$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json) Hash identifier: TC4D6SyA/mlXLS0msHIh4YFnPZElz/9Ju2mSP6Xzs+U= Subject key identifier: 85:F4:6D:7B:5C:F3:D5:C9:23:9D:6B:E0:64:42:2F:43:C9:06:B2:87 Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft Manifest number: 3494 Signing time: Mon 30 Jun 2025 14:46:25 +0000 Manifest this update: Mon 30 Jun 2025 14:46:25 +0000 Manifest next update: Mon 07 Jul 2025 14:46:25 +0000 Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: VK1mGzJHNpBdNas2EQUQPSLUsn3oNkCBBb5tBeTg6s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Validity Not Before: Jun 30 14:46:25 2025 GMT Not After : Jul 7 14:46:25 2025 GMT Subject: CN=6862a341-fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:01:24:c1:c5:13:b9:f9:82:d9:b9:00:32: d2:c9:be:1f:6f:f4:c8:1d:ba:fd:33:fb:02:ab:ef: 19:94:2f:60:ad:ee:98:99:7d:30:93:4c:24:f4:df: 87:65:34:26:52:49:90:84:2f:e5:e8:18:f5:e4:cd: b1:83:26:75:91:61:d2:0b:33:6f:42:c2:1b:06:03: 07:12:12:e5:b2:13:88:cf:43:56:67:80:b9:b0:06: 0c:97:c1:c9:af:d0:eb:08:54:12:29:97:aa:37:1d: ae:cb:e8:b2:ee:c4:7e:62:87:3e:50:81:fa:41:ac: 95:dc:5a:1a:28:71:69:7a:59:30:42:79:ca:7a:12: fd:fc:3d:8f:3f:4b:8e:10:8d:11:79:a5:8a:de:33: 5e:50:d2:ad:f9:cc:17:b6:72:50:7a:dd:00:f1:8b: f3:3c:35:15:61:7a:26:54:bc:d3:60:df:8c:05:f9: f2:79:14:f2:92:a3:f5:29:be:34:90:f4:88:9d:ce: de:fd:5e:5a:76:fd:bd:c1:43:00:d9:39:b8:92:63: 0e:e5:69:e4:bf:1c:75:48:a5:ac:6a:79:9a:a7:12: ba:db:26:51:86:2f:b7:8a:ef:18:47:fb:1c:34:cf: f1:c1:7e:c2:1b:3b:02:06:06:2b:d3:4e:a2:84:dc: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:6D:7B:5C:F3:D5:C9:23:9D:6B:E0:64:42:2F:43:C9:06:B2:87 X509v3 Authority Key Identifier: keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:4c:46:3f:57:41:a4:5e:e7:ce:f1:a0:ec:9b:26:82:df: d7:a6:40:31:d5:c5:f7:b5:7b:8c:0a:34:74:33:c5:96:0b:b5: 98:d3:8f:51:7a:4a:3f:8f:21:46:ab:c3:db:6d:8f:a0:a9:2d: 08:8f:6a:cb:ec:1e:e3:4b:f2:37:be:e3:d2:d4:0a:88:9a:a2: 26:1a:5a:87:69:18:d3:30:cb:25:1e:b3:8f:2e:e6:8f:47:98: 20:69:b0:f1:67:c8:68:1d:32:51:14:8a:81:5c:68:09:9c:ad: e5:34:4a:6b:96:f6:24:68:73:93:e1:30:16:f7:fc:d0:91:fb: be:cc:7a:42:e5:24:dc:c7:21:59:3d:1c:a6:02:b1:3a:1c:96: a2:6a:78:cc:7a:f7:8b:3b:77:29:1c:b2:a0:0d:8b:31:b2:11: ce:b9:58:d7:90:51:bf:15:54:3d:4a:a1:84:2a:39:42:18:56: b9:eb:8a:52:3e:b7:f6:30:b8:c7:52:ae:93:52:63:17:fe:2a: 01:73:db:1c:06:71:a0:96:0b:ce:c4:74:5a:58:dc:78:d0:96: 38:34:6b:dd:82:0b:32:4b:a9:3f:e8:3d:a2:58:7a:87:b3:24: 44:44:e7:6f:a9:d8:54:00:d2:4c:4e:3b:8a:9c:51:0d:66:f2: 41:13:dd:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3OUQxMTAvBgNVBAUTKDYyQTZENUVEQzU4RDUzRUY5ODA4MDhCRUNFRDUxOUU4 MDVCMUU0MEMwHhcNMjUwNjMwMTQ0NjI1WhcNMjUwNzA3MTQ0NjI1WjAYMRYwFAYD VQQDEw02ODYyYTM0MS1mYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vUBJMHFE7n5gtm5ADLSyb4fb/TIHbr9M/sCq+8ZlC9gre6YmX0wk0wk9N+H ZTQmUkmQhC/l6Bj15M2xgyZ1kWHSCzNvQsIbBgMHEhLlshOIz0NWZ4C5sAYMl8HJ r9DrCFQSKZeqNx2uy+iy7sR+Yoc+UIH6QayV3FoaKHFpelkwQnnKehL9/D2PP0uO EI0ReaWK3jNeUNKt+cwXtnJQet0A8YvzPDUVYXomVLzTYN+MBfnyeRTykqP1Kb40 kPSInc7e/V5adv29wUMA2Tm4kmMO5Wnkvxx1SKWsanmapxK62yZRhi+3iu8YR/sc NM/xwX7CGzsCBgYr006ihNyizwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX0bXtc 89XJI51r4GRCL0PJBrKHMB8GA1UdIwQYMBaAFGKm1e3FjVPvmAgIvs7VGegFseQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc5RC9BQzZBMTY4QzFE OTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUtLVlDQWktenRVWjZBV3g1 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxYlY3Y1dOVS0tWUNBaS16dFVaNkFXeDVBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc5RC9BQzZBMTY4QzFEOTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUt LVlDQWktenRVWjZBV3g1QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+UxGP1dBpF7nzvGg7Jsmgt/XpkAx1cX3tXuMCjR0M8WWC7WY049R eko/jyFGq8PbbY+gqS0Ij2rL7B7jS/I3vuPS1AqImqImGlqHaRjTMMslHrOPLuaP R5ggabDxZ8hoHTJRFIqBXGgJnK3lNEprlvYkaHOT4TAW9/zQkfu+zHpC5STcxyFZ PRymArE6HJaianjMeveLO3cpHLKgDYsxshHOuVjXkFG/FVQ9SqGEKjlCGFa564pS Prf2MLjHUq6TUmMX/ioBc9scBnGglgvOxHRaWNx40JY4NGvdggsyS6k/6D2iWHqH syREROdvqdhUANJMTjuKnFENZvJBE922 -----END CERTIFICATE-----Generated at Tue Jul 1 14:29:34 2025 by rpki-client