$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: XHsywOgHa2LXWRO/lac0okBNEYjnlK3zVViihmX4+sg= Subject key identifier: 60:E6:9B:A7:5D:32:CA:ED:DC:CD:F8:E5:0A:9A:42:47:9F:47:F1:64 Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 0D Signing time: Thu 03 Jul 2025 08:23:00 +0000 Manifest this update: Thu 03 Jul 2025 08:23:00 +0000 Manifest next update: Thu 10 Jul 2025 08:23:00 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: ANRZGa1n/bUVeUQC8w4EsJn3DI+/MjXSw9HPnT44Tug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Jul 3 08:23:00 2025 GMT Not After : Jul 10 08:23:00 2025 GMT Subject: CN=68663de4-c1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:52:9d:a2:79:57:70:c6:06:f3:8a:c7:f8: d8:93:02:12:23:23:c6:d6:2b:4f:15:90:5a:3c:17: 0b:46:a4:12:d2:2e:2a:4f:93:2c:6d:ab:d6:70:01: fa:35:d4:5c:f4:ac:2a:58:0e:32:67:43:e3:8c:ea: f3:62:c9:c1:53:6d:1a:e7:93:19:42:60:c4:3b:b9: 25:24:0c:2b:84:49:bb:07:a4:30:39:33:31:c9:6c: c8:99:2e:48:c5:8f:1f:cc:76:5d:5c:9a:e9:16:0b: 7d:ec:f3:9f:b3:bb:5f:98:cd:5f:78:42:44:e2:27: 27:e7:02:07:32:44:a0:9c:e7:05:63:d3:3a:d7:00: e4:e8:55:a3:62:be:e8:c1:ea:5b:34:30:01:8e:dc: 33:45:c6:99:e9:9e:3e:de:0d:49:7a:3a:27:a5:03: 34:1b:53:12:38:8c:0e:ff:7d:0c:d1:dd:c7:1b:f1: 33:8f:bd:ed:b8:f7:e0:ba:a6:f4:86:94:c8:3e:06: 61:9a:9a:c1:45:a5:a2:48:ec:72:3c:2d:5f:4f:6b: af:c2:36:8f:66:af:c5:60:c3:0a:5e:73:7d:f1:94: 0c:5a:6c:3b:38:8e:d6:58:c4:f0:61:69:f6:81:5e: fb:9a:ff:d2:27:4b:87:e2:ed:74:71:45:2e:ba:c8: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:9B:A7:5D:32:CA:ED:DC:CD:F8:E5:0A:9A:42:47:9F:47:F1:64 X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:f8:72:19:53:55:e1:cb:3a:d0:c8:cb:bc:55:5e:2c:3b: 6a:66:48:e9:2b:d9:27:6f:e9:d5:fe:4e:97:01:91:04:70:4c: ea:50:2b:83:41:8a:eb:02:77:39:1d:17:74:52:9a:76:6c:36: d1:d3:c7:b3:0e:a6:f6:9d:22:83:9b:b3:0f:30:be:d3:60:02: 35:a7:30:1f:b2:f4:aa:32:57:65:1e:30:e3:42:b4:98:1b:00: ea:c0:95:ce:da:ba:39:23:d4:4a:78:a9:48:5e:7a:4b:5c:12: cc:85:ab:c6:32:79:54:1a:21:65:79:f5:64:fe:2e:82:5f:e4: 54:bd:b0:16:00:35:60:1e:1d:e0:31:f0:8e:d0:ee:b6:fa:55: d8:1c:51:d6:0f:ba:df:3f:c8:71:be:36:a5:dd:4a:34:a8:a0: c0:34:f4:06:41:d1:cf:dd:3c:46:3b:78:f0:68:8b:6d:27:4b: d7:a4:27:d9:8a:27:4c:6a:63:62:60:1a:ee:71:87:d8:68:00: e2:07:c4:52:b1:48:76:5e:d7:49:9b:57:b3:a8:29:0a:d2:a9: bc:4a:38:f5:68:8a:e0:40:0a:22:c4:fb:2b:ba:d7:e4:c9:bd: ab:e9:fa:80:69:1f:c5:a4:12:5f:cf:ca:5e:20:6b:22:09:04: 6d:47:05:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTA3MDMwODIzMDBaFw0yNTA3MTAwODIzMDBaMBgxFjAUBgNV BAMTDTY4NjYzZGU0LWMxZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAY1KdonlXcMYG84rH+NiTAhIjI8bWK08VkFo8FwtGpBLSLipPkyxtq9ZwAfo1 1Fz0rCpYDjJnQ+OM6vNiycFTbRrnkxlCYMQ7uSUkDCuESbsHpDA5MzHJbMiZLkjF jx/Mdl1cmukWC33s85+zu1+YzV94QkTiJyfnAgcyRKCc5wVj0zrXAOToVaNivujB 6ls0MAGO3DNFxpnpnj7eDUl6OielAzQbUxI4jA7/fQzR3ccb8TOPve249+C6pvSG lMg+BmGamsFFpaJI7HI8LV9Pa6/CNo9mr8Vgwwpec33xlAxabDs4jtZYxPBhafaB Xvua/9InS4fi7XRxRS66yADdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYOabp10y yu3czfjlCppCR59H8WQwHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADD0+HIZU1XhyzrQyMu8VV4sO2pmSOkr2Sdv6dX+TpcBkQRwTOpQK4NB iusCdzkdF3RSmnZsNtHTx7MOpvadIoObsw8wvtNgAjWnMB+y9KoyV2UeMONCtJgb AOrAlc7aujkj1Ep4qUheektcEsyFq8YyeVQaIWV59WT+LoJf5FS9sBYANWAeHeAx 8I7Q7rb6VdgcUdYPut8/yHG+NqXdSjSooMA09AZB0c/dPEY7ePBoi20nS9ekJ9mK J0xqY2JgGu5xh9hoAOIHxFKxSHZe10mbV7OoKQrSqbxKOPVoiuBACiLE+yu61+TJ vavp+oBpH8WkEl/Pyl4gayIJBG1HBW0= -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:37 2025 by rpki-client