9uwt -----END CERTIFICATE-----Generated at Sat Jun 14 19:02:03 2025 by rpki-client