$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: aMYnumSZJOK/Qa5y14SBRqp3peS8oG08yDoSGl45VfE= Subject key identifier: 84:43:51:0B:0C:AE:51:7C:85:38:74:35:EB:60:D0:14:44:91:F9:49 Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0A5D Signing time: Wed 02 Jul 2025 19:53:30 +0000 Manifest this update: Wed 02 Jul 2025 19:53:30 +0000 Manifest next update: Wed 09 Jul 2025 19:53:30 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: OnI+u/KCCq+Jq6yycAKLzsyjVzXbk0Wcct/1KDiseAc=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: Jul 2 19:53:30 2025 GMT Not After : Jul 9 19:53:30 2025 GMT Subject: CN=68658e3a-b076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b8:08:b9:bf:db:cf:dd:6d:b3:c4:0f:19:97: c5:96:65:51:e2:f8:d4:05:53:5f:31:18:56:87:56: f7:ca:39:02:54:36:8a:f5:98:af:00:2b:e9:59:bc: 08:03:20:5e:46:39:d3:96:a3:1e:35:27:04:ba:c0: b7:9c:80:07:c0:3a:71:ff:e0:2f:4b:c5:ed:19:90: 21:a6:90:29:08:7f:1f:ea:70:d9:57:87:2c:4c:c0: 9e:3d:7b:b2:c1:0f:87:d8:64:b1:47:3d:81:7c:20: 72:cd:07:7b:3c:90:e2:fd:77:3c:b1:7e:73:61:05: 4b:a9:a3:99:d1:24:76:41:41:76:eb:7a:8c:de:17: 15:cf:43:a8:90:62:e4:cf:b8:4f:04:64:28:bb:ef: ca:f3:b6:a4:dc:48:05:be:b9:be:5a:38:60:2f:9a: 53:a6:37:31:f2:02:7b:7d:30:4d:b8:5b:79:0f:6c: 30:5c:29:f4:22:2b:d5:86:23:ec:43:e3:dd:14:9f: 96:f8:77:3d:a2:52:a8:cc:f5:8f:13:3d:5d:4b:97: 9a:eb:e3:d2:49:05:a8:94:ca:e4:ad:0c:7b:9d:22: cd:93:54:0a:c7:c9:21:fa:aa:27:99:0c:07:26:8c: 14:4d:5d:2f:66:03:e4:54:70:48:92:60:7b:bc:f4: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:43:51:0B:0C:AE:51:7C:85:38:74:35:EB:60:D0:14:44:91:F9:49 X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:3e:ea:86:30:87:53:8b:2b:59:c6:5b:c6:c7:33:d6:58: f9:6e:8e:73:3a:b9:d4:e8:f1:fa:18:9a:21:dc:18:71:e4:1c: 36:33:7c:f2:e2:fa:3b:36:fd:53:10:eb:e3:50:48:31:21:3b: 4b:bc:b0:c5:ca:2e:58:d2:64:93:04:14:88:c2:ee:05:7a:f5: 25:25:d5:ec:6e:8f:55:a6:ec:97:57:6d:7f:1c:1c:02:17:3a: 77:5d:4c:20:d1:a1:ab:30:f4:88:9d:a3:b0:c9:41:d6:03:fc: 70:b2:02:41:72:6f:a8:04:e0:d5:7b:47:9d:8b:e7:94:dd:ce: 7d:33:ca:dd:9e:16:84:09:45:14:15:86:82:8a:25:e6:f4:ae: d0:7c:93:85:2d:22:a0:ba:ad:d1:d5:62:13:2d:ee:67:1e:c6: d4:c3:3a:33:1d:31:01:7e:3e:7d:fe:31:6f:eb:08:38:92:1a: f6:a5:b7:4b:c3:c7:48:f4:b6:6e:d4:32:52:d5:31:9b:a4:a1: 7c:10:fe:7c:89:a1:3e:c0:a2:71:a2:88:d9:8b:ca:87:1d:ef: 32:8c:88:31:4a:99:f0:07:55:94:96:16:af:81:0a:4b:71:4c: 78:16:ad:6d:1c:6d:88:51:61:b0:29:39:65:c8:7d:a3:c5:c9: db:c4:74:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUwNzAyMTk1MzMwWhcNMjUwNzA5MTk1MzMwWjAYMRYwFAYD VQQDEw02ODY1OGUzYS1iMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67gIub/bz91ts8QPGZfFlmVR4vjUBVNfMRhWh1b3yjkCVDaK9ZivACvpWbwI AyBeRjnTlqMeNScEusC3nIAHwDpx/+AvS8XtGZAhppApCH8f6nDZV4csTMCePXuy wQ+H2GSxRz2BfCByzQd7PJDi/Xc8sX5zYQVLqaOZ0SR2QUF263qM3hcVz0OokGLk z7hPBGQou+/K87ak3EgFvrm+WjhgL5pTpjcx8gJ7fTBNuFt5D2wwXCn0IivVhiPs Q+PdFJ+W+Hc9olKozPWPEz1dS5ea6+PSSQWolMrkrQx7nSLNk1QKx8kh+qonmQwH JowUTV0vZgPkVHBIkmB7vPSikQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRDUQsM rlF8hTh0Netg0BREkflJMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUkD7qhjCHU4srWcZbxscz1lj5bo5zOrnU6PH6GJoh3Bhx5Bw2M3zy 4vo7Nv1TEOvjUEgxITtLvLDFyi5Y0mSTBBSIwu4FevUlJdXsbo9VpuyXV21/HBwC Fzp3XUwg0aGrMPSInaOwyUHWA/xwsgJBcm+oBODVe0edi+eU3c59M8rdnhaECUUU FYaCiiXm9K7QfJOFLSKguq3R1WITLe5nHsbUwzozHTEBfj59/jFv6wg4khr2pbdL w8dI9LZu1DJS1TGbpKF8EP58iaE+wKJxoojZi8qHHe8yjIgxSpnwB1WUlhavgQpL cUx4Fq1tHG2IUWGwKTllyH2jxcnbxHTY -----END CERTIFICATE-----Generated at Fri Jul 4 06:44:07 2025 by rpki-client