$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: DSvNXoh33peGe+UAZi5VzFHy5MpEDbzWlycNK5S9y6A= Subject key identifier: 16:EB:38:39:68:97:17:0F:E4:F9:54:00:30:0B:8C:A2:0D:40:63:20 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03D4 Signing time: Sun 15 Jun 2025 00:19:16 +0000 Manifest this update: Sun 15 Jun 2025 00:19:15 +0000 Manifest next update: Sun 22 Jun 2025 00:19:15 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: L3t2+c0L83vHndt3VnoxvYiQGIw/n/OEDrN4vvmohuc=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Jun 15 00:19:15 2025 GMT Not After : Jun 22 00:19:15 2025 GMT Subject: CN=684e1183-f215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:24:22:b3:25:6c:f4:1d:2a:fe:a3:59:92: 01:c7:c5:b8:de:b3:b9:df:9b:d0:0e:22:b7:25:5f: cf:74:92:15:3f:e0:96:da:7f:15:b6:8e:43:62:73: 1e:19:e4:4d:4a:e8:17:3c:67:86:8e:8d:fa:25:eb: 5f:0e:a4:5c:fd:33:aa:0a:84:06:c4:bb:8c:3b:e0: f8:a2:21:57:54:0e:3a:b6:45:42:2c:1f:45:bc:16: 6d:c3:09:20:31:25:09:7e:1a:b3:80:ef:1f:eb:0e: 94:59:aa:fe:2c:b9:5b:10:b1:3a:7c:fd:14:d4:2a: ee:8c:72:2b:0d:0d:b7:ba:ab:a7:f3:e4:a8:13:ec: 13:c9:07:ad:73:23:cd:e2:8a:02:d4:40:84:12:30: 7b:23:c1:4f:5b:17:a5:2b:e5:4a:7c:f8:ae:ed:49: b5:50:d4:fa:dd:60:d4:3e:6a:56:de:22:d7:cb:25: 80:8a:69:a6:96:f7:57:c0:09:32:c0:d5:61:05:dc: 07:30:d2:ac:4a:8c:2c:51:ef:c9:27:f9:c8:67:ac: be:e7:4a:99:1e:6e:23:d2:94:da:d3:de:c8:dc:45: 12:ff:74:45:79:b7:f1:44:01:ea:b4:3e:63:75:94: 97:b0:f8:0c:61:d9:af:be:55:5c:7d:ae:10:9b:5f: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:38:39:68:97:17:0F:E4:F9:54:00:30:0B:8C:A2:0D:40:63:20 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d7:09:d7:41:2f:d0:1c:ac:bf:a5:5b:7b:8a:73:53:24:e3: 1b:7e:e6:a2:fb:b5:45:62:90:26:39:46:52:f3:85:b5:56:7c: 23:d3:dd:eb:21:00:f9:92:bc:6d:16:86:7d:f3:9d:f1:6e:d2: 0b:f8:e6:46:da:68:cd:a0:56:b2:be:8f:38:cb:f0:eb:6f:68: f6:2e:10:b1:cb:f9:05:6c:ca:1a:bf:c8:0f:98:b0:ca:51:ce: 49:7d:6c:cc:13:c9:0d:2b:f8:3c:fd:84:d0:aa:a3:18:7a:96: 04:10:e7:a0:0a:15:44:6d:63:3f:d7:9a:37:0e:2f:9a:39:06: da:99:05:b1:7f:bc:3a:d2:bb:b4:76:57:df:65:c4:28:48:81: 11:ab:bc:c2:c7:ff:fe:89:a7:c5:c3:9e:57:56:16:1f:69:f4: c8:be:37:fe:e1:5e:af:6a:92:d0:9f:72:1a:8e:0d:a1:b9:3a: 01:00:95:f7:1a:31:b2:20:26:e5:9a:2b:83:0d:44:b6:0f:ce: 7d:c9:ca:4e:5e:e3:e3:4f:96:29:cb:7d:d4:9e:b5:d8:94:b4: 06:ef:51:b4:4e:ba:c1:f7:24:84:89:01:5e:d2:d4:7f:30:cf: 18:1a:32:3a:56:b5:ad:c1:e8:4b:79:5b:d8:24:db:bc:ef:f1: 6b:aa:91:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNjE1MDAxOTE1WhcNMjUwNjIyMDAxOTE1WjAYMRYwFAYD VQQDEw02ODRlMTE4My1mMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxykkIrMlbPQdKv6jWZIBx8W43rO535vQDiK3JV/PdJIVP+CW2n8Vto5DYnMe GeRNSugXPGeGjo36JetfDqRc/TOqCoQGxLuMO+D4oiFXVA46tkVCLB9FvBZtwwkg MSUJfhqzgO8f6w6UWar+LLlbELE6fP0U1CrujHIrDQ23uqun8+SoE+wTyQetcyPN 4ooC1ECEEjB7I8FPWxelK+VKfPiu7Um1UNT63WDUPmpW3iLXyyWAimmmlvdXwAky wNVhBdwHMNKsSowsUe/JJ/nIZ6y+50qZHm4j0pTa097I3EUS/3RFebfxRAHqtD5j dZSXsPgMYdmvvlVcfa4Qm1+3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbrODlo lxcP5PlUADALjKINQGMgMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC1wnXQS/QHKy/pVt7inNTJOMbfuai+7VFYpAmOUZS84W1Vnwj093r IQD5krxtFoZ9853xbtIL+OZG2mjNoFayvo84y/Drb2j2LhCxy/kFbMoav8gPmLDK Uc5JfWzME8kNK/g8/YTQqqMYepYEEOegChVEbWM/15o3Di+aOQbamQWxf7w60ru0 dlffZcQoSIERq7zCx//+iafFw55XVhYfafTIvjf+4V6vapLQn3Iajg2huToBAJX3 GjGyICblmiuDDUS2D859ycpOXuPjT5Ypy33UnrXYlLQG71G0TrrB9ySEiQFe0tR/ MM8YGjI6VrWtwehLeVvYJNu87/FrqpHb -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:33 2025 by rpki-client