$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: av6qnl/BGatA5PWs9CSpU7JquIBRv+zoGCEAOJXhUCg= Subject key identifier: 0E:A2:59:6C:DA:B5:8F:AF:ED:FF:13:4E:48:0A:A9:6E:37:2E:71:46 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B65 Signing time: Sat 14 Jun 2025 16:14:12 +0000 Manifest this update: Sat 14 Jun 2025 16:14:11 +0000 Manifest next update: Sat 21 Jun 2025 16:14:11 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: ykV8xnzOuxlHRRYi/6dgJ/BTlTx12yGhd3N3N3jy34g=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7023 (0x1b6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Jun 14 16:14:11 2025 GMT Not After : Jun 21 16:14:11 2025 GMT Subject: CN=684d9fd4-609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:bf:43:74:5f:ca:10:54:c1:a1:98:0d:b2: c3:1a:12:62:b7:92:72:5a:31:e5:c8:da:86:a5:53: 6f:04:8e:a0:25:6d:a4:0e:80:a5:e7:08:77:22:64: be:17:fa:39:fb:2d:54:30:10:61:ff:d2:b4:fc:59: cc:60:7b:1d:9b:62:4e:60:94:14:e1:c7:c0:69:7a: 2e:06:47:20:16:a0:d5:60:ac:16:6f:cd:1c:56:8d: b7:4d:10:c3:35:74:e3:27:82:6a:85:52:af:27:27: 01:3d:04:8a:a5:a2:7e:b6:c8:77:8e:7d:08:2b:c4: e8:d7:cf:1a:aa:a6:07:4a:d0:c6:74:f6:67:05:6a: 33:e1:a3:17:0f:2f:96:50:d4:ee:88:31:c0:c1:ae: 44:dd:f0:ac:e9:16:b2:ec:2d:a7:e2:92:7d:63:28: 57:1f:b4:01:23:4c:3d:c9:77:cb:a0:55:e1:03:2e: c6:68:50:63:92:70:47:aa:83:87:e6:63:6a:7b:1a: 67:47:3f:12:df:8d:56:a0:d9:62:40:0a:47:97:2f: 93:84:d4:d5:36:be:07:80:2e:0d:85:5e:82:ae:f6: 9b:62:a5:d9:0a:9c:bb:43:f2:ab:8a:c4:ad:74:6b: f6:b4:88:09:7c:b7:93:ce:88:41:45:8c:e7:32:b1: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A2:59:6C:DA:B5:8F:AF:ED:FF:13:4E:48:0A:A9:6E:37:2E:71:46 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:41:f1:e8:37:af:f3:2d:7b:1e:27:54:00:46:34:90:cd:07: 3f:14:29:52:2c:94:cf:a2:8e:25:b9:10:0a:53:20:c8:a0:b7: f5:e2:02:cc:b7:1e:1d:f5:9d:be:9b:0f:d4:0c:d7:82:56:39: 98:9e:3a:b6:d9:95:bb:84:e0:42:50:e2:43:f8:f5:cf:31:28: 11:c1:8d:cd:6e:16:1e:2d:44:45:08:5c:cf:19:0c:e8:fe:90: e5:53:7c:af:db:4c:6a:5b:76:4f:d5:ac:95:70:9b:a1:09:39: e3:c8:54:fa:c5:31:41:f0:6b:c5:70:b1:f8:2b:a9:80:0e:62: bd:d8:83:08:5b:58:b3:24:56:12:e2:cf:98:12:96:91:65:f0: 67:43:4f:19:9f:c0:dc:bd:c3:9e:6c:c5:a7:b2:d1:f3:14:6e: 4a:ef:2e:d0:e1:90:c4:7c:e7:1b:81:e0:d9:52:d1:76:0b:2b: 26:4e:3a:c2:52:37:82:af:ee:7d:4c:7d:ad:1c:d9:88:b2:b6: 00:b1:09:71:4d:3a:1c:df:d8:fd:f9:77:83:5e:83:c9:39:5d: 28:ee:86:24:b9:2f:60:c1:be:d2:ed:72:4b:ff:96:86:1d:a9: f9:c0:25:a5:08:7d:26:92:06:41:47:01:f0:0f:2d:01:46:3a: c5:b6:5a:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwNjE0MTYxNDExWhcNMjUwNjIxMTYxNDExWjAYMRYwFAYD VQQDEw02ODRkOWZkNC02MDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw26/Q3RfyhBUwaGYDbLDGhJit5JyWjHlyNqGpVNvBI6gJW2kDoCl5wh3ImS+ F/o5+y1UMBBh/9K0/FnMYHsdm2JOYJQU4cfAaXouBkcgFqDVYKwWb80cVo23TRDD NXTjJ4JqhVKvJycBPQSKpaJ+tsh3jn0IK8To188aqqYHStDGdPZnBWoz4aMXDy+W UNTuiDHAwa5E3fCs6Ray7C2n4pJ9YyhXH7QBI0w9yXfLoFXhAy7GaFBjknBHqoOH 5mNqexpnRz8S341WoNliQApHly+ThNTVNr4HgC4NhV6CrvabYqXZCpy7Q/KrisSt dGv2tIgJfLeTzohBRYznMrHFWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6iWWza tY+v7f8TTkgKqW43LnFGMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3QfHoN6/zLXseJ1QARjSQzQc/FClSLJTPoo4luRAKUyDIoLf14gLM tx4d9Z2+mw/UDNeCVjmYnjq22ZW7hOBCUOJD+PXPMSgRwY3NbhYeLURFCFzPGQzo /pDlU3yv20xqW3ZP1ayVcJuhCTnjyFT6xTFB8GvFcLH4K6mADmK92IMIW1izJFYS 4s+YEpaRZfBnQ08Zn8DcvcOebMWnstHzFG5K7y7Q4ZDEfOcbgeDZUtF2CysmTjrC UjeCr+59TH2tHNmIsrYAsQlxTToc39j9+XeDXoPJOV0o7oYkuS9gwb7S7XJL/5aG Han5wCWlCH0mkgZBRwHwDy0BRjrFtlr1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:17 2025 by rpki-client