$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: 7ZtSLbMk6ImFEbvBMTeHa3+fOF+TGiSzRQfLPZ0DIvE= Subject key identifier: 34:D5:E0:A4:2E:75:99:2B:AB:82:EF:BE:68:91:41:F6:0D:02:0E:5A Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 03FD Signing time: Thu 03 Jul 2025 00:55:54 +0000 Manifest this update: Thu 03 Jul 2025 00:55:54 +0000 Manifest next update: Thu 10 Jul 2025 00:55:54 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: iOYTIjLVw5JGpGl5hNlmxhjnGBb56jNx3EEghQCJpIA=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Jul 3 00:55:54 2025 GMT Not After : Jul 10 00:55:54 2025 GMT Subject: CN=6865d51a-b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:7c:3e:c4:81:25:ce:dd:2e:3c:bd:fb:7a: 92:54:b2:9c:0e:ec:1f:65:64:93:67:a7:e4:72:53: 4d:64:45:a0:70:c9:4f:6d:d2:9a:f9:92:66:5f:db: 38:3c:64:35:f9:a4:ac:82:8c:1c:30:17:99:3f:72: e2:ae:49:83:9c:f7:d0:06:9a:f9:f6:a4:bd:23:84: b0:20:0f:ba:93:91:b9:b8:3e:eb:ac:95:1c:74:e2: 27:97:9d:85:42:09:f7:40:20:ce:c8:a9:8d:4c:4c: f9:c1:77:b9:f5:d1:a8:ad:ea:34:c7:0a:5c:7b:db: 95:9a:b8:ea:43:59:4e:74:f6:16:88:0d:10:d5:14: 76:78:88:3d:d8:97:86:17:d5:f5:70:6f:2c:63:90: c4:ab:f7:89:3b:80:8b:1e:13:1b:37:b5:3e:3e:53: 73:5b:02:1d:5d:cb:7f:a5:40:a8:96:39:a4:bf:3e: 8a:0d:b7:6b:33:c0:34:28:31:5c:29:a3:82:75:96: 43:8a:a7:e2:af:5f:f8:47:32:c8:34:f1:59:62:c0: 5b:87:27:4c:08:7c:bc:4c:da:d5:51:00:a1:fa:ec: c0:23:1b:d7:fa:27:75:cf:c9:38:ee:62:e0:c2:38: bd:de:70:8d:1e:ad:7e:3c:f7:eb:49:f8:a6:96:d7: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:E0:A4:2E:75:99:2B:AB:82:EF:BE:68:91:41:F6:0D:02:0E:5A X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b9:65:b1:76:0c:02:c1:4e:18:e6:d2:d1:26:82:0c:ae:1a: fc:e5:77:23:df:38:16:6a:bc:7b:24:65:75:74:5a:64:af:11: 3c:88:2e:c0:dd:71:88:fc:10:10:e3:22:6e:4c:9d:56:ca:70: 63:40:cc:42:7e:01:36:c3:06:58:67:b3:0b:cf:4b:fa:20:88: 17:69:30:58:b4:0a:1f:56:91:6f:43:71:59:33:00:d7:39:dd: aa:88:5c:b3:b9:66:68:5d:0e:20:1f:fc:1c:d5:18:b9:4d:dc: 78:1b:1e:fd:af:17:21:b0:11:3f:f5:ce:d2:46:13:d3:a6:69: 5a:64:55:f3:c9:e8:1d:ee:e6:3e:f5:78:53:39:df:4d:07:47: c5:78:58:8a:27:aa:f7:29:0f:53:23:a4:32:9a:3f:33:ca:b5: 67:37:12:b1:46:f3:98:2d:ae:d3:9e:97:78:55:f3:d7:39:cd: 03:83:ea:7d:e3:db:f9:d1:6f:d9:03:e0:dd:c9:f1:ac:e5:95: 5f:7a:8a:ee:66:03:98:59:10:e6:f8:44:30:61:93:f9:f2:e6: 40:7d:3c:61:29:60:5a:b9:86:ee:bd:d9:e7:36:7c:bb:70:78: 5b:30:e5:b0:52:f9:ef:b8:1c:e0:e7:27:1f:ab:9a:98:8d:5c: 30:1a:5e:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTA3MDMwMDU1NTRaFw0yNTA3MTAwMDU1NTRaMBgxFjAUBgNV BAMTDTY4NjVkNTFhLWI1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Hnw+xIElzt0uPL37epJUspwO7B9lZJNnp+RyU01kRaBwyU9t0pr5kmZf2zg8 ZDX5pKyCjBwwF5k/cuKuSYOc99AGmvn2pL0jhLAgD7qTkbm4PuuslRx04ieXnYVC CfdAIM7IqY1MTPnBd7n10ait6jTHClx725WauOpDWU509haIDRDVFHZ4iD3Yl4YX 1fVwbyxjkMSr94k7gIseExs3tT4+U3NbAh1dy3+lQKiWOaS/PooNt2szwDQoMVwp o4J1lkOKp+KvX/hHMsg08VliwFuHJ0wIfLxM2tVRAKH67MAjG9f6J3XPyTjuYuDC OL3ecI0erX489+tJ+KaW12mXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNNXgpC51 mSurgu++aJFB9g0CDlowHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAu5ZbF2DALBThjm0tEmggyuGvzldyPfOBZqvHskZXV0WmSvETyILsDd cYj8EBDjIm5MnVbKcGNAzEJ+ATbDBlhnswvPS/ogiBdpMFi0Ch9WkW9DcVkzANc5 3aqIXLO5ZmhdDiAf/BzVGLlN3HgbHv2vFyGwET/1ztJGE9OmaVpkVfPJ6B3u5j71 eFM5300HR8V4WIonqvcpD1MjpDKaPzPKtWc3ErFG85gtrtOel3hV89c5zQOD6n3j 2/nRb9kD4N3J8azllV96iu5mA5hZEOb4RDBhk/ny5kB9PGEpYFq5hu692ec2fLtw eFsw5bBS+e+4HODnJx+rmpiNXDAaXr0= -----END CERTIFICATE-----Generated at Sat Jul 5 01:40:24 2025 by rpki-client