$ rpki-client -vvf rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft File: YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft (raw, json) Hash identifier: v86RV6vE1MZtIRBdGAU+qT4CSxIDbYq3BgMxItiyOco= Subject key identifier: 03:E9:E1:06:67:85:1D:91:96:73:FF:C5:9F:9D:5D:48:9C:4D:A7:16 Authority key identifier: 60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62 Certificate issuer: /CN=A919FA55/serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft Manifest number: 015E Signing time: Sat 21 Jun 2025 03:16:35 +0000 Manifest this update: Sat 21 Jun 2025 03:16:34 +0000 Manifest next update: Sat 28 Jun 2025 03:16:34 +0000 Files and hashes: 1: YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl (hash: RTYT2ASJM98zbDnMfCSb5vFfY+ZSjMRvhkHqe5v9XM4=) 2: 730BFF8C428B11EEB9A5EA63C4F9AE02.roa (hash: kkjE94BBiiWiAJ9He43Jc/0GO/LlMOG+ydM9xjAZ/oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FA55, serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062 Validity Not Before: Jun 21 03:16:34 2025 GMT Not After : Jun 28 03:16:34 2025 GMT Subject: CN=68562412-13f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:75:41:e1:28:4d:12:1b:d7:2d:8f:60:cf: 42:89:9b:db:71:63:03:65:fd:36:bc:29:36:31:61: 84:87:11:b1:93:7e:8c:ce:eb:53:5d:38:c0:c2:82: e1:84:f5:38:0e:9b:28:d2:d1:cc:af:c9:db:6c:26: 18:b9:9a:28:37:41:2b:34:70:9d:bf:fe:86:0a:93: 6a:d7:c4:d5:54:11:67:a0:69:c3:35:07:6a:7d:fa: 38:c8:e3:8e:21:6f:f3:eb:6c:87:7a:ff:56:a5:85: 63:da:b1:61:33:aa:d5:1e:bb:13:b2:08:a8:fc:fd: d8:98:f8:d6:ce:38:89:85:f3:4f:00:2b:90:17:e4: b2:7c:8d:24:21:ea:ac:93:2c:68:c5:ef:53:06:7a: 12:83:c2:ee:f2:fe:1c:e5:db:38:12:20:a8:f1:b7: db:49:b0:aa:1d:8e:43:ef:1c:96:b0:da:1e:92:68: 44:c8:40:49:10:df:08:24:56:73:2d:83:56:50:e7: 86:dd:e3:f3:5e:48:90:67:c0:a7:31:8a:13:aa:56: 65:26:93:cb:c6:01:d6:e2:97:27:85:bf:78:91:f3: 56:95:6d:25:1f:e2:4a:a0:4b:70:0f:08:79:44:a2: 76:fc:ee:6a:0b:5c:b8:be:01:ff:ca:98:ce:42:54: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:E1:06:67:85:1D:91:96:73:FF:C5:9F:9D:5D:48:9C:4D:A7:16 X509v3 Authority Key Identifier: keyid:60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7a:b8:96:23:5b:86:f7:aa:88:a5:8b:6b:1b:96:b3:9f:75: e8:85:8a:32:8a:4d:38:22:94:59:c0:b6:c5:ba:69:b7:56:f3: 0b:df:41:9c:ee:89:1e:26:91:db:d7:6b:3d:a5:99:73:c9:17: 76:5d:11:04:29:66:fb:d8:db:15:72:40:e5:f1:0e:85:60:48: db:b5:52:01:79:c2:6f:4b:26:dd:13:de:8c:0c:9e:6a:80:01: 92:67:df:27:d0:d5:ee:99:9f:8f:aa:9a:b4:1a:4c:d5:a0:db: cc:0e:ef:65:c1:11:a4:04:cf:2a:af:13:a4:1b:49:39:e7:8b: 0c:9e:0e:1f:75:28:9b:91:38:72:b3:8a:c3:38:63:7f:d8:e5: ce:a3:d8:82:ec:c4:22:aa:e2:76:ec:5c:e1:e1:cb:8c:48:2f: 32:47:9c:54:2a:fc:e9:b0:2d:54:f8:21:5b:6d:55:ee:65:19: 7a:49:b9:5b:bc:14:fb:a6:93:93:79:75:f9:2d:52:e1:e1:b5: 77:69:be:f4:71:ef:ad:ec:5e:11:e4:4e:ea:a6:76:4b:8e:dd: 78:37:5f:0b:3d:04:6c:2b:a4:0f:e7:44:c2:53:9c:8e:cb:fe: 83:a4:a2:39:f1:21:dd:c9:f9:fc:8d:62:72:23:87:2b:b6:65: 5f:b3:08:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZBNTUxMTAvBgNVBAUTKDYwMjc2QjQxMUY2REY2OTRERDM2NEM0RkQzODJGMjVD OUU2QTYwNjIwHhcNMjUwNjIxMDMxNjM0WhcNMjUwNjI4MDMxNjM0WjAYMRYwFAYD VQQDEw02ODU2MjQxMi0xM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hZ1QeEoTRIb1y2PYM9CiZvbcWMDZf02vCk2MWGEhxGxk36MzutTXTjAwoLh hPU4Dpso0tHMr8nbbCYYuZooN0ErNHCdv/6GCpNq18TVVBFnoGnDNQdqffo4yOOO IW/z62yHev9WpYVj2rFhM6rVHrsTsgio/P3YmPjWzjiJhfNPACuQF+SyfI0kIeqs kyxoxe9TBnoSg8Lu8v4c5ds4EiCo8bfbSbCqHY5D7xyWsNoekmhEyEBJEN8IJFZz LYNWUOeG3ePzXkiQZ8CnMYoTqlZlJpPLxgHW4pcnhb94kfNWlW0lH+JKoEtwDwh5 RKJ2/O5qC1y4vgH/ypjOQlQN1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPp4QZn hR2RlnP/xZ+dXUicTacWMB8GA1UdIwQYMBaAFGAna0EfbfaU3TZMT9OC8lyeamBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkE1NS8wRjlFNjE2RTQw RkMxMUVFQjgyMDY3NDRDNEY5QUUwMi9ZQ2RyUVI5dDlwVGROa3hQMDRMeVhKNXFZ R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZHJRUjl0OXBUZE5reFAwNEx5WEo1cVlHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkE1NS8wRjlFNjE2RTQwRkMxMUVFQjgyMDY3NDRDNEY5QUUwMi9ZQ2RyUVI5dDlw VGROa3hQMDRMeVhKNXFZR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADeriWI1uG96qIpYtrG5azn3XohYoyik04IpRZwLbFumm3VvML30Gc 7okeJpHb12s9pZlzyRd2XREEKWb72NsVckDl8Q6FYEjbtVIBecJvSybdE96MDJ5q gAGSZ98n0NXumZ+Pqpq0GkzVoNvMDu9lwRGkBM8qrxOkG0k554sMng4fdSibkThy s4rDOGN/2OXOo9iC7MQiquJ27Fzh4cuMSC8yR5xUKvzpsC1U+CFbbVXuZRl6Sblb vBT7ppOTeXX5LVLh4bV3ab70ce+t7F4R5E7qpnZLjt14N18LPQRsK6QP50TCU5yO y/6DpKI58SHdyfn8jWJyI4crtmVfswg2 -----END CERTIFICATE-----Generated at Sun Jun 22 10:23:40 2025 by rpki-client