$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: NdXLEUWMHhWtz3uvhmJc3JuP3tr1y4ZjLTCWft5Drrg= Subject key identifier: C3:0E:E6:B8:AF:C1:41:27:11:51:7E:2E:2F:05:72:23:59:2E:6F:44 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 012E Signing time: Thu 03 Jul 2025 04:42:26 +0000 Manifest this update: Thu 03 Jul 2025 04:42:25 +0000 Manifest next update: Thu 10 Jul 2025 04:42:25 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: 8cOc1kzs6oxrwWTGdQQ6DNCTJxvJ10zqzNVNKT0x0k8=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Jul 3 04:42:25 2025 GMT Not After : Jul 10 04:42:25 2025 GMT Subject: CN=68660a32-fd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:fa:d7:08:c0:5a:38:30:58:e1:2f:a5:71: b1:63:3c:1c:a0:7d:34:0c:59:81:65:bb:87:c2:8b: 75:2c:ac:94:83:aa:7f:fb:40:5e:ef:d8:48:5b:5d: 6b:41:a3:53:9a:59:b3:ce:10:1f:60:84:5c:13:c6: d0:ef:ab:f9:bb:79:57:2d:15:ae:4c:4c:17:fa:4f: cd:63:ab:8f:1f:f5:0e:04:69:67:bf:c5:26:8b:c2: 23:0b:9b:6a:24:63:da:0a:a0:bd:8f:a8:41:c4:50: 7a:27:2c:3c:64:05:ad:b6:30:e0:d4:bf:20:0a:e1: 80:07:59:a9:3d:b9:83:2b:9e:2a:8f:a8:14:8e:29: ae:91:a4:99:19:09:b0:2f:78:e8:fe:94:eb:1e:2c: e8:a9:e5:6d:1a:44:5c:d4:8b:16:50:e4:0f:23:51: e2:3f:72:06:96:7d:ab:3e:7a:27:78:63:12:63:91: cb:c4:a4:ab:22:85:07:db:8d:3d:3b:5c:ab:7f:8f: e8:23:97:d1:74:6f:d9:7c:e1:80:09:18:50:e0:fc: ee:8c:09:ad:5b:a7:49:74:fd:8d:09:1e:f4:aa:cd: 3b:08:ab:eb:57:35:ec:04:65:26:58:a5:00:7c:7e: d8:7a:3c:36:70:f4:3a:cd:63:06:54:15:ae:01:8f: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:E6:B8:AF:C1:41:27:11:51:7E:2E:2F:05:72:23:59:2E:6F:44 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4c:e0:94:80:17:3b:0c:41:48:d6:2c:e1:95:a3:3d:de:a9: 89:7c:88:b2:54:07:50:df:d8:8f:c0:d2:36:9f:76:c5:d8:8e: e2:ff:4b:4e:91:42:af:ea:a6:a6:1f:cc:6e:4b:05:a1:75:de: 12:4f:08:95:08:2f:51:78:67:c7:7c:5f:4e:da:ef:6d:f0:89: 5f:29:f6:1c:19:9f:80:73:ee:13:3f:57:a3:d9:79:08:77:3d: 4b:fb:0f:82:c4:7e:5a:55:02:16:fc:06:71:24:90:39:64:ff: 9b:92:3f:38:d3:79:3e:fb:a0:8b:63:b1:60:38:c9:45:0a:be: be:c7:f1:89:6e:cf:b8:7a:fe:90:37:95:93:ca:a2:7e:e2:b7: c6:a2:5c:16:e7:1b:d6:45:4a:64:72:ea:04:d7:7a:61:c2:8d: b1:3f:c9:01:4d:d8:92:16:ab:9a:97:53:f1:32:72:75:57:4a: 8e:d6:2e:44:33:64:1e:3b:b3:0d:5b:b8:07:e1:6c:06:96:25: 1d:3d:4b:42:ac:1d:8d:bc:6b:14:fc:6d:51:5c:84:98:93:49: 42:b0:39:e3:86:20:12:08:62:72:0c:8c:f3:6f:31:3c:ad:65: e7:91:fa:88:8a:b4:a2:b2:07:8a:45:fb:70:66:fb:d0:ac:1b: 33:20:f9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwNzAzMDQ0MjI1WhcNMjUwNzEwMDQ0MjI1WjAYMRYwFAYD VQQDEw02ODY2MGEzMi1mZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRb61wjAWjgwWOEvpXGxYzwcoH00DFmBZbuHwot1LKyUg6p/+0Be79hIW11r QaNTmlmzzhAfYIRcE8bQ76v5u3lXLRWuTEwX+k/NY6uPH/UOBGlnv8Umi8IjC5tq JGPaCqC9j6hBxFB6Jyw8ZAWttjDg1L8gCuGAB1mpPbmDK54qj6gUjimukaSZGQmw L3jo/pTrHizoqeVtGkRc1IsWUOQPI1HiP3IGln2rPnoneGMSY5HLxKSrIoUH2409 O1yrf4/oI5fRdG/ZfOGACRhQ4PzujAmtW6dJdP2NCR70qs07CKvrVzXsBGUmWKUA fH7Yejw2cPQ6zWMGVBWuAY+HfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMO5riv wUEnEVF+Li8FciNZLm9EMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtTOCUgBc7DEFI1izhlaM93qmJfIiyVAdQ39iPwNI2n3bF2I7i/0tO kUKv6qamH8xuSwWhdd4STwiVCC9ReGfHfF9O2u9t8IlfKfYcGZ+Ac+4TP1ej2XkI dz1L+w+CxH5aVQIW/AZxJJA5ZP+bkj8403k++6CLY7FgOMlFCr6+x/GJbs+4ev6Q N5WTyqJ+4rfGolwW5xvWRUpkcuoE13phwo2xP8kBTdiSFqual1PxMnJ1V0qO1i5E M2QeO7MNW7gH4WwGliUdPUtCrB2NvGsU/G1RXISYk0lCsDnjhiASCGJyDIzzbzE8 rWXnkfqIirSisgeKRftwZvvQrBszIPkM -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:26 2025 by rpki-client