$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: 3liE2apFRuTQbal8PYJyDVq15zrZydYksyJBMFQBUCQ= Subject key identifier: 61:4B:E4:0A:00:0F:EC:91:A0:B8:25:16:A2:31:EB:82:0D:E6:6D:81 Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 07DC Signing time: Mon 30 Jun 2025 21:15:11 +0000 Manifest this update: Mon 30 Jun 2025 21:15:11 +0000 Manifest next update: Mon 07 Jul 2025 21:15:11 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: y2EVpaox8PGUJzxpPNZFDo+Hn2JZXk6SMlA07jTyv0U=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: Jun 30 21:15:11 2025 GMT Not After : Jul 7 21:15:11 2025 GMT Subject: CN=6862fe5f-cabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:e3:2c:92:59:d2:18:9e:b0:69:53:b4:32: 5f:8c:0e:8b:7a:6b:44:0d:b8:09:79:c2:f0:09:02: 09:cb:64:2b:c0:bc:8a:3f:15:d7:0f:9c:38:56:28: 75:18:fb:ba:da:90:42:a4:78:45:af:07:d0:e7:47: e7:ce:69:91:3a:02:b7:3a:c0:7d:88:71:56:bd:8c: 39:a7:fd:54:3e:66:cd:41:59:2a:85:6f:8e:cc:e9: ca:eb:67:43:0c:83:05:ef:6d:a4:09:e2:52:4b:9a: f4:f8:97:4f:b6:49:ec:7d:f2:0f:b0:70:aa:95:ba: 02:3e:44:35:bb:49:7b:35:15:a0:58:5b:17:9b:68: 95:27:40:a8:90:25:c4:7c:8c:52:60:1a:43:c4:91: 86:b1:24:d9:f7:f3:27:ad:d4:72:f8:fe:47:0c:58: 7f:6f:02:54:c3:2a:5e:57:f1:36:25:be:1e:c0:c5: 0c:20:da:58:b8:0a:79:37:67:80:27:3c:be:f9:58: c4:0a:3b:cf:b5:7a:bc:4b:73:a1:de:97:24:bc:ff: 62:24:2e:08:5c:6b:96:14:66:eb:74:a5:d3:01:9d: e8:16:3e:2b:03:10:e6:3e:26:9d:8f:f8:ce:cf:ff: 41:68:8d:b3:9a:76:4b:16:41:a2:5c:94:9c:26:8c: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:E4:0A:00:0F:EC:91:A0:B8:25:16:A2:31:EB:82:0D:E6:6D:81 X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e2:f8:03:77:4c:b0:45:0d:e8:66:16:e5:2e:6c:97:4a:30: 20:1b:f4:61:4c:a2:00:97:25:ec:b6:f7:4f:40:52:0c:7a:e6: 39:60:d6:7c:58:fd:7b:1e:d7:9f:20:c4:89:1d:0e:67:6e:ac: 0f:ed:95:93:c4:e2:37:8a:a7:84:de:80:2e:81:d6:a2:73:8d: 88:bd:54:ba:ba:fe:2d:32:23:30:0d:54:54:13:4c:a4:da:e9: ac:2a:45:f7:8a:5e:9d:df:7e:e8:de:9d:31:8b:15:80:a8:26: 7c:8e:ba:02:90:70:59:41:13:3e:73:f3:6b:6b:15:51:38:43: 1f:4d:0f:88:1b:4b:66:4f:9d:c0:a0:29:79:98:e5:1d:a6:b1: 44:f7:fa:6c:ae:05:65:bd:69:06:df:b5:6e:2e:d2:9b:c0:39: 90:1b:8e:22:e4:22:cc:96:ac:be:65:c2:46:5b:a2:ab:31:2a: 61:99:3f:8a:ab:27:c5:b3:3b:e0:2c:ac:f0:09:39:01:d0:1b: 35:61:6d:92:d3:ad:df:51:78:23:b7:99:36:90:72:b0:49:14: cb:cc:89:98:24:15:e5:64:1b:73:99:de:26:2e:d9:b0:c5:0d: 98:22:93:5c:8e:70:62:1b:44:3b:d5:c8:e1:54:31:e3:89:01: 75:8f:91:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjUwNjMwMjExNTExWhcNMjUwNzA3MjExNTExWjAYMRYwFAYD VQQDEw02ODYyZmU1Zi1jYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VrjLJJZ0hiesGlTtDJfjA6LemtEDbgJecLwCQIJy2QrwLyKPxXXD5w4Vih1 GPu62pBCpHhFrwfQ50fnzmmROgK3OsB9iHFWvYw5p/1UPmbNQVkqhW+OzOnK62dD DIMF722kCeJSS5r0+JdPtknsffIPsHCqlboCPkQ1u0l7NRWgWFsXm2iVJ0CokCXE fIxSYBpDxJGGsSTZ9/MnrdRy+P5HDFh/bwJUwypeV/E2Jb4ewMUMINpYuAp5N2eA Jzy++VjECjvPtXq8S3Oh3pckvP9iJC4IXGuWFGbrdKXTAZ3oFj4rAxDmPiadj/jO z/9BaI2zmnZLFkGiXJScJoynTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFL5AoA D+yRoLglFqIx64IN5m2BMB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4vgDd0ywRQ3oZhblLmyXSjAgG/RhTKIAlyXstvdPQFIMeuY5YNZ8 WP17HtefIMSJHQ5nbqwP7ZWTxOI3iqeE3oAugdaic42IvVS6uv4tMiMwDVRUE0yk 2umsKkX3il6d337o3p0xixWAqCZ8jroCkHBZQRM+c/NraxVROEMfTQ+IG0tmT53A oCl5mOUdprFE9/psrgVlvWkG37VuLtKbwDmQG44i5CLMlqy+ZcJGW6KrMSphmT+K qyfFszvgLKzwCTkB0Bs1YW2S063fUXgjt5k2kHKwSRTLzImYJBXlZBtzmd4mLtmw xQ2YIpNcjnBiG0Q71cjhVDHjiQF1j5FF -----END CERTIFICATE-----Generated at Wed Jul 2 19:59:46 2025 by rpki-client