$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: zEqUmpStzmkJcexzu88R1CqwutIxTDxhGylgNsi9stQ= Subject key identifier: 1E:8F:2E:4D:DB:CB:B8:05:B1:69:7F:A5:AD:AC:3B:B2:60:C3:EE:CD Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 08DE Signing time: Mon 30 Jun 2025 20:38:15 +0000 Manifest this update: Mon 30 Jun 2025 20:38:14 +0000 Manifest next update: Mon 07 Jul 2025 20:38:14 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: LDegpxRr/FubcwMMeYmISnmN5QH2IdJkp67WK0pNcc8=) 2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=) 3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455, serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: Jun 30 20:38:14 2025 GMT Not After : Jul 7 20:38:14 2025 GMT Subject: CN=6862f5b6-1a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:c9:62:14:a8:fe:ca:01:fa:70:e7:d1:c2: 93:e1:38:9d:ba:b4:aa:ab:c1:32:88:2f:35:d7:b5: d7:3b:75:7d:f3:22:ad:a9:a8:73:7e:ea:d4:9b:50: ab:2f:f9:74:cf:6a:30:de:3e:99:94:a3:0a:f9:3b: bd:96:9c:a8:18:3a:16:52:a3:1d:0a:4c:48:6e:e3: c7:a4:81:3d:00:9f:0e:fa:d6:12:9e:e6:cb:70:eb: cb:d8:6d:5b:70:4f:42:56:a5:e1:db:de:82:d1:b1: 6d:0d:e8:cd:d5:d1:48:db:4a:38:10:17:96:3e:05: 0f:16:be:30:90:15:a5:2c:eb:d1:14:64:df:04:74: e3:77:97:82:71:87:da:a5:ea:9e:d5:43:ff:4a:1d: 1f:88:0c:3c:c7:54:c5:be:0a:e3:6c:5b:b9:64:f5: f2:01:db:3d:ff:23:b1:4b:62:a0:03:fa:53:01:19: 5f:4c:2d:4e:44:d8:e2:28:4b:9d:14:ff:4e:4e:c8: ed:07:7c:b0:7b:5d:d0:37:da:c6:1e:6d:6f:bb:4a: b9:d8:4a:df:36:07:94:d8:46:1f:a7:51:a1:89:1d: 33:6b:12:0e:8c:96:66:e9:11:d6:95:20:e2:52:93: 50:b9:61:5c:ed:a2:ab:f4:0a:c9:7e:ed:e0:22:01: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8F:2E:4D:DB:CB:B8:05:B1:69:7F:A5:AD:AC:3B:B2:60:C3:EE:CD X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2b:e3:83:6a:9e:14:af:fc:34:25:58:ce:e4:09:a3:85:9b: db:78:45:df:37:e7:81:53:2e:ee:91:72:a2:ba:fc:1d:2b:9b: 9e:4c:86:38:0d:95:ca:12:14:6b:2b:c4:1d:d0:67:ea:01:a6: 2c:da:36:fb:3d:23:a5:c0:25:32:a3:28:f3:43:75:e1:6a:61: a9:6c:53:01:39:c0:fd:d6:f7:ff:98:49:a1:9d:23:0e:43:f4: 3f:cf:bf:88:74:5d:ac:b8:d5:03:94:59:6d:5e:6a:a7:07:70: 19:d8:90:ff:ce:ea:10:1f:14:62:fd:6e:77:ae:f6:76:8d:9d: 07:1e:90:d2:b7:ac:0e:17:cb:72:39:ff:a5:07:a0:52:53:1f: 94:91:0c:00:58:c7:04:7c:f7:19:3d:ba:8d:dc:fb:bf:75:33: 56:4c:43:fd:4e:90:d0:f0:8a:3b:55:0c:38:81:8a:5f:19:d6: 38:33:7e:04:08:7a:a9:b2:1d:bd:ea:91:72:8f:cf:03:86:a4: fe:91:66:8a:de:01:f2:1a:ef:3b:0e:f5:3c:ac:82:2a:81:96: 5c:ff:a4:26:9b:2c:3a:76:23:eb:14:c3:ff:63:3c:71:6c:bf: 24:4a:01:9c:1c:c8:59:46:82:41:3f:f5:af:58:57:52:bd:9f: 0b:25:ed:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjUwNjMwMjAzODE0WhcNMjUwNzA3MjAzODE0WjAYMRYwFAYD VQQDEw02ODYyZjViNi0xYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupDJYhSo/soB+nDn0cKT4TidurSqq8EyiC8117XXO3V98yKtqahzfurUm1Cr L/l0z2ow3j6ZlKMK+Tu9lpyoGDoWUqMdCkxIbuPHpIE9AJ8O+tYSnubLcOvL2G1b cE9CVqXh296C0bFtDejN1dFI20o4EBeWPgUPFr4wkBWlLOvRFGTfBHTjd5eCcYfa peqe1UP/Sh0fiAw8x1TFvgrjbFu5ZPXyAds9/yOxS2KgA/pTARlfTC1ORNjiKEud FP9OTsjtB3ywe13QN9rGHm1vu0q52ErfNgeU2EYfp1GhiR0zaxIOjJZm6RHWlSDi UpNQuWFc7aKr9ArJfu3gIgFVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6PLk3b y7gFsWl/pa2sO7Jgw+7NMB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGK+ODap4Ur/w0JVjO5AmjhZvbeEXfN+eBUy7ukXKiuvwdK5ueTIY4 DZXKEhRrK8Qd0GfqAaYs2jb7PSOlwCUyoyjzQ3XhamGpbFMBOcD91vf/mEmhnSMO Q/Q/z7+IdF2suNUDlFltXmqnB3AZ2JD/zuoQHxRi/W53rvZ2jZ0HHpDSt6wOF8ty Of+lB6BSUx+UkQwAWMcEfPcZPbqN3Pu/dTNWTEP9TpDQ8Io7VQw4gYpfGdY4M34E CHqpsh296pFyj88DhqT+kWaK3gHyGu87DvU8rIIqgZZc/6Qmmyw6diPrFMP/Yzxx bL8kSgGcHMhZRoJBP/WvWFdSvZ8LJe2m -----END CERTIFICATE-----Generated at Wed Jul 2 20:07:08 2025 by rpki-client