$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: i/fqVPJCiSk7wMvyBlZElD7uodAfMaVplUYtt1Hll4k= Subject key identifier: DC:B9:8B:C4:85:33:D3:0D:EF:D8:7B:20:73:72:56:E9:D8:66:75:10 Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 03FE Signing time: Thu 03 Jul 2025 00:46:35 +0000 Manifest this update: Thu 03 Jul 2025 00:46:35 +0000 Manifest next update: Thu 10 Jul 2025 00:46:35 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: 26G1KtCD9c3GD5J3FJWGg4cO5pfEpCoOkQgym8o2GTM=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: BND24LJDq2vvWZ+xp3RlYNXBh82urnxKrrVdHSwL4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Jul 3 00:46:35 2025 GMT Not After : Jul 10 00:46:35 2025 GMT Subject: CN=6865d2eb-84e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:88:b6:ea:d6:25:07:12:be:8f:2f:03:5c: 56:db:21:e9:64:dd:89:b5:e0:08:dd:91:f1:61:41: 0d:1c:3f:32:61:7d:a3:78:74:9a:83:d0:69:d0:77: 56:a8:bf:f7:f9:4a:bd:c9:0d:03:57:ed:30:55:84: 92:82:77:11:a4:95:60:be:86:fd:f7:cf:0d:98:14: c3:02:dd:83:1b:f7:ca:de:f3:f5:c2:64:3e:f8:be: da:7d:a5:7c:a4:ea:ad:84:38:8a:44:1c:4d:a9:89: 86:69:c3:1c:50:19:c9:d8:8a:cf:97:7d:34:f1:a4: cc:68:c7:7a:77:d1:32:af:b1:1d:90:98:f0:df:b0: e6:9c:33:7e:9d:14:4f:ac:88:77:69:bf:50:d3:2c: f0:cf:84:fa:41:f1:b0:89:ac:fa:d4:09:a3:be:58: 1a:25:c4:bc:dd:c7:56:fe:10:c1:12:06:ac:53:35: d4:45:19:f9:c4:e3:3e:01:5c:33:f7:94:02:00:0f: 20:83:b0:36:a3:e1:22:bd:a5:54:86:4b:92:01:e4: 7c:68:7e:65:11:1e:a4:25:84:10:03:bc:31:cb:a2: 1f:ef:99:fd:9e:af:ce:d2:54:15:e7:91:f8:66:3c: dd:28:81:8b:62:87:c6:31:3d:a3:ed:fe:c7:1a:2e: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B9:8B:C4:85:33:D3:0D:EF:D8:7B:20:73:72:56:E9:D8:66:75:10 X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bd:6c:23:0e:49:b9:f1:ab:dc:3f:54:4e:e1:62:c7:d4:34: 6d:fa:c0:02:9e:70:64:aa:0f:b4:cb:e2:f8:da:34:65:fb:30: 29:ac:54:d6:09:75:ed:6a:77:91:8b:ed:44:ad:0f:11:69:8a: 91:b9:88:c7:c2:87:4d:0f:ad:b3:e3:ae:6c:00:9e:b6:55:5c: 7c:46:c6:85:66:57:be:15:bc:66:70:5b:f3:aa:92:b7:0d:ba: c2:cf:7e:ba:8c:f0:2f:e4:1d:47:46:db:da:64:06:87:96:9b: ec:8c:02:16:26:a9:ec:20:7d:95:71:85:bd:a6:33:51:32:18: 4e:3e:59:b4:e8:fd:e7:0c:8b:26:96:ed:f2:5b:7c:00:59:6c: ce:0d:0b:90:ab:7b:f1:5d:88:1a:14:0c:c1:cf:42:d2:ff:63: c0:e5:84:57:8e:99:ea:d3:fb:53:f1:67:d8:e4:51:38:d8:f2: 30:65:ab:c8:20:9c:4b:1e:b5:62:e0:e1:fa:1e:94:e4:f5:ba: ea:49:9e:79:6a:93:0a:e8:80:ca:9c:97:4d:16:e8:6f:8f:7e: 41:39:c4:8f:f5:a1:3d:a9:dc:5e:45:2c:0f:71:41:47:52:98: f8:7d:31:3d:df:6c:b7:ab:95:bd:9d:35:80:d6:5b:49:28:1b: 05:62:5d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUwNzAzMDA0NjM1WhcNMjUwNzEwMDA0NjM1WjAYMRYwFAYD VQQDEw02ODY1ZDJlYi04NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU+IturWJQcSvo8vA1xW2yHpZN2JteAI3ZHxYUENHD8yYX2jeHSag9Bp0HdW qL/3+Uq9yQ0DV+0wVYSSgncRpJVgvob9988NmBTDAt2DG/fK3vP1wmQ++L7afaV8 pOqthDiKRBxNqYmGacMcUBnJ2IrPl3008aTMaMd6d9Eyr7EdkJjw37DmnDN+nRRP rIh3ab9Q0yzwz4T6QfGwiaz61AmjvlgaJcS83cdW/hDBEgasUzXURRn5xOM+AVwz 95QCAA8gg7A2o+EivaVUhkuSAeR8aH5lER6kJYQQA7wxy6If75n9nq/O0lQV55H4 ZjzdKIGLYofGMT2j7f7HGi6VrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy5i8SF M9MN79h7IHNyVunYZnUQMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbvWwjDkm58avcP1RO4WLH1DRt+sACnnBkqg+0y+L42jRl+zAprFTW CXXtaneRi+1ErQ8RaYqRuYjHwodND62z465sAJ62VVx8RsaFZle+FbxmcFvzqpK3 DbrCz366jPAv5B1HRtvaZAaHlpvsjAIWJqnsIH2VcYW9pjNRMhhOPlm06P3nDIsm lu3yW3wAWWzODQuQq3vxXYgaFAzBz0LS/2PA5YRXjpnq0/tT8WfY5FE42PIwZavI IJxLHrVi4OH6HpTk9brqSZ55apMK6IDKnJdNFuhvj35BOcSP9aE9qdxeRSwPcUFH Upj4fTE932y3q5W9nTWA1ltJKBsFYl0o -----END CERTIFICATE-----Generated at Thu Jul 3 08:54:19 2025 by rpki-client