$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: 5dSshqotweTLBXXSadvE1qLGtiCpkUsvMq2Rm3y0ASI= Subject key identifier: 5E:81:8D:AF:08:33:39:A4:18:1E:60:3D:C2:EC:2A:4D:27:97:E7:7A Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 349D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 3498 Signing time: Mon 30 Jun 2025 14:48:12 +0000 Manifest this update: Mon 30 Jun 2025 14:48:12 +0000 Manifest next update: Mon 07 Jul 2025 14:48:12 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: WbJXWC2Dpmu+Te0I0gyQYaXQ3OMC9cZ8/x7BlznDSAo=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13469 (0x349d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Jun 30 14:48:12 2025 GMT Not After : Jul 7 14:48:12 2025 GMT Subject: CN=6862a3ac-3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:3c:e5:6d:a9:fa:8e:2b:00:78:42:67:ba: d4:d7:60:75:42:19:87:18:3b:bd:bb:4f:22:35:65: 0a:c6:d6:7f:d7:18:70:a0:02:37:f9:c4:00:bb:6c: 62:a3:47:11:af:4a:6b:92:66:14:f1:d4:e5:6b:18: 23:93:40:e7:6d:68:6d:53:07:c4:b3:73:05:a3:5a: 39:d5:d0:ca:27:f2:eb:f6:10:b9:db:20:fc:b8:3e: c7:fd:a2:e6:25:42:e0:ae:d6:b8:2b:f6:2f:de:ed: e0:42:ea:3a:2d:e2:86:01:0f:2f:81:c7:13:ed:cf: e6:b9:78:42:65:9d:ec:2c:f2:8e:aa:c1:11:2d:f5: 2a:c4:d6:81:15:ec:c5:1e:97:4e:61:9d:4d:6f:d8: 01:cc:00:61:50:4e:9c:d3:48:64:60:f5:45:ca:91: 3c:31:75:b3:89:43:07:df:ff:4e:c8:eb:ba:8c:d6: a6:53:ba:7f:b2:6c:20:2c:f6:43:18:0e:ea:27:d4: 5a:18:6b:bc:2f:cf:2f:a0:1b:3b:ca:c1:4d:26:21: 29:5a:2e:55:7b:74:ec:ac:ed:46:d9:51:ac:4a:34: 14:52:65:7a:df:b9:92:05:c6:3e:56:e9:61:cb:d8: 5a:02:02:d1:73:ce:c2:99:60:62:70:ce:61:87:08: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:81:8D:AF:08:33:39:A4:18:1E:60:3D:C2:EC:2A:4D:27:97:E7:7A X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:bb:7c:e3:f3:c2:cc:8a:27:85:42:ef:df:14:6a:51:ce: 71:3c:fb:bc:58:c5:27:51:ba:8a:8d:73:5f:41:32:41:43:38: da:01:1d:aa:cc:3d:a3:38:52:dc:2c:d1:2f:af:a4:aa:1f:b5: 9a:0e:0b:f9:d8:a4:6f:0a:ce:47:18:ab:66:42:f2:df:04:ce: 5e:f6:0b:56:62:73:3a:bd:bf:64:9b:9f:d3:4a:fe:1b:d3:76: bd:d7:08:c5:9c:73:ec:a4:2f:c4:9a:a1:80:a1:bd:5e:b1:60: 3a:1a:92:bd:df:da:e4:df:82:96:a2:2b:00:46:9a:5d:fe:e5: 37:1c:9a:1e:b9:9f:9c:41:06:b9:80:9f:a5:ef:30:f1:6e:a0: 20:2c:99:9d:b3:75:a7:d6:c8:96:00:b5:a5:25:a0:8d:fe:08: 83:d7:14:a1:72:ff:ba:8a:a8:92:71:4a:e0:05:67:71:7a:8c: fb:fc:f7:57:bd:2b:11:ac:f4:c2:5b:17:01:d3:ee:bf:b1:20: 34:2c:47:31:6c:63:40:f3:69:80:f4:d4:35:60:e2:ab:7d:e7: 8c:e7:76:da:06:1e:d1:d4:cc:2d:69:39:a9:6e:33:16:80:c8: 6a:a6:de:6b:a1:b9:7d:8a:f8:31:35:6f:c5:28:23:1c:93:47: fc:e6:5b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNjMwMTQ0ODEyWhcNMjUwNzA3MTQ0ODEyWjAYMRYwFAYD VQQDEw02ODYyYTNhYy0zNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttA85W2p+o4rAHhCZ7rU12B1QhmHGDu9u08iNWUKxtZ/1xhwoAI3+cQAu2xi o0cRr0prkmYU8dTlaxgjk0DnbWhtUwfEs3MFo1o51dDKJ/Lr9hC52yD8uD7H/aLm JULgrta4K/Yv3u3gQuo6LeKGAQ8vgccT7c/muXhCZZ3sLPKOqsERLfUqxNaBFezF HpdOYZ1Nb9gBzABhUE6c00hkYPVFypE8MXWziUMH3/9OyOu6jNamU7p/smwgLPZD GA7qJ9RaGGu8L88voBs7ysFNJiEpWi5Ve3TsrO1G2VGsSjQUUmV637mSBcY+Vulh y9haAgLRc87CmWBicM5hhwhooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Bja8I MzmkGB5gPcLsKk0nl+d6MB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzHrt84/PCzIonhULv3xRqUc5xPPu8WMUnUbqKjXNfQTJBQzjaAR2q zD2jOFLcLNEvr6SqH7WaDgv52KRvCs5HGKtmQvLfBM5e9gtWYnM6vb9km5/TSv4b 03a91wjFnHPspC/EmqGAob1esWA6GpK939rk34KWoisARppd/uU3HJoeuZ+cQQa5 gJ+l7zDxbqAgLJmds3Wn1siWALWlJaCN/giD1xShcv+6iqiScUrgBWdxeoz7/PdX vSsRrPTCWxcB0+6/sSA0LEcxbGNA82mA9NQ1YOKrfeeM53baBh7R1MwtaTmpbjMW gMhqpt5robl9ivgxNW/FKCMck0f85lsd -----END CERTIFICATE-----Generated at Wed Jul 2 05:31:14 2025 by rpki-client