$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: MMKltQaiv8ZY1zmNznzz4WGko37OV/787SPIOJVoCd0= Subject key identifier: FB:43:6E:87:49:7D:90:68:DD:B9:E1:4B:53:1D:F5:5B:B3:41:93:C1 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 349C Signing time: Sat 14 Jun 2025 14:24:54 +0000 Manifest this update: Sat 14 Jun 2025 14:24:53 +0000 Manifest next update: Sat 21 Jun 2025 14:24:53 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: gPpJjX+dI1+rA+aQ2V7gLBeC/lPqeb8QBcazvuAquAg=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: kJqH6bqpSJ3//AJ26qCXwZ2NcL1mcLntx12yKeJv6z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Jun 14 14:24:53 2025 GMT Not After : Jun 21 14:24:53 2025 GMT Subject: CN=684d8635-1cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:af:14:de:b9:03:53:b1:2e:c3:06:e1:95: 0d:80:4d:30:1d:16:11:26:cc:01:b4:3e:66:ad:93: 42:30:33:95:96:45:c1:00:f8:81:34:81:0b:92:53: cc:74:3a:5d:d7:2b:95:76:07:2d:37:ea:34:33:c3: 29:e3:78:b2:b0:e3:91:27:99:f3:61:2c:e6:73:a9: 10:a7:0f:b9:51:14:67:0b:c1:b2:ad:01:99:1c:fa: 78:1e:44:7a:11:3f:67:df:4c:3e:54:ab:cd:ca:8c: ef:f6:03:6b:50:ab:43:b7:79:2b:2e:33:8d:6f:25: c5:ec:70:60:3b:40:eb:a6:7f:df:6b:56:ec:71:15: 31:9f:d6:e8:0b:5e:82:25:c2:28:da:7e:22:16:3d: 9b:cf:77:d8:0e:de:3d:8c:20:48:84:01:57:63:f8: 79:a3:21:e2:e4:4e:6c:e2:19:d7:10:96:7c:ef:bd: 40:66:a7:16:e7:bf:ad:f6:ec:c5:49:67:3d:81:a1: aa:93:05:35:52:ba:67:d4:a7:a1:ba:9a:7a:3c:c3: e2:c4:50:61:00:c1:4c:03:f9:d9:ed:39:24:a5:cd: cc:cd:db:4e:3c:d0:ff:9f:ff:ef:91:fe:50:41:15: 07:55:88:67:89:eb:d2:cd:71:db:30:77:05:04:1e: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:43:6E:87:49:7D:90:68:DD:B9:E1:4B:53:1D:F5:5B:B3:41:93:C1 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:0c:58:95:14:c0:c6:29:0b:1a:42:e3:9f:f7:d7:7e:2f:3e: 73:2b:a1:45:12:87:6f:9a:37:e7:9b:56:14:c3:20:fc:0d:5f: b5:f2:a4:84:64:9e:e7:c6:93:ff:6e:5f:a6:05:c0:ab:99:97: 9e:c3:4e:cc:7e:24:11:7a:18:17:86:a3:89:cd:b8:e9:d9:05: ad:21:c0:29:15:59:89:cc:cc:35:87:b6:7f:4a:7b:53:0e:60: 7b:71:ee:5e:18:9b:7f:d6:25:be:0f:02:47:2c:58:e0:65:9d: 5f:2e:c6:ee:67:d1:7f:87:c0:70:16:36:a9:13:3b:06:9e:e8: 83:c1:ac:2c:55:5b:27:0a:50:99:ee:18:36:8a:d1:87:ed:cd: 1c:3e:34:18:ed:98:5d:54:07:e5:93:62:1f:a4:28:04:a6:91: ec:b8:56:cf:0c:23:0e:fe:b0:a8:f7:30:17:5c:a5:19:dd:b4: 36:76:17:15:ca:77:0d:8d:18:08:30:35:06:4f:51:23:05:96: 7b:b0:db:14:c8:2c:4a:46:3f:e0:89:ba:83:82:13:42:af:85: 5b:4a:5a:43:40:de:fe:54:f1:fa:69:90:d8:05:70:1b:8d:44: 37:80:28:87:d6:2b:c7:f2:a3:93:f2:33:61:97:fa:18:30:c5: 0e:4e:19:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUwNjE0MTQyNDUzWhcNMjUwNjIxMTQyNDUzWjAYMRYwFAYD VQQDEw02ODRkODYzNS0xY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKOvFN65A1OxLsMG4ZUNgE0wHRYRJswBtD5mrZNCMDOVlkXBAPiBNIELklPM dDpd1yuVdgctN+o0M8Mp43iysOORJ5nzYSzmc6kQpw+5URRnC8GyrQGZHPp4HkR6 ET9n30w+VKvNyozv9gNrUKtDt3krLjONbyXF7HBgO0Drpn/fa1bscRUxn9boC16C JcIo2n4iFj2bz3fYDt49jCBIhAFXY/h5oyHi5E5s4hnXEJZ8771AZqcW57+t9uzF SWc9gaGqkwU1Urpn1Kehupp6PMPixFBhAMFMA/nZ7Tkkpc3MzdtOPND/n//vkf5Q QRUHVYhnievSzXHbMHcFBB7BYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtDbodJ fZBo3bnhS1Md9VuzQZPBMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrDFiVFMDGKQsaQuOf99d+Lz5zK6FFEodvmjfnm1YUwyD8DV+18qSE ZJ7nxpP/bl+mBcCrmZeew07MfiQRehgXhqOJzbjp2QWtIcApFVmJzMw1h7Z/SntT DmB7ce5eGJt/1iW+DwJHLFjgZZ1fLsbuZ9F/h8BwFjapEzsGnuiDwawsVVsnClCZ 7hg2itGH7c0cPjQY7ZhdVAflk2IfpCgEppHsuFbPDCMO/rCo9zAXXKUZ3bQ2dhcV yncNjRgIMDUGT1EjBZZ7sNsUyCxKRj/gibqDghNCr4VbSlpDQN7+VPH6aZDYBXAb jUQ3gCiH1ivH8qOT8jNhl/oYMMUOThm/ -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:32 2025 by rpki-client