$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: M4mQi7g5+w4qQIN0yUYtHjVCkY8Qp3Tar3bsuI/w/wc= Subject key identifier: 4D:F2:E9:14:C4:F1:35:32:93:80:B9:85:1C:C8:15:38:87:9C:AF:E0 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 03DD Signing time: Sun 29 Jun 2025 00:07:51 +0000 Manifest this update: Sun 29 Jun 2025 00:07:51 +0000 Manifest next update: Sun 06 Jul 2025 00:07:51 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: pWsFzXnFcRSEtqsPNj4SsrnEgeZSWM8sxbYVDNo38NI=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Jun 29 00:07:51 2025 GMT Not After : Jul 6 00:07:51 2025 GMT Subject: CN=686083d7-c858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:5d:e4:4d:8b:d3:34:fd:c4:52:f1:74:48: 77:ea:8d:b9:d9:3e:df:3a:25:04:2d:1f:66:e3:79: d3:d0:22:33:e9:81:e0:85:d1:05:e2:a6:c8:8b:9e: 91:68:21:d8:aa:d4:dc:5a:f2:22:3b:7e:ff:46:ae: 6c:88:7c:05:ca:03:2e:33:29:2b:8e:4f:cd:30:27: 42:da:96:f4:f9:6a:f6:0d:2f:71:7c:8d:0f:c7:59: 07:92:48:60:94:9f:67:60:1f:b5:9b:57:d6:b0:43: 96:27:f0:d5:45:a0:e3:5d:15:fe:4d:02:40:6b:d4: 5e:93:a5:e8:77:cc:03:07:87:16:08:e1:6f:18:99: f6:49:72:d0:95:ed:b3:ce:72:06:dc:4f:cb:da:3f: 06:34:cb:b5:a9:b8:44:14:db:c0:07:59:ce:ae:85: 17:5e:9a:43:3e:99:b8:d9:e5:7f:84:6d:d1:45:d4: fb:94:ba:a3:a4:38:fa:a3:59:cc:95:85:b5:ff:58: be:3b:db:a6:16:b3:31:46:72:02:7b:d6:6d:be:bd: 04:2a:79:d1:32:42:d5:14:86:9e:3f:b8:c0:d0:62: 8f:c8:f1:20:80:f5:ac:03:ab:53:da:88:29:84:18: c5:62:08:09:54:f6:34:b0:38:6c:da:8e:8a:4b:8b: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F2:E9:14:C4:F1:35:32:93:80:B9:85:1C:C8:15:38:87:9C:AF:E0 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ff:b0:1e:13:0f:5c:2f:1e:1b:5d:a0:5f:5e:cb:ea:2c:8a: d6:c5:38:73:c7:e8:ba:89:b0:7b:ca:6d:06:72:ae:ce:58:c0: 2f:ea:49:d3:1f:73:a2:24:31:b6:4f:3e:e7:93:b6:96:80:df: 66:0d:41:de:1e:be:86:69:68:e0:93:23:68:0a:d6:3c:25:b4: be:c4:88:d2:57:d9:36:61:32:79:f5:82:35:21:92:59:4a:06: f0:21:c0:b1:95:57:28:bb:4f:c8:aa:5d:30:4e:2a:d1:c7:d4: 35:4c:11:bd:00:e2:2a:d0:2e:72:c8:29:e7:3a:4c:ef:ff:de: 9d:33:7a:bf:cc:57:1e:d5:83:e5:71:0c:b8:12:3a:dd:6f:50: 10:15:3b:e2:e0:de:75:91:73:f5:7f:30:30:00:24:06:8a:35: ec:81:3f:7d:d4:b1:0f:fd:d3:68:65:5a:f7:67:55:c1:c3:79: ec:9a:4d:d6:e9:98:eb:5a:31:75:cc:bf:08:73:14:0c:11:91: b5:c8:a3:34:bf:dd:9a:ab:07:2a:21:9f:47:df:97:51:71:b0: e6:f4:8d:b1:4a:3f:74:c8:44:e4:37:34:14:e1:f1:f9:94:0f: b4:de:a3:87:15:24:ca:8b:34:31:ea:e5:df:58:79:41:b7:fa: 7f:18:55:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUwNjI5MDAwNzUxWhcNMjUwNzA2MDAwNzUxWjAYMRYwFAYD VQQDEw02ODYwODNkNy1jODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukld5E2L0zT9xFLxdEh36o252T7fOiUELR9m43nT0CIz6YHghdEF4qbIi56R aCHYqtTcWvIiO37/Rq5siHwFygMuMykrjk/NMCdC2pb0+Wr2DS9xfI0Px1kHkkhg lJ9nYB+1m1fWsEOWJ/DVRaDjXRX+TQJAa9Rek6Xod8wDB4cWCOFvGJn2SXLQle2z znIG3E/L2j8GNMu1qbhEFNvAB1nOroUXXppDPpm42eV/hG3RRdT7lLqjpDj6o1nM lYW1/1i+O9umFrMxRnICe9Ztvr0EKnnRMkLVFIaeP7jA0GKPyPEggPWsA6tT2ogp hBjFYggJVPY0sDhs2o6KS4stewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3y6RTE 8TUyk4C5hRzIFTiHnK/gMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl/7AeEw9cLx4bXaBfXsvqLIrWxThzx+i6ibB7ym0Gcq7OWMAv6knT H3OiJDG2Tz7nk7aWgN9mDUHeHr6GaWjgkyNoCtY8JbS+xIjSV9k2YTJ59YI1IZJZ SgbwIcCxlVcou0/Iql0wTirRx9Q1TBG9AOIq0C5yyCnnOkzv/96dM3q/zFce1YPl cQy4Ejrdb1AQFTvi4N51kXP1fzAwACQGijXsgT991LEP/dNoZVr3Z1XBw3nsmk3W 6ZjrWjF1zL8IcxQMEZG1yKM0v92aqwcqIZ9H35dRcbDm9I2xSj90yETkNzQU4fH5 lA+03qOHFSTKizQx6uXfWHlBt/p/GFXq -----END CERTIFICATE-----Generated at Sun Jun 29 19:31:18 2025 by rpki-client