$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: kbypsV9fiABqQWTJ6/MqIicyNh/Y1rEZ9nJ4zuMR81g= Subject key identifier: A8:CC:CF:44:AA:A7:14:9E:A1:7E:93:CE:FE:13:AF:14:CF:6C:75:AE Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: FD Signing time: Thu 03 Jul 2025 05:24:29 +0000 Manifest this update: Thu 03 Jul 2025 05:24:28 +0000 Manifest next update: Thu 10 Jul 2025 05:24:28 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: sQ4BEIhRiQ4f28eNPsONw4sX1Da2H4uOe+HlcK61gds=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: kMQ7gbSHaFXFpsfqJqpqWdRVLvMmMimNITBNMHfZtwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Jul 3 05:24:28 2025 GMT Not After : Jul 10 05:24:28 2025 GMT Subject: CN=6866140c-e45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:c0:ef:8f:2a:3f:94:35:ad:91:f2:59:c2: d0:2e:dd:71:a5:c9:0c:c7:ae:aa:6d:51:44:34:9e: 13:df:46:8b:67:79:0b:e8:40:2c:c8:5e:5d:d3:1a: 6f:fa:10:6f:b1:bf:27:f8:90:dd:69:31:77:60:51: ec:5d:07:e6:80:6e:6e:a9:4d:e1:05:c0:bd:87:fb: 57:3e:c8:f0:fb:f4:bb:70:79:d6:32:61:72:df:f4: 7a:1a:ea:ff:21:93:dd:3d:48:d7:49:18:81:56:eb: 2a:1d:8e:2c:1d:15:fe:6d:c3:da:55:f4:37:4f:39: 50:59:98:37:1f:10:73:c0:18:2d:93:d4:c8:22:38: 03:c2:56:82:9b:d6:98:c9:f1:0e:9f:75:9d:66:90: 36:e9:d7:62:f7:40:ab:11:f8:46:e7:a6:79:b5:3b: 9c:2c:a3:59:89:2f:d1:a6:54:16:ed:ab:b9:8c:1a: 51:56:5c:a1:7e:78:5a:a7:3c:73:08:a1:36:49:d2: 05:33:90:1c:b7:ac:e4:b6:3c:cd:67:a6:18:d5:a7: 05:d6:6f:4e:d4:19:59:38:6a:6f:2d:74:4b:8d:00: 80:44:a7:ed:41:58:7b:0b:dd:db:1a:2e:46:51:72: 11:f0:95:cf:27:db:3c:1c:6e:1a:4b:b5:50:f6:fc: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CC:CF:44:AA:A7:14:9E:A1:7E:93:CE:FE:13:AF:14:CF:6C:75:AE X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:04:15:ae:dd:51:fe:c6:ca:ac:c4:7d:5e:b1:3a:3d:4f: 87:91:63:6b:13:f2:22:e8:84:6c:48:c1:8d:59:cc:f0:86:6b: 16:d8:76:d7:88:c4:08:68:4d:05:77:a3:91:2d:0f:54:9b:ca: da:85:25:8c:d1:b8:db:c9:99:ec:df:b4:01:1e:52:af:65:cf: e8:04:7f:bf:45:98:17:78:d4:bf:d5:3c:37:59:6c:11:6a:9a: 86:7a:a7:31:48:78:3e:89:d5:22:c3:55:43:d1:2b:e6:07:60: a7:d1:90:d8:88:e1:6d:0f:df:a4:af:21:f7:7d:7d:15:d6:b3: 19:a5:b2:13:31:d3:44:b2:c4:82:0e:15:e5:92:86:6f:79:bd: c7:de:00:94:a7:c4:32:6e:4e:7a:76:50:87:48:b9:20:7e:31: 11:03:ac:b8:84:b0:d6:85:ad:bf:1f:96:73:60:68:a2:04:d2: ce:2f:4a:5e:45:47:f7:02:01:c9:07:8f:6e:42:bc:1c:29:b2: a6:3e:ef:60:da:45:c9:47:84:0f:2b:80:9a:e1:de:0b:01:bd: fc:f9:aa:0a:4e:0f:32:a4:55:4e:32:a8:b6:8c:ee:db:c2:92: ee:12:e3:61:f1:b4:dd:a7:33:d7:9f:a1:02:06:25:db:e4:14: 9e:4a:28:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjUwNzAzMDUyNDI4WhcNMjUwNzEwMDUyNDI4WjAYMRYwFAYD VQQDEw02ODY2MTQwYy1lNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmXA748qP5Q1rZHyWcLQLt1xpckMx66qbVFENJ4T30aLZ3kL6EAsyF5d0xpv +hBvsb8n+JDdaTF3YFHsXQfmgG5uqU3hBcC9h/tXPsjw+/S7cHnWMmFy3/R6Gur/ IZPdPUjXSRiBVusqHY4sHRX+bcPaVfQ3TzlQWZg3HxBzwBgtk9TIIjgDwlaCm9aY yfEOn3WdZpA26ddi90CrEfhG56Z5tTucLKNZiS/RplQW7au5jBpRVlyhfnhapzxz CKE2SdIFM5Act6zktjzNZ6YY1acF1m9O1BlZOGpvLXRLjQCARKftQVh7C93bGi5G UXIR8JXPJ9s8HG4aS7VQ9vxZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjMz0Sq pxSeoX6Tzv4TrxTPbHWuMB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfnwQVrt1R/sbKrMR9XrE6PU+HkWNrE/Ii6IRsSMGNWczwhmsW2HbX iMQIaE0Fd6ORLQ9Um8rahSWM0bjbyZns37QBHlKvZc/oBH+/RZgXeNS/1Tw3WWwR apqGeqcxSHg+idUiw1VD0SvmB2Cn0ZDYiOFtD9+kryH3fX0V1rMZpbITMdNEssSC DhXlkoZveb3H3gCUp8Qybk56dlCHSLkgfjERA6y4hLDWha2/H5ZzYGiiBNLOL0pe RUf3AgHJB49uQrwcKbKmPu9g2kXJR4QPK4Ca4d4LAb38+aoKTg8ypFVOMqi2jO7b wpLuEuNh8bTdpzPXn6ECBiXb5BSeSigD -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:29 2025 by rpki-client