$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: zFukRPKBuZh/jCTJ8kGT3pTg8yoAZXCg2k6jHME79sQ= Subject key identifier: A7:37:1C:23:10:3F:3E:07:59:47:AE:AF:A0:28:D2:25:E3:0E:2D:8D Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1F8C Signing time: Thu 12 Jun 2025 17:09:37 +0000 Manifest this update: Thu 12 Jun 2025 17:09:37 +0000 Manifest next update: Thu 19 Jun 2025 17:09:37 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: x+iLzGQUgoAVlDeNJ7BY1Pfaqy+kDCjvuHx4i6BC82s=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Jun 12 17:09:37 2025 GMT Not After : Jun 19 17:09:37 2025 GMT Subject: CN=684b09d1-bc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:46:e8:c8:11:8c:19:a4:43:c2:71:58:c7: 0c:fa:e9:0a:7e:89:82:52:c4:7c:e3:3a:4d:c4:fd: 74:72:fb:bd:82:31:ed:65:a4:66:3a:ec:53:f4:e4: 7e:52:e2:63:4c:c4:f4:53:54:46:39:ee:45:04:af: 36:0c:a7:2a:44:22:8f:d2:34:5c:78:77:cf:83:90: 7a:d2:0e:1a:62:dd:39:c4:a1:57:2e:48:d9:3a:6f: c7:30:3d:28:44:a8:27:db:42:4c:60:a9:44:28:d4: c1:4d:6c:90:1b:9c:ec:4e:43:00:04:d3:6e:0c:17: 90:3d:33:76:fa:a6:af:32:5a:e6:1f:7b:6d:ee:8c: f2:ee:74:4b:b0:af:08:c8:01:dc:fa:26:c4:53:cc: 20:f1:45:d0:9a:fc:fe:f1:ec:04:44:59:25:5a:26: 85:22:95:a3:64:cb:7a:5a:20:54:cb:ba:59:c7:85: fe:99:e7:9f:53:e8:d0:b2:94:f7:fe:e9:10:bb:b6: 71:96:c9:53:2a:c0:a5:ab:5e:7a:5a:78:f5:9c:00: ba:ab:18:ef:47:7c:d6:69:eb:87:f8:8d:4e:90:49: 46:3f:c0:b1:48:14:5c:7d:23:be:94:2d:75:11:78: 87:fc:6a:35:c5:01:db:cd:0e:a2:48:d6:55:e1:be: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:1C:23:10:3F:3E:07:59:47:AE:AF:A0:28:D2:25:E3:0E:2D:8D X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:50:b6:e2:1e:a7:59:21:dd:ef:b5:99:7b:62:37:44:2b: 47:7d:24:38:c3:d6:17:ad:75:25:40:43:5c:a7:6a:9e:45:7f: c9:61:81:29:0b:b7:28:12:ba:2e:9e:f2:8a:70:e6:9a:1e:01: c8:04:34:fe:d0:11:b7:3d:15:4f:2a:16:3d:b4:46:aa:49:77: 06:1f:55:fd:a1:ef:7e:dc:e4:1c:ad:b5:90:a7:b3:14:87:63: a3:bc:3e:44:87:bf:f6:f3:98:a1:46:1c:6b:2e:b4:a1:49:ca: 35:2b:5b:eb:fe:9b:99:da:cc:ad:69:4f:cd:1a:0f:4b:ce:a8: f3:8d:c5:a2:19:67:e9:6e:2f:e4:28:70:d8:c4:04:b6:0b:77: 96:ae:4f:f7:d3:2c:a6:7d:08:26:bb:ef:ca:31:b2:d9:9e:2b: 25:cd:e9:84:e5:d1:ad:75:6a:df:dc:f1:b0:9c:60:5d:6e:85: 8e:fd:85:36:80:c7:74:1d:55:9a:33:fb:9c:ff:b5:45:bb:34: e3:9d:22:c8:ba:2b:e3:c6:51:66:2b:17:81:ca:97:d7:d9:34: 78:a4:86:0c:34:45:92:bf:1c:6e:02:a4:10:20:da:b9:a6:37: b4:40:10:ce:51:1c:5e:17:58:32:55:94:c9:72:51:2a:59:76: 6a:ef:71:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwNjEyMTcwOTM3WhcNMjUwNjE5MTcwOTM3WjAYMRYwFAYD VQQDEw02ODRiMDlkMS1iYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDFG6MgRjBmkQ8JxWMcM+ukKfomCUsR84zpNxP10cvu9gjHtZaRmOuxT9OR+ UuJjTMT0U1RGOe5FBK82DKcqRCKP0jRceHfPg5B60g4aYt05xKFXLkjZOm/HMD0o RKgn20JMYKlEKNTBTWyQG5zsTkMABNNuDBeQPTN2+qavMlrmH3tt7ozy7nRLsK8I yAHc+ibEU8wg8UXQmvz+8ewERFklWiaFIpWjZMt6WiBUy7pZx4X+meefU+jQspT3 /ukQu7ZxlslTKsClq156Wnj1nAC6qxjvR3zWaeuH+I1OkElGP8CxSBRcfSO+lC11 EXiH/Go1xQHbzQ6iSNZV4b5wIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc3HCMQ Pz4HWUeur6Ao0iXjDi2NMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADFlC24h6nWSHd77WZe2I3RCtHfSQ4w9YXrXUlQENcp2qeRX/JYYEp C7coErounvKKcOaaHgHIBDT+0BG3PRVPKhY9tEaqSXcGH1X9oe9+3OQcrbWQp7MU h2OjvD5Eh7/285ihRhxrLrShSco1K1vr/puZ2sytaU/NGg9LzqjzjcWiGWfpbi/k KHDYxAS2C3eWrk/30yymfQgmu+/KMbLZnislzemE5dGtdWrf3PGwnGBdboWO/YU2 gMd0HVWaM/uc/7VFuzTjnSLIuivjxlFmKxeBypfX2TR4pIYMNEWSvxxuAqQQINq5 pje0QBDOURxeF1gyVZTJclEqWXZq73H3 -----END CERTIFICATE-----Generated at Sat Jun 14 17:15:40 2025 by rpki-client