$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: MkQCHndCFWTdbk+oEu0Nt4ZldEOJYq0h1lqnxrkDpqk= Subject key identifier: 28:B4:A7:F5:01:93:87:46:72:EB:CA:8B:22:D2:8D:A8:77:15:55:9E Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 25 Signing time: Tue 01 Jul 2025 08:35:25 +0000 Manifest this update: Tue 01 Jul 2025 08:35:24 +0000 Manifest next update: Tue 08 Jul 2025 08:35:24 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: 9pYJa6o3nNjqMUNeCe5YpezNKNYBSPwM0cuK0oexd7E=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: AsQWM+7HuozWTCBGDmXSa7QBPRIjHi4ee9IcaHPhl78=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: bD+Fep8IQgDA8vluXrT5vCvPbCgLZmMh8P2tGfHiM1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Jul 1 08:35:24 2025 GMT Not After : Jul 8 08:35:24 2025 GMT Subject: CN=68639dcd-5b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:e4:f0:a3:df:59:77:81:70:3d:e4:ee:7e: 37:b3:e3:3c:be:df:bf:ad:53:37:fb:3b:ff:d0:28: 60:d7:53:0d:96:a7:04:1b:0e:48:1c:4c:2d:8e:92: f5:83:9c:4c:6a:1d:91:5f:7c:40:44:ea:46:38:bd: 5b:84:d5:2f:40:85:e7:43:2d:ef:b6:1b:0c:81:57: 3e:9a:78:97:45:61:2a:7e:b7:46:d0:6c:d2:50:c5: a8:04:5e:d5:4d:f3:fa:0f:fa:3a:c6:63:0e:0b:61: ee:12:05:a7:76:40:4e:5f:21:b2:dd:d3:51:01:54: d7:69:9d:19:b1:62:c2:ae:41:7d:61:c0:dd:ec:36: cf:17:39:37:41:6d:e4:6e:b1:e0:3c:bd:7a:29:e3: ea:85:e0:7d:9d:ea:05:68:de:9d:c9:85:45:ae:58: bc:58:d8:99:54:27:5b:d9:e1:a3:a0:ef:1e:8a:d4: 64:e1:9b:e9:3e:ae:83:0b:93:3b:b6:80:4a:f2:c1: db:6b:e1:39:9d:6d:db:88:85:c2:df:c6:20:b9:66: 00:af:d4:2b:b4:88:b3:7e:76:e5:c8:e5:d5:b6:b4: 65:fd:2b:56:d8:17:6a:b9:b3:f7:99:96:fb:26:8f: 74:39:1f:25:e5:1b:f9:1f:30:5b:a1:93:f2:f3:58: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:A7:F5:01:93:87:46:72:EB:CA:8B:22:D2:8D:A8:77:15:55:9E X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:34:f4:41:69:d9:07:2c:1b:69:bf:37:82:12:93:b8:d0:bb: 81:e5:f1:53:f8:5a:06:77:2c:39:fa:ab:d9:32:a6:89:99:a3: 82:f2:7d:35:30:be:28:0d:a5:81:dd:7b:f6:ae:5e:3f:2a:3e: f3:b6:6a:70:64:55:4a:2d:26:76:1a:c8:89:3f:90:35:1c:ca: 91:b4:03:61:89:07:91:b7:f7:6d:dc:1f:3b:6d:b9:de:f0:9d: 87:bc:93:53:82:d4:fa:d7:98:39:eb:21:c6:68:2c:35:96:4a: 88:69:4b:fc:c5:7d:9f:94:2b:9a:01:76:49:a2:84:a0:01:b4: 84:98:b9:f4:eb:f5:34:c2:1b:dc:2b:cf:d4:8f:12:53:98:d9: b7:f8:99:f2:e3:2e:1d:00:67:a7:58:06:28:07:9e:1a:e7:b2: 6c:b2:41:ff:e7:06:6e:a4:12:af:11:1d:a0:35:33:53:e9:94: ab:52:4a:f8:4b:b5:b3:17:14:69:55:31:1f:71:6a:27:6e:52: 72:9c:84:52:ac:b0:1b:85:4e:9d:a8:d7:3d:e7:35:a7:d4:a6: 4f:7b:14:d4:d2:a2:00:87:6a:49:d9:4b:39:9d:6d:bc:a8:d4: 78:ad:95:3c:b3:b3:9c:60:9f:07:43:e3:f5:87:c2:ab:ec:23: 1f:1f:76:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTA3MDEwODM1MjRaFw0yNTA3MDgwODM1MjRaMBgxFjAUBgNV BAMTDTY4NjM5ZGNkLTViNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAw+Two99Zd4FwPeTufjez4zy+37+tUzf7O//QKGDXUw2WpwQbDkgcTC2OkvWD nExqHZFffEBE6kY4vVuE1S9AhedDLe+2GwyBVz6aeJdFYSp+t0bQbNJQxagEXtVN 8/oP+jrGYw4LYe4SBad2QE5fIbLd01EBVNdpnRmxYsKuQX1hwN3sNs8XOTdBbeRu seA8vXop4+qF4H2d6gVo3p3JhUWuWLxY2JlUJ1vZ4aOg7x6K1GThm+k+roMLkzu2 gErywdtr4TmdbduIhcLfxiC5ZgCv1Cu0iLN+duXI5dW2tGX9K1bYF2q5s/eZlvsm j3Q5HyXlG/kfMFuhk/LzWGpNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKLSn9QGT h0Zy68qLItKNqHcVVZ4wHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOE09EFp2QcsG2m/N4ISk7jQu4Hl8VP4WgZ3LDn6q9kypomZo4LyfTUw vigNpYHde/auXj8qPvO2anBkVUotJnYayIk/kDUcypG0A2GJB5G3923cHzttud7w nYe8k1OC1PrXmDnrIcZoLDWWSohpS/zFfZ+UK5oBdkmihKABtISYufTr9TTCG9wr z9SPElOY2bf4mfLjLh0AZ6dYBigHnhrnsmyyQf/nBm6kEq8RHaA1M1PplKtSSvhL tbMXFGlVMR9xaiduUnKchFKssBuFTp2o1z3nNafUpk97FNTSogCHaknZSzmdbbyo 1HitlTyzs5xgnwdD4/WHwqvsIx8fdro= -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:05 2025 by rpki-client