$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json) Hash identifier: hYh6oCyZ/scXR9GDZXuxtSaktSx3cmdo5HRL3OGjdO4= Subject key identifier: BF:52:2F:22:5B:15:73:2F:B3:D5:FD:24:09:9F:A3:CE:0B:85:B0:2F Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft Manifest number: 0771 Signing time: Mon 30 Jun 2025 21:50:21 +0000 Manifest this update: Mon 30 Jun 2025 21:50:20 +0000 Manifest next update: Mon 07 Jul 2025 21:50:20 +0000 Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: ztogCrW80BSBowo1MY4Sm6zWBDbJcPEh/l+5MarzjXU=) 2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E, serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Validity Not Before: Jun 30 21:50:20 2025 GMT Not After : Jul 7 21:50:20 2025 GMT Subject: CN=6863069c-3700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:d1:3d:37:18:25:42:b7:37:fd:d8:34:35: b9:0a:54:41:1c:e9:36:d9:51:84:2d:5d:70:61:cb: 78:02:31:7a:98:ac:16:b0:2a:03:44:89:94:ba:54: 7a:ca:72:e4:ac:7a:ed:52:c0:c6:e6:ef:c5:36:17: f3:4b:69:2c:fe:53:16:f5:2c:c2:2b:51:4d:f5:fa: 99:2e:30:b2:59:4e:ea:a9:97:3f:72:7b:d9:7b:6b: 48:2e:ef:6e:a8:a6:13:8a:ca:2d:93:d1:cd:a2:8d: 77:8a:66:30:bf:f9:17:b9:98:e9:b1:16:67:59:99: ed:80:16:5c:fa:bd:ba:e8:6f:e0:e9:38:09:3d:f0: c2:f7:6f:82:1f:f8:17:0d:8c:8a:6f:dd:69:2c:ff: 97:48:f3:58:fe:9a:eb:ab:18:47:52:ca:9d:a4:dc: 30:e3:fd:ce:6c:50:15:b9:a0:05:66:95:1e:df:72: 52:22:f6:ac:d8:6a:82:d0:e7:14:0c:8b:cd:cf:86: ca:ba:db:f6:5b:a5:eb:80:69:f6:cc:71:8e:63:2f: 37:46:c2:9c:49:a7:a2:51:c3:b1:c2:61:95:5c:18: 09:06:21:17:ca:8c:51:2f:19:0f:10:af:60:63:8e: 1a:36:7d:49:e6:03:0b:3b:52:2c:3e:ec:ba:cf:b5: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:2F:22:5B:15:73:2F:B3:D5:FD:24:09:9F:A3:CE:0B:85:B0:2F X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c3:11:21:af:5c:86:97:72:27:72:fc:d9:36:61:72:0a:ff: 20:d7:4d:e6:ff:72:78:09:c9:d2:3c:e8:61:be:a5:d0:b5:55: 71:da:b0:7e:bb:9d:d8:f7:d8:7b:0d:3b:81:e2:18:59:69:0b: 9f:4e:49:c6:2c:8b:e1:8b:3c:59:20:bb:30:08:f8:8d:f2:42: 70:01:3f:f3:8f:9c:7f:f8:45:c1:49:dd:81:a4:01:13:ac:af: e4:ad:01:84:9a:a7:97:23:30:15:38:8c:12:18:ab:7d:ec:5c: 9d:ae:38:98:b1:29:2b:78:81:ec:88:f2:65:44:d3:58:ed:d3: 0e:a4:0c:ae:03:dd:8c:a3:91:10:f7:68:52:ce:f6:16:21:4c: f0:de:ac:43:2d:6d:13:97:3e:a9:b1:df:1d:40:03:c7:a7:c5: f4:9a:d9:b0:81:d9:40:e5:24:65:85:c2:0c:4b:7f:ee:62:95: f0:ec:e6:a8:36:b1:c3:52:0f:96:d3:4f:87:1d:7e:84:1f:6c: d6:c7:3b:0b:1f:4d:98:f3:8c:43:b2:87:2f:61:bd:1d:07:ae: 66:28:db:8a:b1:ac:0e:0b:81:4a:2f:a0:17:24:65:ae:36:a1: ec:4b:57:33:c7:92:d2:d9:7f:0a:b1:d9:35:d5:eb:a1:30:ef: 69:00:e0:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjUwNjMwMjE1MDIwWhcNMjUwNzA3MjE1MDIwWjAYMRYwFAYD VQQDEw02ODYzMDY5Yy0zNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUXRPTcYJUK3N/3YNDW5ClRBHOk22VGELV1wYct4AjF6mKwWsCoDRImUulR6 ynLkrHrtUsDG5u/FNhfzS2ks/lMW9SzCK1FN9fqZLjCyWU7qqZc/cnvZe2tILu9u qKYTisotk9HNoo13imYwv/kXuZjpsRZnWZntgBZc+r266G/g6TgJPfDC92+CH/gX DYyKb91pLP+XSPNY/prrqxhHUsqdpNww4/3ObFAVuaAFZpUe33JSIvas2GqC0OcU DIvNz4bKutv2W6XrgGn2zHGOYy83RsKcSaeiUcOxwmGVXBgJBiEXyoxRLxkPEK9g Y44aNn1J5gMLO1IsPuy6z7VFkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9SLyJb FXMvs9X9JAmfo84LhbAvMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADwxEhr1yGl3IncvzZNmFyCv8g103m/3J4CcnSPOhhvqXQtVVx2rB+ u53Y99h7DTuB4hhZaQufTknGLIvhizxZILswCPiN8kJwAT/zj5x/+EXBSd2BpAET rK/krQGEmqeXIzAVOIwSGKt97FydrjiYsSkreIHsiPJlRNNY7dMOpAyuA92Mo5EQ 92hSzvYWIUzw3qxDLW0Tlz6psd8dQAPHp8X0mtmwgdlA5SRlhcIMS3/uYpXw7Oao NrHDUg+W00+HHX6EH2zWxzsLH02Y84xDsocvYb0dB65mKNuKsawOC4FKL6AXJGWu NqHsS1czx5LS2X8Ksdk11euhMO9pAODf -----END CERTIFICATE-----Generated at Wed Jul 2 12:30:07 2025 by rpki-client