$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: fem1P4t2X5+iTl6p+iC8KQtgDF0ut7t8QT/pNzV4R+Y= Subject key identifier: E8:33:C4:CF:37:DB:32:A7:12:97:7E:58:0A:77:9C:35:B4:AB:C5:A9 Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 0713 Signing time: Sat 28 Jun 2025 21:30:10 +0000 Manifest this update: Sat 28 Jun 2025 21:30:09 +0000 Manifest next update: Sat 05 Jul 2025 21:30:09 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: nzSxGmEWIvlDAWQa2yIWVFmu0Q4Vr8116/OLjMh0Ofg=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: Jun 28 21:30:09 2025 GMT Not After : Jul 5 21:30:09 2025 GMT Subject: CN=68605ee1-42aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:c9:88:a4:0a:13:45:86:c2:08:b7:b6:54: e2:cd:26:15:f4:96:c9:c7:4d:3f:78:fe:4d:85:ff: 87:39:11:30:47:b1:b1:7e:c3:fe:20:12:7d:86:87: 1b:e9:ed:8e:c8:73:3b:90:c2:fa:09:5f:15:c9:49: cd:1d:f4:8f:aa:f0:6b:66:84:4f:60:f3:ab:25:b0: b3:b0:70:25:dc:7c:05:91:c3:dd:71:47:c1:6c:0e: f1:65:e5:b5:0a:17:06:49:f1:2f:60:19:2a:c9:a6: 50:cd:14:f0:69:49:6b:fb:39:31:3c:23:0b:e6:d9: f8:5c:2d:b7:e5:a9:b6:26:3d:3f:56:86:8f:9e:75: a1:e9:b0:98:09:d7:b4:0e:27:c7:be:1c:c4:a6:0e: 71:88:1d:2e:1f:36:32:bc:fa:0a:27:1b:98:dc:45: e8:38:90:08:39:06:2e:54:28:9a:e4:e5:f9:6d:f0: e7:23:bd:4f:dd:c4:78:fd:d2:a8:24:b0:8b:a6:b0: 5c:da:25:13:bd:fa:2b:ba:21:d2:e5:eb:9d:3b:e0: 19:49:81:ff:a6:b7:69:0b:82:9b:2a:75:87:7b:33: 4c:d3:de:bd:48:3d:cc:d8:5f:9a:fd:0d:d4:53:ad: 90:34:eb:7e:83:5e:89:2f:8e:bf:56:64:9d:d4:fe: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:C4:CF:37:DB:32:A7:12:97:7E:58:0A:77:9C:35:B4:AB:C5:A9 X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fe:ba:c8:15:4c:c5:b1:2e:c0:37:4a:6c:5d:2e:30:fd:b5: 95:27:03:cb:61:ed:20:5b:fd:36:b4:57:c4:ed:d0:dd:98:cb: 32:b4:5a:59:07:46:80:3c:6a:be:92:3e:8f:e5:d5:2f:1e:02: 94:db:0e:fd:1f:2e:c0:43:0e:1d:87:7b:a0:6e:7c:af:80:79: fb:98:f1:d6:6d:27:ef:20:89:28:96:b7:b8:fe:0d:bb:77:bf: 8a:7e:06:5d:9b:e6:a8:7d:1b:f5:72:15:ad:b7:02:cd:49:41: f2:6f:fe:c6:e4:17:11:ad:89:4e:2a:65:d5:1c:32:0b:9f:dc: 8d:a0:b3:d9:f3:96:aa:1c:fd:21:2f:c2:dd:ef:0d:07:15:60: 41:73:8e:7c:fb:99:11:2f:52:9c:68:35:2e:28:5e:3c:56:47: bb:55:22:65:4b:aa:02:1b:79:b2:2c:75:30:78:fe:c5:f0:0d: 01:ac:7c:2b:fb:65:5f:29:11:a0:69:e9:60:fb:33:fa:cc:db: c4:00:4a:17:f2:5c:54:83:59:f1:be:11:98:60:2d:4e:e2:87: 8c:91:8d:be:14:54:6d:cc:64:93:28:c4:0c:e5:43:26:21:05: c3:be:77:ca:88:f8:95:3c:17:48:f3:8c:2d:39:c5:f1:7e:0b: 9e:bc:de:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjUwNjI4MjEzMDA5WhcNMjUwNzA1MjEzMDA5WjAYMRYwFAYD VQQDEw02ODYwNWVlMS00MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yXJiKQKE0WGwgi3tlTizSYV9JbJx00/eP5Nhf+HOREwR7GxfsP+IBJ9hocb 6e2OyHM7kML6CV8VyUnNHfSPqvBrZoRPYPOrJbCzsHAl3HwFkcPdcUfBbA7xZeW1 ChcGSfEvYBkqyaZQzRTwaUlr+zkxPCML5tn4XC235am2Jj0/VoaPnnWh6bCYCde0 DifHvhzEpg5xiB0uHzYyvPoKJxuY3EXoOJAIOQYuVCia5OX5bfDnI71P3cR4/dKo JLCLprBc2iUTvforuiHS5eudO+AZSYH/prdpC4KbKnWHezNM0969SD3M2F+a/Q3U U62QNOt+g16JL46/VmSd1P6CEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgzxM83 2zKnEpd+WAp3nDW0q8WpMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz/rrIFUzFsS7AN0psXS4w/bWVJwPLYe0gW/02tFfE7dDdmMsytFpZ B0aAPGq+kj6P5dUvHgKU2w79Hy7AQw4dh3ugbnyvgHn7mPHWbSfvIIkolre4/g27 d7+KfgZdm+aofRv1chWttwLNSUHyb/7G5BcRrYlOKmXVHDILn9yNoLPZ85aqHP0h L8Ld7w0HFWBBc458+5kRL1KcaDUuKF48Vke7VSJlS6oCG3myLHUweP7F8A0BrHwr +2VfKRGgaelg+zP6zNvEAEoX8lxUg1nxvhGYYC1O4oeMkY2+FFRtzGSTKMQM5UMm IQXDvnfKiPiVPBdI84wtOcXxfguevN5r -----END CERTIFICATE-----Generated at Mon Jun 30 18:20:26 2025 by rpki-client