$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: p952Ob7aJy2kvHfQTuEbl9fe7vPqfr2dZjeTO6IKmro= Subject key identifier: 26:2B:41:A4:FD:DE:80:58:40:86:BE:A3:76:39:6B:FA:5B:AE:50:55 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 041A Signing time: Thu 03 Jul 2025 00:43:15 +0000 Manifest this update: Thu 03 Jul 2025 00:43:14 +0000 Manifest next update: Thu 10 Jul 2025 00:43:14 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: 9s/LE2Ncb9ZVum6YEIrSUH3cR91BHLiN6xF5XEeJjtM=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Jul 3 00:43:14 2025 GMT Not After : Jul 10 00:43:14 2025 GMT Subject: CN=6865d222-c11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:62:1b:e1:34:f8:a1:3a:7a:70:b5:af:7e: ba:0c:1e:53:d2:82:9a:cc:0a:b4:aa:42:8f:88:59: ba:3a:8b:d2:28:59:3b:c0:bd:ad:94:09:76:eb:d7: 52:4a:ec:99:38:b1:b0:bf:e4:2a:b8:e1:19:0b:73: bc:40:c7:46:14:cd:8b:61:b8:20:b8:38:22:b6:01: af:7e:46:ff:f8:17:09:a8:32:c8:c9:1b:b8:de:11: 62:a2:dc:ad:af:75:48:20:42:f3:b3:f7:2a:b0:02: 2f:51:36:35:4e:c4:01:72:e4:93:f5:40:ff:4f:45: 28:e4:a1:a3:a8:fd:13:c0:d8:1b:80:db:ac:ce:06: 25:2e:fa:29:24:da:0e:ea:71:80:22:6d:2d:c4:d6: d9:17:2b:1f:3a:a7:3e:73:6f:15:f3:01:c5:d2:7d: fa:f2:57:c0:f4:12:d4:ca:a2:7c:bc:97:95:f8:ca: 86:79:6f:58:b2:1d:4c:f5:d3:28:83:02:ff:f1:15: f3:37:06:0a:1e:b2:a6:4e:17:4b:f9:07:2b:00:43: 14:38:ab:82:30:b4:01:9e:da:04:cd:b6:23:2d:fa: 0c:ab:ca:59:95:e4:14:02:9d:c9:a2:ed:bd:52:6d: 7b:d1:40:a5:ac:06:55:26:22:74:84:34:c7:bc:49: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2B:41:A4:FD:DE:80:58:40:86:BE:A3:76:39:6B:FA:5B:AE:50:55 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f9:29:3b:c7:89:a2:ae:b2:73:b7:6f:d2:24:e6:a6:d5:40: 35:56:c8:df:ad:d6:8a:14:3b:0b:13:ba:cc:e0:e5:e2:b0:26: cd:bc:b6:bb:66:72:f3:fa:8b:8b:c5:01:8b:c2:8c:98:ea:a0: ad:26:10:5c:05:95:62:00:3f:10:72:b8:1e:aa:82:32:da:67: 22:0d:5b:fc:65:97:01:20:07:09:cd:47:00:6a:d1:d8:82:d1: 87:ae:b8:86:c9:b1:92:a4:1a:9c:e3:33:e5:20:a3:e2:a8:62: 2e:fb:0d:1c:c3:5e:fd:80:1d:4d:df:30:1c:12:d2:c6:6a:4e: 91:22:4f:8b:63:78:b6:7f:44:3e:ee:60:fb:79:3c:4f:40:b8: 1c:f6:9d:e8:b4:18:ff:f6:1f:08:1d:6e:fd:41:9b:bb:4f:d4: e8:bc:ea:88:0b:0b:52:c8:1c:2b:a4:38:65:d0:2b:ea:84:84: f9:19:18:c3:7b:85:ac:cc:c8:b4:a5:d7:6f:54:9a:77:1b:fb: fe:27:e6:08:fc:b4:c3:b9:47:7d:96:b0:af:c4:72:02:19:cd: 10:f6:66:7f:27:32:1f:2f:0d:00:fd:68:24:60:84:5f:d3:d5: c6:56:3a:bd:93:66:af:eb:e5:0d:bb:05:41:cd:fc:b2:c7:23: bc:02:6c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwNzAzMDA0MzE0WhcNMjUwNzEwMDA0MzE0WjAYMRYwFAYD VQQDEw02ODY1ZDIyMi1jMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1RiG+E0+KE6enC1r366DB5T0oKazAq0qkKPiFm6OovSKFk7wL2tlAl269dS SuyZOLGwv+QquOEZC3O8QMdGFM2LYbgguDgitgGvfkb/+BcJqDLIyRu43hFiotyt r3VIIELzs/cqsAIvUTY1TsQBcuST9UD/T0Uo5KGjqP0TwNgbgNuszgYlLvopJNoO 6nGAIm0txNbZFysfOqc+c28V8wHF0n368lfA9BLUyqJ8vJeV+MqGeW9Ysh1M9dMo gwL/8RXzNwYKHrKmThdL+QcrAEMUOKuCMLQBntoEzbYjLfoMq8pZleQUAp3Jou29 Um170UClrAZVJiJ0hDTHvEmmRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYrQaT9 3oBYQIa+o3Y5a/pbrlBVMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT+Sk7x4mirrJzt2/SJOam1UA1VsjfrdaKFDsLE7rM4OXisCbNvLa7 ZnLz+ouLxQGLwoyY6qCtJhBcBZViAD8QcrgeqoIy2mciDVv8ZZcBIAcJzUcAatHY gtGHrriGybGSpBqc4zPlIKPiqGIu+w0cw179gB1N3zAcEtLGak6RIk+LY3i2f0Q+ 7mD7eTxPQLgc9p3otBj/9h8IHW79QZu7T9TovOqICwtSyBwrpDhl0CvqhIT5GRjD e4WszMi0pddvVJp3G/v+J+YI/LTDuUd9lrCvxHICGc0Q9mZ/JzIfLw0A/WgkYIRf 09XGVjq9k2av6+UNuwVBzfyyxyO8AmwZ -----END CERTIFICATE-----Generated at Thu Jul 3 08:50:14 2025 by rpki-client