$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: deiWGUi/64oPgIB5NjPHdGaNXYbYDe7XFD8qFeQXBvo= Subject key identifier: 10:62:B2:D2:31:45:FD:DE:2B:8F:89:8F:41:F7:5E:C1:61:A5:59:E8 Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 07D5 Signing time: Mon 16 Jun 2025 20:49:55 +0000 Manifest this update: Mon 16 Jun 2025 20:49:54 +0000 Manifest next update: Mon 23 Jun 2025 20:49:54 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: RthnnGI8kLOUOzXjqQtwqyphuhdFsr7SbCAJum9QypY=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: Jun 16 20:49:54 2025 GMT Not After : Jun 23 20:49:54 2025 GMT Subject: CN=68508373-ccc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:b3:fc:2f:07:e5:28:11:0e:e3:a3:2d:23: 7d:3e:06:c1:a0:eb:cd:5c:88:ba:51:ae:e2:ae:13: 20:8d:05:9e:9d:b3:ec:79:47:35:f4:c7:16:2d:44: 7c:5f:3b:bc:4d:c3:71:49:18:16:6c:9d:f5:b6:4c: 73:dc:be:2d:77:de:13:e9:b3:d6:f2:45:28:49:d5: c9:2f:21:84:4e:64:eb:6e:66:f3:51:6a:09:0d:96: a9:2b:1d:63:3f:84:d3:a3:a2:02:a8:7a:c9:38:47: c5:8a:9e:02:ed:84:90:35:d4:fa:9d:e4:e7:c9:ad: c5:35:87:1d:cb:97:e2:1b:ba:4e:28:b0:77:33:42: f2:66:7d:f1:91:8b:5f:f7:c3:ef:34:7c:82:8b:b7: 96:ef:1c:9e:79:b7:a7:12:64:9a:6f:15:b0:9e:1f: c5:ac:16:f0:2f:4f:8b:06:ab:20:44:eb:bb:5a:69: 49:98:fb:58:98:3d:47:0b:23:5d:fc:bf:ef:42:92: fc:40:b5:20:70:33:a2:99:21:b8:39:03:4f:1d:e2: 86:ae:ac:b0:9a:8d:7e:97:2f:a2:51:73:85:3a:3f: 9b:f2:84:46:21:fd:9f:19:92:08:9c:e7:cd:42:7b: 1b:3a:cc:76:f7:41:0c:44:87:1e:a7:eb:c6:cc:8c: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:B2:D2:31:45:FD:DE:2B:8F:89:8F:41:F7:5E:C1:61:A5:59:E8 X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:b7:3b:89:32:b0:79:94:e5:d5:79:5b:19:bb:15:f8:78: a2:b0:7c:c8:c4:e7:44:75:e7:cd:7c:86:3b:df:c3:f2:23:52: 79:8d:1c:54:15:5b:cd:84:76:64:22:9f:ce:af:e8:9d:50:00: 68:53:05:80:6c:b8:12:3c:f1:ea:e0:82:57:aa:81:8b:ab:03: 1a:ed:1d:f5:90:33:88:02:a4:ae:9a:2f:4a:20:23:98:bd:9d: 26:9f:f3:f0:c9:cf:15:b1:78:97:17:af:ae:09:de:ac:e7:ae: b6:f2:2b:98:2e:de:76:90:d9:14:c2:9e:fb:a3:bf:ec:6c:66: 0d:34:3f:3d:41:71:bc:b3:a8:ea:0a:ec:33:4f:a6:1e:ec:c5: de:15:14:82:6e:09:e2:25:36:0f:d8:49:76:50:30:6a:cb:8a: e8:84:93:bf:b9:3c:2b:f7:86:1f:f3:37:2a:44:2c:75:17:02: 76:7e:d5:75:76:8f:c6:9d:2b:70:56:0f:38:b3:8b:27:8a:03: 5d:43:66:d7:20:3c:5c:b4:2a:7a:bf:60:47:5e:b6:ca:e9:f6: 1e:4b:c6:2e:fb:c9:e2:17:d1:24:8b:b1:73:d1:0e:75:06:ae: 46:0b:cc:25:81:da:45:03:c3:d5:25:c5:18:ac:6e:db:d1:9b: 66:94:fd:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjUwNjE2MjA0OTU0WhcNMjUwNjIzMjA0OTU0WjAYMRYwFAYD VQQDEw02ODUwODM3My1jY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xKz/C8H5SgRDuOjLSN9PgbBoOvNXIi6Ua7irhMgjQWenbPseUc19McWLUR8 Xzu8TcNxSRgWbJ31tkxz3L4td94T6bPW8kUoSdXJLyGETmTrbmbzUWoJDZapKx1j P4TTo6ICqHrJOEfFip4C7YSQNdT6neTnya3FNYcdy5fiG7pOKLB3M0LyZn3xkYtf 98PvNHyCi7eW7xyeebenEmSabxWwnh/FrBbwL0+LBqsgROu7WmlJmPtYmD1HCyNd /L/vQpL8QLUgcDOimSG4OQNPHeKGrqywmo1+ly+iUXOFOj+b8oRGIf2fGZIInOfN QnsbOsx290EMRIcep+vGzIzzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBistIx Rf3eK4+Jj0H3XsFhpVnoMB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBV7c7iTKweZTl1XlbGbsV+HiisHzIxOdEdefNfIY738PyI1J5jRxU FVvNhHZkIp/Or+idUABoUwWAbLgSPPHq4IJXqoGLqwMa7R31kDOIAqSumi9KICOY vZ0mn/Pwyc8VsXiXF6+uCd6s56628iuYLt52kNkUwp77o7/sbGYNND89QXG8s6jq CuwzT6Ye7MXeFRSCbgniJTYP2El2UDBqy4rohJO/uTwr94Yf8zcqRCx1FwJ2ftV1 do/GnStwVg84s4snigNdQ2bXIDxctCp6v2BHXrbK6fYeS8Yu+8niF9Eki7Fz0Q51 Bq5GC8wlgdpFA8PVJcUYrG7b0ZtmlP3w -----END CERTIFICATE-----Generated at Wed Jun 18 16:42:28 2025 by rpki-client