$ rpki-client -vvf rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft File: yU_6eqS897yayfDTywnSlOVxFiM.mft (raw, json) Hash identifier: OZwrFWxVujUjx3A59B0BdAy0dmXoMAxjF4yKNqItr2w= Subject key identifier: 38:C5:0A:BB:3C:C9:13:1F:16:A8:DF:97:D5:B7:7E:78:FE:C8:53:56 Authority key identifier: C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 Certificate issuer: /CN=A915730C/serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft Manifest number: 0B Signing time: Sat 21 Jun 2025 07:07:11 +0000 Manifest this update: Sat 21 Jun 2025 07:07:10 +0000 Manifest next update: Sat 28 Jun 2025 07:07:10 +0000 Files and hashes: 1: yU_6eqS897yayfDTywnSlOVxFiM.crl (hash: u6tJ2G9M9qNUJ+U/f2eUqe38ubS847extZ/gBgg8GOM=) 2: 949C3D70497C11F0A5181A5FC4F9AE02.roa (hash: jJYL7x8+30zgOjJC0KXeGcN5Hx3RtHR1U+WuBZx+L40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 07:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915730C, serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Validity Not Before: Jun 21 07:07:10 2025 GMT Not After : Jun 28 07:07:10 2025 GMT Subject: CN=68565a1e-85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:08:18:6b:e5:61:cb:91:1e:e4:5f:e2:24: 55:d2:5c:a8:08:d3:5e:fd:14:37:d3:f0:16:bf:c4: 8d:39:bc:6f:47:4c:58:40:51:29:fb:ac:82:15:15: c3:26:e0:ed:98:bf:31:e0:93:29:54:cf:99:6b:2b: 93:94:f1:0d:e9:5f:56:18:07:f3:64:ad:3e:4e:f5: df:3d:20:65:a5:96:8b:5b:37:9b:86:a5:d8:82:84: 3b:84:d8:8b:40:ba:a1:91:39:1e:70:bc:f5:a2:f7: 6c:6d:2f:69:20:b9:94:95:49:0c:4a:ba:f5:a2:ca: f6:37:01:79:78:3b:32:6a:f6:a7:b8:06:4d:d9:70: c9:29:e2:a7:1e:16:8f:58:f9:c1:ce:b8:02:46:e0: 89:b4:93:28:f5:23:59:46:e9:da:d7:71:2b:fb:de: 7b:47:90:64:16:4e:14:3b:ca:d3:fa:f8:63:64:82: 16:cf:bc:a2:ae:ea:a2:74:bd:df:2f:cc:42:2d:a2: 69:37:86:9e:b2:0d:6a:64:10:7e:17:1d:2c:9f:9b: 76:f8:10:c0:26:8d:2d:99:f3:fa:2a:55:ee:83:6d: ca:4d:44:f9:bf:47:6b:c8:2b:f5:bb:e9:61:bb:0c: e9:07:9d:41:89:b9:ba:5c:f4:c5:ce:42:3b:b8:af: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:0A:BB:3C:C9:13:1F:16:A8:DF:97:D5:B7:7E:78:FE:C8:53:56 X509v3 Authority Key Identifier: keyid:C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f2:f3:0d:7e:d9:b3:48:3e:b2:00:0b:18:c1:ab:69:d2:d9: c3:1b:d9:94:51:19:01:a1:aa:29:28:aa:ce:ab:67:13:11:77: bb:3e:5b:15:40:cc:63:c1:83:7a:34:c4:df:18:76:23:97:fb: 79:d1:0a:60:90:58:8f:7a:0b:57:3c:16:e7:7a:75:05:28:1d: c0:5f:88:53:78:ac:fa:71:72:c5:77:40:69:4a:72:92:a8:45: b4:b2:4b:25:02:aa:b8:8c:9a:96:25:56:d9:7f:95:9b:dd:bc: 8b:6d:be:e8:bd:7b:31:76:14:5a:fd:45:be:fd:d3:9e:0f:51: a3:b6:06:ac:86:49:1d:5a:b0:c4:3d:68:34:04:46:af:9a:cd: 16:ba:57:8f:b3:06:b3:9e:d4:2e:3a:8e:64:f1:46:f9:21:bc: 0d:09:3a:35:d0:c4:5c:d3:cf:f8:df:c9:2a:34:d3:b2:e0:cd: a2:61:df:2c:b9:c3:1e:77:68:4a:26:8e:69:ea:52:69:b5:18: dc:33:2f:dc:a5:f5:fd:08:b3:d5:03:2e:8a:dd:fa:0a:03:82: 26:7f:3b:05:c3:08:fa:49:20:94:24:cd:bd:a9:2e:19:c9:4a: 7f:84:05:61:88:48:43:f7:9e:d2:e4:17:8b:a5:dc:53:2e:db: 6e:34:a4:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzMwQzExMC8GA1UEBRMoQzk0RkZBN0FBNEJDRjdCQzlBQzlGMEQzQ0IwOUQyOTRF NTcxMTYyMzAeFw0yNTA2MjEwNzA3MTBaFw0yNTA2MjgwNzA3MTBaMBgxFjAUBgNV BAMTDTY4NTY1YTFlLTg1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+swgYa+Vhy5Ee5F/iJFXSXKgI0179FDfT8Ba/xI05vG9HTFhAUSn7rIIVFcMm 4O2YvzHgkylUz5lrK5OU8Q3pX1YYB/NkrT5O9d89IGWllotbN5uGpdiChDuE2ItA uqGROR5wvPWi92xtL2kguZSVSQxKuvWiyvY3AXl4OzJq9qe4Bk3ZcMkp4qceFo9Y +cHOuAJG4Im0kyj1I1lG6drXcSv73ntHkGQWThQ7ytP6+GNkghbPvKKu6qJ0vd8v zEItomk3hp6yDWpkEH4XHSyfm3b4EMAmjS2Z8/oqVe6DbcpNRPm/R2vIK/W76WG7 DOkHnUGJubpc9MXOQju4r4y9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOMUKuzzJ Ex8WqN+X1bd+eP7IU1YwHwYDVR0jBBgwFoAUyU/6eqS897yayfDTywnSlOVxFiMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MzBDLzBGNkU0NzBBNDIw NzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5YXlmRFR5d25TbE9WeEZp TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVVfNmVxUzg5N3lheWZEVHl3blNsT1Z4RmlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MzBDLzBGNkU0NzBBNDIwNzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5 YXlmRFR5d25TbE9WeEZpTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEDy8w1+2bNIPrIACxjBq2nS2cMb2ZRRGQGhqikoqs6rZxMRd7s+WxVA zGPBg3o0xN8YdiOX+3nRCmCQWI96C1c8Fud6dQUoHcBfiFN4rPpxcsV3QGlKcpKo RbSySyUCqriMmpYlVtl/lZvdvIttvui9ezF2FFr9Rb79054PUaO2BqyGSR1asMQ9 aDQERq+azRa6V4+zBrOe1C46jmTxRvkhvA0JOjXQxFzTz/jfySo007LgzaJh3yy5 wx53aEomjmnqUmm1GNwzL9yl9f0Is9UDLord+goDgiZ/OwXDCPpJIJQkzb2pLhnJ Sn+EBWGISEP3ntLkF4ul3FMu2240pEE= -----END CERTIFICATE-----Generated at Sun Jun 22 04:32:30 2025 by rpki-client