$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: 0nLBPs/FLHKE3h8afUIg6akJUm6HMY/5PLkf8C6vXyk= Subject key identifier: 5B:D4:8C:1E:81:ED:6D:71:CD:D1:2B:28:AA:55:63:00:79:19:16:F1 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0B74 Signing time: Wed 02 Jul 2025 19:18:20 +0000 Manifest this update: Wed 02 Jul 2025 19:18:19 +0000 Manifest next update: Wed 09 Jul 2025 19:18:19 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: C+8W3xzyfJTIKvMhowJ3e5wKfL62pk9aR2ZT5is7UyA=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Jul 2 19:18:19 2025 GMT Not After : Jul 9 19:18:19 2025 GMT Subject: CN=686585fc-3df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:53:7f:8d:c0:12:82:71:54:7f:fc:0e:8a: e1:29:8a:bf:97:b4:21:d3:e0:70:95:7c:94:cc:d1: e8:05:14:b8:f1:13:37:e9:87:be:b7:81:29:7f:cf: d0:10:28:2d:6d:80:1b:46:da:69:45:ba:8f:20:1b: ba:4b:ae:08:f8:57:be:69:89:53:5e:8a:48:e7:92: 6a:55:20:8c:5a:40:0d:23:f2:57:4c:df:4e:14:59: 3b:9a:e3:03:bd:b9:25:62:b6:06:3d:4c:24:c9:c9: fc:1b:0e:2d:03:db:96:98:9b:d1:91:a2:89:e9:b5: e6:5d:33:f4:69:31:ab:ad:d1:be:44:11:d9:57:43: 55:c0:9e:fb:25:e6:f8:2e:d6:d3:b5:c0:99:bb:4a: e5:a8:7b:52:1f:b1:7c:da:8f:f2:98:65:0f:a1:96: c4:8e:53:02:15:30:33:da:c6:05:4f:8f:92:d9:92: 54:0d:52:cf:cc:e5:f6:20:96:47:f0:96:0b:1e:ad: 5a:ae:75:e9:ef:fb:64:a7:3f:6e:2d:91:7b:d0:7c: c1:c8:83:e2:51:4a:56:34:e8:50:ec:b5:19:66:0a: 95:3b:f1:ad:53:4b:d7:e3:af:0a:09:89:f4:c8:35: f1:ea:a0:b0:6b:06:c9:1b:35:44:f3:7a:03:d2:f9: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:8C:1E:81:ED:6D:71:CD:D1:2B:28:AA:55:63:00:79:19:16:F1 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f0:ae:34:7b:0e:b2:71:33:dc:78:eb:b5:93:67:36:b7:ab: ef:ab:70:e7:78:04:74:f4:33:40:2b:56:ac:29:17:d4:df:c7: 7f:07:1d:ff:94:0a:17:22:c4:2a:d4:7a:87:78:c4:0b:08:04: 0b:35:09:8f:69:95:a8:3b:91:6b:a0:69:81:ef:ec:ac:52:78: 6c:45:40:4a:e0:45:db:c5:de:38:01:1f:a0:d0:3b:48:99:66: df:8a:8e:12:c3:f0:de:b3:52:b6:2c:73:be:73:5b:33:f5:0d: 40:01:25:7b:30:67:c9:c4:08:6a:d1:ce:18:53:18:ce:17:60: 0d:e6:f9:05:e6:7f:b0:71:ab:97:e6:06:6d:4f:57:8c:46:73: 0c:9a:95:cb:da:53:3e:8b:2e:e7:d2:f0:b8:27:76:55:7b:2b: d7:58:ea:8b:ca:3e:7c:33:48:7e:6a:2b:0f:8d:29:7b:88:cc: de:63:b3:5b:4e:27:22:47:85:5d:4b:19:26:54:6f:6c:af:4f: 8f:4d:fe:28:14:07:15:36:4d:55:4d:6b:a7:6f:12:c3:84:a9: b3:b0:91:7c:97:d5:14:62:36:3b:12:4f:4c:88:5d:b1:4f:6b: 1c:3e:29:a0:6e:d1:58:3e:e7:5f:91:f8:6b:d0:2a:18:d2:0d: b2:55:3d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUwNzAyMTkxODE5WhcNMjUwNzA5MTkxODE5WjAYMRYwFAYD VQQDEw02ODY1ODVmYy0zZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2ZTf43AEoJxVH/8DorhKYq/l7Qh0+BwlXyUzNHoBRS48RM36Ye+t4Epf8/Q ECgtbYAbRtppRbqPIBu6S64I+Fe+aYlTXopI55JqVSCMWkANI/JXTN9OFFk7muMD vbklYrYGPUwkycn8Gw4tA9uWmJvRkaKJ6bXmXTP0aTGrrdG+RBHZV0NVwJ77Jeb4 LtbTtcCZu0rlqHtSH7F82o/ymGUPoZbEjlMCFTAz2sYFT4+S2ZJUDVLPzOX2IJZH 8JYLHq1arnXp7/tkpz9uLZF70HzByIPiUUpWNOhQ7LUZZgqVO/GtU0vX468KCYn0 yDXx6qCwawbJGzVE83oD0vlT6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvUjB6B 7W1xzdErKKpVYwB5GRbxMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8K40ew6ycTPceOu1k2c2t6vvq3DneAR09DNAK1asKRfU38d/Bx3/ lAoXIsQq1HqHeMQLCAQLNQmPaZWoO5FroGmB7+ysUnhsRUBK4EXbxd44AR+g0DtI mWbfio4Sw/Des1K2LHO+c1sz9Q1AASV7MGfJxAhq0c4YUxjOF2AN5vkF5n+wcauX 5gZtT1eMRnMMmpXL2lM+iy7n0vC4J3ZVeyvXWOqLyj58M0h+aisPjSl7iMzeY7Nb TiciR4VdSxkmVG9sr0+PTf4oFAcVNk1VTWunbxLDhKmzsJF8l9UUYjY7Ek9MiF2x T2scPimgbtFYPudfkfhr0CoY0g2yVT0C -----END CERTIFICATE-----Generated at Thu Jul 3 09:39:00 2025 by rpki-client