$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: B/kWQJxCZ4q7foShdSUd0XGBL0JIZR3B0EhA6qSyCok= Subject key identifier: BC:7D:81:40:9E:CF:8B:A3:31:CC:14:F0:20:3C:FD:B5:13:9E:3B:ED Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 4B Signing time: Tue 01 Jul 2025 08:05:02 +0000 Manifest this update: Tue 01 Jul 2025 08:05:01 +0000 Manifest next update: Tue 08 Jul 2025 08:05:01 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: uSjlRP0h7LW5jxDGMUxwtUr6MqzoU4rjbeik3IKN/Tk=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Jul 1 08:05:01 2025 GMT Not After : Jul 8 08:05:01 2025 GMT Subject: CN=686396ae-fd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:f6:59:58:c0:f9:63:49:4c:5f:04:5b:b4: b4:07:af:4d:21:86:c8:d9:7f:26:72:9c:2f:64:f3: 75:bf:37:c5:a5:f3:17:6b:98:27:82:9f:ff:13:9a: 38:17:85:a3:62:e9:4a:91:74:62:07:25:48:fe:e2: a3:e4:2e:ed:26:e2:24:b0:6a:3e:c2:3c:0c:7d:90: ba:05:84:4b:66:98:9b:7a:0a:b4:48:63:01:29:a1: 21:98:64:b6:f3:4b:b6:84:87:dc:81:9d:95:94:e2: 9e:15:ec:09:77:71:7f:85:61:2f:5b:61:69:fd:ae: 55:57:9f:c3:3b:57:01:8b:30:30:f2:9c:45:8a:4c: 14:3d:4c:59:52:15:0d:21:01:ef:c6:2a:6e:bf:74: 57:b3:6b:14:3c:a5:71:ce:44:ac:d8:a0:85:ed:dc: 50:8a:7d:e0:41:f7:80:48:1a:1c:d8:75:ad:37:5b: 2e:86:f9:e1:1f:54:20:01:cf:e8:9a:77:ba:b6:59: 3d:fe:e1:4d:2a:83:8d:a9:bf:23:23:d1:55:7a:aa: e2:c9:9d:3d:18:1a:22:02:f2:ee:2a:e0:6f:28:77: f5:11:b2:5c:57:24:04:c8:92:6e:7c:d7:b9:4d:d0: 54:8b:65:81:08:8c:62:72:f6:5a:a4:e2:62:7a:74: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:81:40:9E:CF:8B:A3:31:CC:14:F0:20:3C:FD:B5:13:9E:3B:ED X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:cb:06:1d:bd:b8:73:94:64:2e:5a:b0:9d:b2:15:73:c8:80: cb:ac:9a:59:f6:a8:23:a8:ba:79:0c:eb:27:f9:9b:1b:82:af: 11:64:64:64:c8:b3:62:96:fb:a9:1b:91:ad:a9:e1:d6:a6:e0: 3d:3d:18:c2:b4:bb:a6:f2:de:6d:42:bf:ca:ff:d1:be:29:98: ab:ba:bf:34:3e:c9:21:c3:90:35:c2:d4:d8:aa:03:56:11:3f: 87:95:fe:56:bd:ed:d7:d1:74:5f:b4:20:12:b3:0d:0a:5a:b1: 52:71:c0:59:df:e7:5e:1b:54:b9:4b:7e:a6:de:26:ab:88:4f: 22:5f:69:a0:c0:3a:61:a2:59:1b:25:63:d3:98:12:9c:c1:a6: 29:a1:96:45:4b:a2:c2:50:d2:f1:8c:95:e4:61:dd:15:6b:45: 27:e7:01:be:d4:1c:75:c6:23:4b:8f:b3:a2:51:60:46:39:35: 72:9d:a7:8b:fc:14:9f:69:51:6b:85:40:2a:69:b3:a2:c6:a1: e2:c7:39:9d:86:c0:51:92:89:9b:ae:8a:8a:d9:81:f8:21:8b: 26:23:e9:7d:15:97:c6:5f:33:2d:9d:70:15:51:fd:d2:b6:5e: 8f:ed:64:96:92:9b:65:37:ca:17:58:5c:c0:a7:07:43:64:1f: 74:ed:ab:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoNzU4QUMyQkVEQURDQkEzQUQ3MzgxNjlGQjM4OUQ1MDhC NTRENzRCRjAeFw0yNTA3MDEwODA1MDFaFw0yNTA3MDgwODA1MDFaMBgxFjAUBgNV BAMTDTY4NjM5NmFlLWZkNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz/vZZWMD5Y0lMXwRbtLQHr00hhsjZfyZynC9k83W/N8Wl8xdrmCeCn/8TmjgX haNi6UqRdGIHJUj+4qPkLu0m4iSwaj7CPAx9kLoFhEtmmJt6CrRIYwEpoSGYZLbz S7aEh9yBnZWU4p4V7Al3cX+FYS9bYWn9rlVXn8M7VwGLMDDynEWKTBQ9TFlSFQ0h Ae/GKm6/dFezaxQ8pXHORKzYoIXt3FCKfeBB94BIGhzYda03Wy6G+eEfVCABz+ia d7q2WT3+4U0qg42pvyMj0VV6quLJnT0YGiIC8u4q4G8od/URslxXJATIkm5817lN 0FSLZYEIjGJy9lqk4mJ6dOyrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvH2BQJ7P i6MxzBTwIDz9tROeO+0wHwYDVR0jBBgwFoAUdYrCvtrcujrXOBafs4nVCLVNdL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzJFMTBFREIyRTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFlyQ3Z0cmN1anJYT0JhZnM0blZDTFZOZEw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzJFMTBFREIyRTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpy WE9CYWZzNG5WQ0xWTmRMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOfLBh29uHOUZC5asJ2yFXPIgMusmln2qCOounkM6yf5mxuCrxFkZGTI s2KW+6kbka2p4dam4D09GMK0u6by3m1Cv8r/0b4pmKu6vzQ+ySHDkDXC1NiqA1YR P4eV/la97dfRdF+0IBKzDQpasVJxwFnf514bVLlLfqbeJquITyJfaaDAOmGiWRsl Y9OYEpzBpimhlkVLosJQ0vGMleRh3RVrRSfnAb7UHHXGI0uPs6JRYEY5NXKdp4v8 FJ9pUWuFQCpps6LGoeLHOZ2GwFGSiZuuiorZgfghiyYj6X0Vl8ZfMy2dcBVR/dK2 Xo/tZJaSm2U3yhdYXMCnB0NkH3Ttq94= -----END CERTIFICATE-----Generated at Thu Jul 3 00:32:05 2025 by rpki-client