$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json) Hash identifier: v480chdfjuXt4xcSHNVrj0hJZrMt0cf6m2GZMyozZSs= Subject key identifier: 38:F4:01:92:B8:51:B9:12:9C:5B:DA:F8:49:11:0E:96:8D:3B:C8:B5 Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 0366 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft Manifest number: 0361 Signing time: Wed 02 Jul 2025 22:40:18 +0000 Manifest this update: Wed 02 Jul 2025 22:40:17 +0000 Manifest next update: Wed 09 Jul 2025 22:40:17 +0000 Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: nnl/CQ1KxuMCbE/zCF7SoqWc7fcBC0qtyM3Ua+3YFrU=) 2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Validity Not Before: Jul 2 22:40:17 2025 GMT Not After : Jul 9 22:40:17 2025 GMT Subject: CN=6865b552-db43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:e3:1f:06:af:8c:17:bd:77:70:a4:d2:ba: be:ce:86:58:a3:aa:38:c7:71:14:0b:99:3d:6e:f6: 9a:82:a4:e4:9d:41:af:c3:a4:2f:07:3f:d4:ac:8d: 09:b5:79:28:0e:7e:13:e1:0a:52:d1:2a:de:ba:0f: 7f:7e:00:1c:84:ad:20:01:e6:89:fa:a2:1a:49:e1: 73:a3:30:c5:2d:df:7a:08:6d:de:44:b2:99:a0:65: b7:0c:6b:e4:ad:dc:65:72:3a:3c:c9:85:fc:ab:d0: 4f:d1:23:c3:ee:26:31:ab:6c:97:47:35:f6:13:a5: 34:77:15:a4:e0:17:3d:68:77:01:d6:26:72:28:9f: 3e:2e:b5:c4:b9:cc:03:6d:5d:e2:7a:54:9e:37:ab: 3f:c0:5a:14:01:31:df:85:4f:f2:c0:73:2d:8a:9c: ab:b6:82:f0:de:35:d9:eb:f3:7a:2f:d7:23:75:1c: ca:01:75:d0:37:3d:f3:2e:b6:d6:75:b0:6c:2e:0f: 0e:53:64:33:73:55:db:3d:b9:33:bb:51:c1:98:fe: b4:2b:8b:48:ff:5e:22:35:b3:40:af:9c:a4:d1:e6: 96:11:f7:06:2f:4f:06:1e:a6:a9:1d:35:c3:0a:dd: 23:35:2c:19:3c:f4:06:6e:63:89:8d:c8:68:c2:8f: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:01:92:B8:51:B9:12:9C:5B:DA:F8:49:11:0E:96:8D:3B:C8:B5 X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:bd:3d:ea:4f:c7:13:0c:9b:34:3b:58:14:0e:75:a7:32:a9: 31:07:98:12:cf:f7:c5:5a:43:f8:11:e2:bc:ad:67:b1:99:64: 51:f5:88:87:c6:9f:6b:7d:a2:67:0c:9c:53:93:4d:bd:15:a0: 3d:39:e4:0e:ac:d2:e2:51:ec:d8:9c:42:c2:ff:59:be:20:0d: d5:a1:d7:cd:39:b4:9f:0a:cd:c3:aa:33:2f:b6:f6:30:42:cb: e3:f7:7d:7a:b0:44:44:62:69:94:6c:1e:39:46:62:25:12:9e: f9:3e:18:2a:c0:6c:e4:05:4a:0e:8c:27:09:3d:52:f5:58:c5: 5b:17:29:06:9a:ca:f2:1e:7d:ea:1b:d9:a0:26:bb:6c:8f:f8: db:90:a1:3c:73:56:4d:58:42:7c:15:b1:f1:c1:c0:e3:e2:94: e4:65:e3:a8:68:bd:3e:0d:57:15:a0:4a:73:ed:23:fc:25:21: 84:e3:ce:39:10:00:50:50:50:ad:be:90:b8:28:5d:3d:33:cc: 6f:1c:66:79:19:de:66:2f:8a:ab:5f:7b:16:b1:d5:a9:8a:e8: 3c:79:92:b9:83:70:3c:b1:80:40:0a:25:83:b5:57:c0:00:c7: 26:28:86:ef:8c:5f:aa:c0:8b:79:af:9e:c4:00:fe:cd:b6:dd: 5c:73:05:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjUwNzAyMjI0MDE3WhcNMjUwNzA5MjI0MDE3WjAYMRYwFAYD VQQDEw02ODY1YjU1Mi1kYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAfjHwavjBe9d3Ck0rq+zoZYo6o4x3EUC5k9bvaagqTknUGvw6QvBz/UrI0J tXkoDn4T4QpS0Sreug9/fgAchK0gAeaJ+qIaSeFzozDFLd96CG3eRLKZoGW3DGvk rdxlcjo8yYX8q9BP0SPD7iYxq2yXRzX2E6U0dxWk4Bc9aHcB1iZyKJ8+LrXEucwD bV3ielSeN6s/wFoUATHfhU/ywHMtipyrtoLw3jXZ6/N6L9cjdRzKAXXQNz3zLrbW dbBsLg8OU2Qzc1XbPbkzu1HBmP60K4tI/14iNbNAr5yk0eaWEfcGL08GHqapHTXD Ct0jNSwZPPQGbmOJjchowo+1ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj0AZK4 UbkSnFva+EkRDpaNO8i1MB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9CRjFFNzExOEJBQzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1Vv cnFRaExNN2JjcFlUcVpGVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8vT3qT8cTDJs0O1gUDnWnMqkxB5gSz/fFWkP4EeK8rWexmWRR9YiH xp9rfaJnDJxTk029FaA9OeQOrNLiUezYnELC/1m+IA3VodfNObSfCs3DqjMvtvYw Qsvj9316sEREYmmUbB45RmIlEp75PhgqwGzkBUoOjCcJPVL1WMVbFykGmsryHn3q G9mgJrtsj/jbkKE8c1ZNWEJ8FbHxwcDj4pTkZeOoaL0+DVcVoEpz7SP8JSGE4845 EABQUFCtvpC4KF09M8xvHGZ5Gd5mL4qrX3sWsdWpiug8eZK5g3A8sYBACiWDtVfA AMcmKIbvjF+qwIt5r57EAP7Ntt1ccwU+ -----END CERTIFICATE-----Generated at Thu Jul 3 07:10:22 2025 by rpki-client