$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: odbDQcqqi9iXNEuqClKIIV109I9cWVyPwDSrFyw4er0= Subject key identifier: 43:27:48:D4:F9:78:0C:BE:77:33:DE:D7:56:75:3C:A1:4F:8B:B5:44 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 34B7 Signing time: Wed 02 Jul 2025 15:22:59 +0000 Manifest this update: Wed 02 Jul 2025 15:22:58 +0000 Manifest next update: Wed 09 Jul 2025 15:22:58 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: bScwB7nlYhAcrwmDG71F2Aiw1tARtITYT1EpU98B8jw=) 2: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=) 3: 0767F34C845911EA8651FB1AC4F9AE02.roa (hash: 3DWCIf40TgibMX5CanXsNcETyUqD6pX5FWOWYBonFK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Jul 2 15:22:58 2025 GMT Not After : Jul 9 15:22:58 2025 GMT Subject: CN=68654ed2-f80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:b0:2d:6f:9a:fb:9d:4b:28:8c:86:9b:ec: 5b:3f:3f:8c:51:4c:a9:15:73:dd:24:ae:a9:c8:08: 4c:39:33:a9:45:0c:10:14:64:42:26:72:c8:a4:05: 6f:f4:49:4f:79:c3:fe:7f:c6:96:58:e6:c1:7b:b5: 2b:e0:44:24:2a:fb:f5:04:30:7f:7b:63:d9:9c:b2: 14:73:a7:43:92:de:7d:1f:24:c5:ce:6f:2a:72:78: 34:1f:5d:b1:21:6b:d7:4a:1a:7a:12:23:c8:f4:8b: de:0b:2d:fe:bf:f9:66:3f:f0:15:1c:5a:09:07:a7: 98:78:a0:a6:eb:c2:53:d7:3c:72:08:c1:39:fe:85: 64:82:26:2a:40:85:fa:01:dc:08:5f:3b:48:cd:08: f5:27:a1:e2:6e:17:53:31:13:5b:48:c8:c1:70:2a: 56:bd:73:1a:c0:42:b6:81:30:6c:0c:30:fb:fd:a6: 9a:6d:ba:1f:d3:88:71:55:55:14:4e:3e:5d:52:ac: ca:c8:da:00:7a:83:62:83:97:45:1b:dc:b5:6a:44: f5:6e:e4:45:56:e2:f2:37:1b:91:d5:1b:e1:62:37: a0:69:59:ca:c7:47:bf:44:0f:c1:dd:a5:f9:c8:0f: 6b:d8:b0:bc:be:a2:a2:4a:f8:48:f7:0f:df:a7:ec: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:48:D4:F9:78:0C:BE:77:33:DE:D7:56:75:3C:A1:4F:8B:B5:44 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:cd:19:dc:91:5f:8d:d2:15:90:ea:80:54:f7:d4:36:76: 66:99:d4:c0:a7:3d:e2:47:15:c5:e6:be:37:a6:6c:f6:af:b2: 90:d2:b4:7f:78:c7:fe:46:8e:0a:62:32:1c:87:5c:21:cc:7b: c3:dc:85:e7:fe:a4:8a:ab:3d:7d:43:ba:90:6f:b9:3e:37:a7: 4b:9e:9a:46:65:1c:d2:0c:4a:61:6f:c1:e6:1f:99:8b:a6:b1: 37:a7:1d:b0:e5:b0:c2:b1:66:01:37:f2:17:85:92:1f:9e:60: 4a:4b:bc:dc:ab:76:27:fa:ff:dc:98:4f:a2:1c:a0:23:55:e3: de:ab:9f:30:9e:c0:5e:ae:c4:56:84:f3:94:71:ae:fd:1e:66: c0:e9:88:28:b6:97:46:4e:4d:20:58:08:09:86:4d:f3:7b:b2: 8a:a4:a2:b9:b3:9b:d3:9a:17:d9:33:d2:71:7c:08:03:01:06: 12:7b:aa:60:e0:76:60:ac:47:6c:ba:58:18:4f:06:12:9b:48: 13:68:b0:d9:dc:83:d0:e2:dc:c1:b5:42:6d:7d:dc:46:c2:b0: 7d:5d:51:1a:52:9e:09:90:18:6d:32:c2:41:ba:de:f7:9a:27: c7:40:be:8a:b7:a1:8c:18:da:f0:a9:3f:e8:ea:ed:55:00:ce: 1a:e0:b0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjUwNzAyMTUyMjU4WhcNMjUwNzA5MTUyMjU4WjAYMRYwFAYD VQQDEw02ODY1NGVkMi1mODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1g6wLW+a+51LKIyGm+xbPz+MUUypFXPdJK6pyAhMOTOpRQwQFGRCJnLIpAVv 9ElPecP+f8aWWObBe7Ur4EQkKvv1BDB/e2PZnLIUc6dDkt59HyTFzm8qcng0H12x IWvXShp6EiPI9IveCy3+v/lmP/AVHFoJB6eYeKCm68JT1zxyCME5/oVkgiYqQIX6 AdwIXztIzQj1J6HibhdTMRNbSMjBcCpWvXMawEK2gTBsDDD7/aaabbof04hxVVUU Tj5dUqzKyNoAeoNig5dFG9y1akT1buRFVuLyNxuR1RvhYjegaVnKx0e/RA/B3aX5 yA9r2LC8vqKiSvhI9w/fp+w47wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMnSNT5 eAy+dzPe11Z1PKFPi7VEMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqc0Z3JFfjdIVkOqAVPfUNnZmmdTApz3iRxXF5r43pmz2r7KQ0rR/ eMf+Ro4KYjIch1whzHvD3IXn/qSKqz19Q7qQb7k+N6dLnppGZRzSDEphb8HmH5mL prE3px2w5bDCsWYBN/IXhZIfnmBKS7zcq3Yn+v/cmE+iHKAjVePeq58wnsBersRW hPOUca79HmbA6YgotpdGTk0gWAgJhk3ze7KKpKK5s5vTmhfZM9JxfAgDAQYSe6pg 4HZgrEdsulgYTwYSm0gTaLDZ3IPQ4tzBtUJtfdxGwrB9XVEaUp4JkBhtMsJBut73 mifHQL6Kt6GMGNrwqT/o6u1VAM4a4LAU -----END CERTIFICATE-----Generated at Wed Jul 2 20:57:11 2025 by rpki-client