$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: p4nG6RTK/Hm5XsNuhpJ6WK5Z9bptZ86viEJqdsBHS9c= Subject key identifier: 96:37:F6:60:AB:17:BB:A3:5B:DB:0E:C5:F0:29:04:EE:35:FF:0E:BF Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0C64 Signing time: Wed 02 Jul 2025 19:40:29 +0000 Manifest this update: Wed 02 Jul 2025 19:40:28 +0000 Manifest next update: Wed 09 Jul 2025 19:40:28 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: 20tqwb9UMV7pu98iT2uJXglnldghCe+5sGMEtuaTmJ0=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: eILOAPk7hEfHA4Xc/eZDuicer6q0kZbC4fsjNG1XiFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: Jul 2 19:40:28 2025 GMT Not After : Jul 9 19:40:28 2025 GMT Subject: CN=68658b2c-e9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:96:1a:25:bb:f1:d6:7c:99:37:38:77:23: fc:b5:e7:e5:f6:8c:d0:86:07:51:5d:4e:a5:dc:7a: 54:c7:f6:f0:10:eb:99:fc:f7:54:bf:aa:f8:25:2a: 4c:68:93:e7:68:86:c4:d2:a3:35:98:97:c9:64:71: 01:99:0e:79:67:bb:21:73:8a:20:ac:0f:2b:d9:7a: ae:2a:f7:cb:5f:75:99:fb:61:16:19:48:f2:00:a4: 51:3e:55:98:b4:87:e0:6d:a4:1a:65:2f:5d:6d:41: 55:db:94:06:c8:96:93:01:8a:9f:2e:5b:33:c1:d3: b8:8c:3a:4d:9d:6c:92:62:ec:b9:2d:05:23:1c:f9: 10:54:7a:42:8c:8b:79:bf:7e:8e:ad:56:9f:fb:ef: df:c0:62:82:8c:5d:53:cd:14:6a:52:1b:95:23:e2: e1:f1:4c:ab:fa:9c:b6:63:ee:f4:b6:b4:be:c2:f5: 25:70:e3:ed:70:4d:9a:7b:5d:71:05:55:7e:e5:7b: bc:b8:ea:2e:3c:4c:b5:d7:7c:70:82:40:8f:c9:4c: 44:58:c5:5d:58:6b:b4:40:49:73:35:d6:e3:5a:7f: 22:95:7e:63:f8:24:51:2c:65:93:50:28:a4:bd:79: 2f:be:b7:b0:13:52:89:ea:aa:72:45:ca:6f:32:41: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:37:F6:60:AB:17:BB:A3:5B:DB:0E:C5:F0:29:04:EE:35:FF:0E:BF X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:34:ec:a5:ca:5c:57:a8:7d:50:fd:ab:df:bf:9c:e6:76:13: f3:96:12:48:38:61:80:6c:7a:c7:2c:9b:c2:f8:ac:d3:c0:4c: 5b:83:0d:a0:a7:f2:28:dd:60:60:6e:91:97:4a:40:40:24:3c: 3b:c0:dd:75:6f:d9:33:42:74:52:16:46:cd:d0:19:5c:c4:7d: f9:8f:1c:69:76:9c:a3:6c:85:c1:fa:05:ae:6e:16:25:3e:e2: c9:e1:8c:b5:8b:11:e2:f3:67:da:0c:da:58:d9:57:bd:b4:cb: 79:7c:09:45:bf:5b:72:55:4f:cf:17:28:b7:45:62:b3:ca:0b: 57:3d:a6:4e:57:45:fe:a1:79:53:8e:01:96:b9:72:f2:52:f0: 8e:62:2b:95:c2:58:17:07:d8:78:8f:74:6e:61:44:a0:47:cc: 18:2f:17:b6:39:cb:cb:59:14:32:86:4c:36:e7:4d:07:5e:27: b5:ec:8e:77:5e:30:ab:75:e8:ba:b3:ab:c1:b3:ed:e8:7f:b0: cb:56:80:b4:4f:a8:77:7f:99:2c:e7:3c:6b:ff:47:d1:bc:98: a3:a2:5c:dc:f4:d3:20:f6:47:f5:61:c5:35:5f:06:28:82:38: e7:cf:1f:15:50:0f:95:c3:1b:13:71:9d:e8:4b:14:ac:a0:23: c7:fd:d5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUwNzAyMTk0MDI4WhcNMjUwNzA5MTk0MDI4WjAYMRYwFAYD VQQDEw02ODY1OGIyYy1lOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9CWGiW78dZ8mTc4dyP8tefl9ozQhgdRXU6l3HpUx/bwEOuZ/PdUv6r4JSpM aJPnaIbE0qM1mJfJZHEBmQ55Z7shc4ogrA8r2XquKvfLX3WZ+2EWGUjyAKRRPlWY tIfgbaQaZS9dbUFV25QGyJaTAYqfLlszwdO4jDpNnWySYuy5LQUjHPkQVHpCjIt5 v36OrVaf++/fwGKCjF1TzRRqUhuVI+Lh8Uyr+py2Y+70trS+wvUlcOPtcE2ae11x BVV+5Xu8uOouPEy113xwgkCPyUxEWMVdWGu0QElzNdbjWn8ilX5j+CRRLGWTUCik vXkvvrewE1KJ6qpyRcpvMkFw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY39mCr F7ujW9sOxfApBO41/w6/MB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoNOylylxXqH1Q/avfv5zmdhPzlhJIOGGAbHrHLJvC+KzTwExbgw2g p/Io3WBgbpGXSkBAJDw7wN11b9kzQnRSFkbN0BlcxH35jxxpdpyjbIXB+gWubhYl PuLJ4Yy1ixHi82faDNpY2Ve9tMt5fAlFv1tyVU/PFyi3RWKzygtXPaZOV0X+oXlT jgGWuXLyUvCOYiuVwlgXB9h4j3RuYUSgR8wYLxe2OcvLWRQyhkw2500HXie17I53 XjCrdei6s6vBs+3of7DLVoC0T6h3f5ks5zxr/0fRvJijolzc9NMg9kf1YcU1XwYo gjjnzx8VUA+VwxsTcZ3oSxSsoCPH/dVh -----END CERTIFICATE-----Generated at Fri Jul 4 03:30:30 2025 by rpki-client