$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: wZZ+nr+xjcMEJb4+/Rx5AFbvgwICsgPoTU8tXKr+ZTs= Subject key identifier: 6B:94:AC:B6:D9:5D:19:CD:26:99:A9:C3:DD:CB:B6:0D:56:E9:86:60 Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: 93 Signing time: Tue 01 Jul 2025 07:12:38 +0000 Manifest this update: Tue 01 Jul 2025 07:12:37 +0000 Manifest next update: Tue 08 Jul 2025 07:12:37 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: g3TrH3RVYd0xvMPXtNTRr7GYvb3cIkpT+a+U/QnPp1A=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: Jul 1 07:12:37 2025 GMT Not After : Jul 8 07:12:37 2025 GMT Subject: CN=68638a66-91da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:e1:e5:64:dd:d9:7b:e0:12:a0:bb:0d:f2: f3:b3:cd:58:f3:7c:b7:e2:1c:5e:ca:8c:8e:34:30: ea:21:a8:ff:ea:3e:ef:80:d9:50:44:72:6a:d5:af: f8:c1:f3:16:f8:28:7e:ca:9a:e2:3b:67:b7:47:6d: a0:71:82:62:a2:10:0d:47:74:6c:55:52:17:7f:69: 95:95:c4:9e:08:18:b7:c9:2f:72:4c:8c:12:a2:19: 71:9a:38:6f:1f:73:92:d9:2e:42:49:5c:cd:ad:cc: 88:fb:c4:43:79:a0:b7:e4:fe:92:8e:b5:8f:8e:d0: db:1a:e4:1e:1d:20:4c:f9:78:ec:b5:d4:89:6b:1b: e3:e7:8b:50:39:b6:56:0a:00:5d:e6:e7:c6:bb:24: ce:5d:76:b1:fa:d8:aa:71:36:f9:92:21:c7:0d:8f: f7:76:b4:12:3b:ad:1e:47:03:2b:6c:7e:01:28:1f: 5a:be:29:1e:85:9c:d4:98:49:38:c2:3f:f9:0f:09: d0:fb:3e:d0:a1:16:3a:81:ea:54:66:ed:3e:c5:67: 00:ef:8d:d5:86:1e:c9:13:31:ab:e0:75:47:e4:5c: 64:5a:66:30:9f:48:97:ff:cb:f8:ff:f6:7f:6a:07: 0a:72:ea:27:3c:f1:e1:b7:3f:93:0a:14:00:14:62: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:94:AC:B6:D9:5D:19:CD:26:99:A9:C3:DD:CB:B6:0D:56:E9:86:60 X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7f:7e:ab:19:1b:d6:c4:13:99:25:64:3e:0b:5b:5f:fa:46: 8c:40:ae:3f:a2:4f:1d:14:64:d9:0b:3f:92:18:2b:d1:1e:97: 0b:e7:1d:9f:14:ee:68:ee:65:a4:54:14:ab:1f:8c:55:01:bd: 78:bd:b6:13:b4:93:5b:82:bd:cb:90:ac:db:fb:61:15:c4:f4: 11:65:9b:83:99:f0:0e:9b:c9:cb:0d:77:3c:52:e0:90:e3:a5: c3:93:ac:08:54:47:b0:3e:49:7f:df:3d:c7:40:6c:d6:a3:f8: 28:8c:84:13:89:f0:d2:20:cb:86:cd:66:ea:6d:8a:0e:7a:c4: 2d:81:00:0b:22:ac:d3:17:af:1a:5c:5d:98:b0:d6:41:d9:c6: 3e:0e:b6:b9:06:6a:a4:88:e8:0a:d9:42:64:7b:be:4b:7e:a0: 89:0a:5c:b9:8b:67:dc:dd:c9:ca:52:15:2f:cf:67:4f:77:c4: b9:fc:66:1c:c6:34:c0:57:0a:64:a8:7d:c0:f1:56:03:6f:2c: 5e:3e:ae:b9:e9:5b:e9:a3:dc:fd:6d:d9:2f:19:57:07:dd:a4: 23:d3:b4:f9:5c:56:44:d1:35:83:d8:19:72:1d:02:9a:dd:9f: 8b:c5:51:de:5e:89:84:99:84:15:75:ab:77:64:a5:47:88:fb: 9a:29:e4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2NDUxMTAvBgNVBAUTKENCMEMzMzBFMzgzNzk0OEZFNURERkE2MDQ3MzI3NzVE NEIwQ0Y4MTQwHhcNMjUwNzAxMDcxMjM3WhcNMjUwNzA4MDcxMjM3WjAYMRYwFAYD VQQDEw02ODYzOGE2Ni05MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIfh5WTd2XvgEqC7DfLzs81Y83y34hxeyoyONDDqIaj/6j7vgNlQRHJq1a/4 wfMW+Ch+ypriO2e3R22gcYJiohANR3RsVVIXf2mVlcSeCBi3yS9yTIwSohlxmjhv H3OS2S5CSVzNrcyI+8RDeaC35P6SjrWPjtDbGuQeHSBM+XjstdSJaxvj54tQObZW CgBd5ufGuyTOXXax+tiqcTb5kiHHDY/3drQSO60eRwMrbH4BKB9avikehZzUmEk4 wj/5DwnQ+z7QoRY6gepUZu0+xWcA743Vhh7JEzGr4HVH5FxkWmYwn0iX/8v4//Z/ agcKcuonPPHhtz+TChQAFGIxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuUrLbZ XRnNJpmpw93Ltg1W6YZgMB8GA1UdIwQYMBaAFMsMMw44N5SP5d36YEcyd11LDPgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzY0NS8xRUVFQkQyMjgw NkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJX2wzZnBnUnpKM1hVc00t QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1CUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzY0NS8xRUVFQkQyMjgwNkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJ X2wzZnBnUnpKM1hVc00tQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmf36rGRvWxBOZJWQ+C1tf+kaMQK4/ok8dFGTZCz+SGCvRHpcL5x2f FO5o7mWkVBSrH4xVAb14vbYTtJNbgr3LkKzb+2EVxPQRZZuDmfAOm8nLDXc8UuCQ 46XDk6wIVEewPkl/3z3HQGzWo/gojIQTifDSIMuGzWbqbYoOesQtgQALIqzTF68a XF2YsNZB2cY+Dra5BmqkiOgK2UJke75LfqCJCly5i2fc3cnKUhUvz2dPd8S5/GYc xjTAVwpkqH3A8VYDbyxePq656Vvpo9z9bdkvGVcH3aQj07T5XFZE0TWD2BlyHQKa 3Z+LxVHeXomEmYQVdat3ZKVHiPuaKeTj -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:09 2025 by rpki-client