$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: 5glzXESOYzxRt45w6kaqmy7fbGtpHMytxJlNNolq53o= Subject key identifier: 4F:13:5D:27:E0:95:E2:E8:C8:AB:23:57:32:4D:FD:93:96:2A:82:24 Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 0423 Signing time: Thu 03 Jul 2025 00:42:42 +0000 Manifest this update: Thu 03 Jul 2025 00:42:42 +0000 Manifest next update: Thu 10 Jul 2025 00:42:42 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: tddU1T8YdzA4k267zXIaPhi7V+wNJUd88K1ZLT9aNZw=) 2: 8C891848A8C511EC8F560C42C4F9AE02.roa (hash: lF0CFYohN2oja301WKea0PFfbTXXVh54QBYO4Syk2bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Jul 3 00:42:42 2025 GMT Not After : Jul 10 00:42:42 2025 GMT Subject: CN=6865d202-59c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:3d:89:0a:10:07:72:e0:98:7e:84:34:df: 89:8f:c6:68:45:2d:2f:b1:78:f2:0a:27:17:d2:c7: 14:0a:ff:e2:72:65:de:7c:93:3b:50:ff:ab:49:6e: 99:3d:ec:e0:2d:57:55:90:1b:be:b1:9b:52:e5:2e: f6:44:2d:a1:2b:ca:a4:ab:66:b5:2a:54:09:18:f9: 38:ed:08:cd:32:88:00:9e:bd:ab:4f:9c:0c:e7:17: c1:4d:44:1f:df:5e:b1:2f:2b:ad:b6:a9:88:21:fb: 92:6e:be:49:e3:03:9c:91:31:97:8d:7c:44:c9:8e: e9:fe:52:74:1c:13:6f:ea:21:3e:c6:8f:c7:a3:f5: be:d2:cf:e9:19:85:b8:fa:5c:b1:55:ae:d8:d5:fb: d7:e7:ef:aa:77:51:ce:ad:0b:0e:c1:9a:6a:43:d9: cc:61:c7:c2:44:c6:29:f1:f4:4e:52:92:2c:9b:c5: 10:64:e4:9c:0b:0c:3e:22:82:49:a2:f3:34:60:b8: 14:62:f3:57:f6:fa:89:a2:6c:84:b7:b5:6d:63:87: 5a:da:70:ff:78:5c:f1:47:62:d9:c0:43:d6:f7:ca: 59:85:d6:53:01:8e:66:e3:83:d0:e6:98:a6:7e:75: cd:61:1c:03:59:46:1a:36:06:5e:74:75:f8:4c:72: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:13:5D:27:E0:95:E2:E8:C8:AB:23:57:32:4D:FD:93:96:2A:82:24 X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f3:ae:9f:7a:15:51:71:50:c9:0d:cc:a1:bc:ef:d6:c9:d3: 87:4c:84:b6:bf:03:12:5a:64:3f:f3:a3:e2:65:0c:d5:a8:cf: 3d:ec:2e:15:c6:0f:8e:f8:19:a7:44:61:5d:92:ad:36:3b:ad: 39:a3:7a:00:b3:fe:85:4e:0d:5e:87:7d:59:af:f2:00:bc:a4: d3:34:94:36:ff:f9:5c:b2:f7:78:1c:ff:97:b6:da:14:50:d7: 74:8b:30:86:14:6b:55:26:c1:92:5a:83:61:d8:71:34:8a:31: 90:1d:3e:51:c5:5f:92:1b:ea:b4:57:9c:db:18:b4:f7:86:c5: a1:de:d9:23:dd:87:aa:83:8d:e3:55:ae:66:52:4a:fd:4b:49: bd:78:46:39:67:a5:e4:e9:b1:57:ab:60:9f:3b:e3:50:2d:a5: 72:50:00:03:c1:59:27:a4:07:cd:b3:fb:4d:bb:8b:6a:ef:30: 80:c3:1b:10:75:b1:9a:9a:ed:47:85:b7:e8:88:b3:1c:fb:62: 9a:7f:12:56:d4:1f:67:e2:7f:63:28:65:3d:fd:a8:50:5d:ab: 22:7d:8c:f9:88:7f:f9:a4:9f:e2:0e:69:a4:07:0f:46:a6:ea: b6:df:3b:0e:b7:f4:1a:c5:f0:dd:2c:36:c1:0a:8f:be:d6:d6: aa:5c:85:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjUwNzAzMDA0MjQyWhcNMjUwNzEwMDA0MjQyWjAYMRYwFAYD VQQDEw02ODY1ZDIwMi01OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA49iQoQB3LgmH6ENN+Jj8ZoRS0vsXjyCicX0scUCv/icmXefJM7UP+rSW6Z PezgLVdVkBu+sZtS5S72RC2hK8qkq2a1KlQJGPk47QjNMogAnr2rT5wM5xfBTUQf 316xLyuttqmIIfuSbr5J4wOckTGXjXxEyY7p/lJ0HBNv6iE+xo/Ho/W+0s/pGYW4 +lyxVa7Y1fvX5++qd1HOrQsOwZpqQ9nMYcfCRMYp8fROUpIsm8UQZOScCww+IoJJ ovM0YLgUYvNX9vqJomyEt7VtY4da2nD/eFzxR2LZwEPW98pZhdZTAY5m44PQ5pim fnXNYRwDWUYaNgZedHX4THJV7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8TXSfg leLoyKsjVzJN/ZOWKoIkMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU866fehVRcVDJDcyhvO/WydOHTIS2vwMSWmQ/86PiZQzVqM897C4V xg+O+BmnRGFdkq02O605o3oAs/6FTg1eh31Zr/IAvKTTNJQ2//lcsvd4HP+XttoU UNd0izCGFGtVJsGSWoNh2HE0ijGQHT5RxV+SG+q0V5zbGLT3hsWh3tkj3Yeqg43j Va5mUkr9S0m9eEY5Z6Xk6bFXq2CfO+NQLaVyUAADwVknpAfNs/tNu4tq7zCAwxsQ dbGamu1HhbfoiLMc+2KafxJW1B9n4n9jKGU9/ahQXasifYz5iH/5pJ/iDmmkBw9G puq23zsOt/QaxfDdLDbBCo++1taqXIWs -----END CERTIFICATE-----Generated at Fri Jul 4 12:16:08 2025 by rpki-client