$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft File: yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json) Hash identifier: CXzucF6pOuJ5Zgik2zArY7ZttzZP0TMztH3Bhzb9wLc= Subject key identifier: 4B:D5:4B:59:48:64:9D:DF:A4:22:22:8C:33:CE:25:C5:82:30:1B:D1 Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E Certificate issuer: /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft Manifest number: 028B Signing time: Thu 19 Jun 2025 01:28:37 +0000 Manifest this update: Thu 19 Jun 2025 01:28:36 +0000 Manifest next update: Thu 26 Jun 2025 01:28:36 +0000 Files and hashes: 1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: emvsFrUGhB4CtEXUSju4W6PRAS9SwWjJwLaBg6zeu64=) 2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: FjhqaYSiBCUDBbMEgbA2g2o60t2rFoI+M1oEk+41mT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Validity Not Before: Jun 19 01:28:36 2025 GMT Not After : Jun 26 01:28:36 2025 GMT Subject: CN=685367c5-3c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:05:b0:75:41:e4:ea:e5:0f:71:d8:4f:b2: d0:62:0c:5c:2f:52:98:6c:75:3e:9c:79:21:0d:61: 8e:cd:b6:eb:2b:20:81:a4:f0:07:41:73:6b:8a:b1: ba:6e:2a:80:b8:c7:49:e4:f4:44:4a:36:b1:cc:41: 58:19:4f:67:32:a7:e8:bd:5d:da:6c:34:38:0f:0a: e5:ac:3b:89:c8:d9:15:40:28:8b:e8:48:76:bd:8b: 93:e2:86:81:0e:00:c9:67:94:70:00:58:9f:7a:fc: 6e:2b:25:85:88:15:31:94:a2:05:5e:51:8f:0b:ec: d6:61:39:a1:04:e4:5d:b5:4f:84:c5:6c:a6:ea:c3: c6:f1:de:8b:4d:1b:51:f4:33:45:56:15:9f:b5:98: eb:87:b0:34:09:d0:0e:c7:0b:b3:d2:5c:18:c7:0e: 56:b1:8d:a9:41:a4:0c:ea:6e:fa:28:0b:5f:19:1b: 64:6f:a4:a0:c4:66:5a:b3:9d:74:6d:3a:fb:05:bb: 93:83:1c:62:14:27:36:ac:16:51:07:03:dd:af:01: 61:99:e2:df:5a:bf:96:3f:53:ea:d7:6e:79:ee:62: 7f:5e:8b:d0:58:b1:fe:90:e7:3a:e5:d8:c8:4e:df: df:76:fe:8d:84:a4:fd:b3:e6:2d:1d:7e:d4:59:8a: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D5:4B:59:48:64:9D:DF:A4:22:22:8C:33:CE:25:C5:82:30:1B:D1 X509v3 Authority Key Identifier: keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:fd:98:d9:b4:6b:de:85:6f:10:e2:d7:f1:f0:4a:27:a1: f2:eb:05:25:87:7c:e0:24:f3:d1:4d:d7:b7:74:5a:0b:72:80: e8:24:a2:ea:28:4b:df:a1:2f:38:f7:f9:0b:66:aa:5b:31:2c: 96:9b:28:9a:19:c6:4e:5b:5b:1b:ca:04:13:d1:00:25:b4:89: 96:5c:07:6b:cd:c0:51:6e:76:f9:e1:10:d2:0f:39:f6:43:3b: b5:15:e6:27:a1:b6:1f:17:aa:a6:ab:bc:5d:74:ee:b6:c6:b6: ae:18:49:da:10:a9:2d:8a:cc:1e:3f:e6:8f:5a:3b:6b:59:cf: 8a:ca:c1:bf:f7:2b:95:1a:cb:b4:f4:52:56:db:b8:bf:98:25: 2f:49:e3:24:79:a9:a6:11:be:2c:7c:1e:fc:5a:c5:e2:1d:aa: ee:3c:ec:e7:49:1f:f4:07:60:11:fa:8f:61:d8:ee:07:c7:b2: 50:53:02:53:67:cb:fd:0a:ed:f3:87:1f:d2:fb:a0:b5:88:b3: 36:90:68:3b:2b:f8:3a:4d:19:34:6b:85:ef:7f:85:f8:85:f2: 06:af:6a:fc:74:b4:e1:3c:86:fb:f3:3e:3d:0f:c4:af:13:7b: f4:9b:ee:b0:c8:30:92:e4:a7:7c:63:76:3a:b0:93:5f:b3:4b: b7:6b:ba:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0N0MxMTAvBgNVBAUTKEM5MzYwRUM5MUVFQzE0QjA3RUQ3OTJGRDNCMEZCQUI3 RkY5RjY0MkUwHhcNMjUwNjE5MDEyODM2WhcNMjUwNjI2MDEyODM2WjAYMRYwFAYD VQQDEw02ODUzNjdjNS0zYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovkFsHVB5OrlD3HYT7LQYgxcL1KYbHU+nHkhDWGOzbbrKyCBpPAHQXNrirG6 biqAuMdJ5PRESjaxzEFYGU9nMqfovV3abDQ4DwrlrDuJyNkVQCiL6Eh2vYuT4oaB DgDJZ5RwAFifevxuKyWFiBUxlKIFXlGPC+zWYTmhBORdtU+ExWym6sPG8d6LTRtR 9DNFVhWftZjrh7A0CdAOxwuz0lwYxw5WsY2pQaQM6m76KAtfGRtkb6SgxGZas510 bTr7BbuTgxxiFCc2rBZRBwPdrwFhmeLfWr+WP1Pq12557mJ/XovQWLH+kOc65djI Tt/fdv6NhKT9s+YtHX7UWYr4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvVS1lI ZJ3fpCIijDPOJcWCMBvRMB8GA1UdIwQYMBaAFMk2Dske7BSwfteS/TsPurf/n2Qu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ3Qy81NzZDQ0QyQTBD NTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZMQi0xNUw5T3ctNnRfLWZa QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUWU95UjdzRkxCLTE1TDlPdy02dF8tZlpDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ3Qy81NzZDQ0QyQTBDNTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZM Qi0xNUw5T3ctNnRfLWZaQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZEP2Y2bRr3oVvEOLX8fBKJ6Hy6wUlh3zgJPPRTde3dFoLcoDoJKLq KEvfoS849/kLZqpbMSyWmyiaGcZOW1sbygQT0QAltImWXAdrzcBRbnb54RDSDzn2 Qzu1FeYnobYfF6qmq7xddO62xrauGEnaEKktisweP+aPWjtrWc+KysG/9yuVGsu0 9FJW27i/mCUvSeMkeammEb4sfB78WsXiHaruPOznSR/0B2AR+o9h2O4Hx7JQUwJT Z8v9Cu3zhx/S+6C1iLM2kGg7K/g6TRk0a4Xvf4X4hfIGr2r8dLThPIb78z49D8Sv E3v0m+6wyDCS5Kd8Y3Y6sJNfs0u3a7o3 -----END CERTIFICATE-----Generated at Fri Jun 20 18:10:28 2025 by rpki-client