$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: 9yuon1w4JHJ4q5o34it0xsxDupEBoNac0JIxYxXM9/8= Subject key identifier: 11:84:28:BE:02:90:B3:82:22:71:AF:2D:CF:DA:8E:04:4C:94:C9:0C Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 047F Signing time: Tue 01 Jul 2025 00:34:56 +0000 Manifest this update: Tue 01 Jul 2025 00:34:56 +0000 Manifest next update: Tue 08 Jul 2025 00:34:56 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: hwZxdw+Wb8Qe+3k8Owaw0fT/LNehEg0EzO+QT0TL/VI=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: MtaWbSK5JAjEiEpHTj/1X7DdZqPg3BZxUlQCHg85KTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Jul 1 00:34:56 2025 GMT Not After : Jul 8 00:34:56 2025 GMT Subject: CN=68632d30-84c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:f3:b0:84:21:15:c9:ea:50:1f:49:9b:97: 0d:69:dd:68:45:a1:27:db:c5:09:40:77:12:70:d8: 3b:23:b7:a3:51:cd:c5:b8:7d:fb:16:46:94:99:0b: 66:a3:b4:0d:39:eb:cd:1c:27:e0:b3:17:08:71:01: c4:bd:f4:10:74:cf:0f:1a:9c:0d:cb:e1:72:df:b3: a7:51:43:7d:fe:af:e3:31:d8:3f:01:21:bf:2b:33: 92:bc:87:ee:c5:06:2e:33:d0:e7:6a:eb:7d:65:d2: 09:4c:68:65:bf:48:84:79:34:66:eb:5a:a1:cb:ee: fe:f0:a2:f6:ea:e8:d1:d5:58:c9:52:61:41:7c:51: 8b:ae:9f:4d:cc:04:9d:58:3d:71:1c:fa:ef:be:88: 66:da:f8:bb:be:72:6c:e6:0f:4b:43:ed:fa:58:b3: fb:9e:ff:b7:5a:79:9e:c0:da:58:99:05:41:44:ca: 94:a5:ba:a8:47:dc:b7:24:d9:1a:92:c7:43:5a:09: 5a:8c:19:ce:be:1c:d3:02:32:00:f1:4a:71:43:29: 81:6a:d0:26:64:2e:89:54:78:2a:06:5e:12:26:c5: f9:b3:75:24:bc:9d:3d:bb:1b:93:b9:31:3c:49:e8: 7a:36:a7:68:33:89:3a:0c:f4:61:9b:d7:bc:a5:76: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:28:BE:02:90:B3:82:22:71:AF:2D:CF:DA:8E:04:4C:94:C9:0C X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3f:90:c7:65:37:ac:7d:25:db:da:da:bb:f5:4f:34:2b:5d: f9:a0:9f:df:59:24:ed:fe:f7:b4:cd:e4:82:8d:3e:8a:4d:da: a4:5f:de:7d:9d:c0:b6:33:b2:df:b6:78:5b:a2:01:99:fc:fa: e2:6f:d3:aa:36:8e:fe:2d:f4:b9:6b:9d:3e:a3:4b:46:76:81: c3:f9:f4:f5:e0:6a:4a:d2:4e:41:ac:4f:e7:11:07:80:ee:62: 83:c2:aa:16:5d:a2:17:3b:cc:38:4d:3e:3d:ed:2f:c7:95:f5: 1d:d5:95:7b:07:4d:fd:55:7a:62:2e:74:9e:22:3d:c4:2a:ae: 78:44:ab:a7:4e:7d:f9:58:74:3e:e1:1d:99:5b:49:93:48:15: 1a:72:4c:65:f2:4d:16:6b:14:1b:14:48:5e:f7:d9:22:57:02: 8a:6c:80:f9:51:7a:fc:dd:4e:4e:f4:c6:1c:0c:f9:cb:7f:d6: ec:39:9b:4e:cd:64:48:d0:51:9f:8a:a7:a4:69:2e:bd:7e:08: d0:25:81:c5:5b:b8:0c:1d:1d:1b:17:14:90:1f:d0:ba:7e:e0: e3:d1:4a:e2:89:36:93:e2:78:23:8d:96:43:dd:b5:b0:b1:7b: ec:65:e1:b7:6e:e5:d9:5e:bc:91:82:2a:f3:6e:43:83:c2:95: 22:15:3c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUwNzAxMDAzNDU2WhcNMjUwNzA4MDAzNDU2WjAYMRYwFAYD VQQDEw02ODYzMmQzMC04NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SPzsIQhFcnqUB9Jm5cNad1oRaEn28UJQHcScNg7I7ejUc3FuH37FkaUmQtm o7QNOevNHCfgsxcIcQHEvfQQdM8PGpwNy+Fy37OnUUN9/q/jMdg/ASG/KzOSvIfu xQYuM9Dnaut9ZdIJTGhlv0iEeTRm61qhy+7+8KL26ujR1VjJUmFBfFGLrp9NzASd WD1xHPrvvohm2vi7vnJs5g9LQ+36WLP7nv+3WnmewNpYmQVBRMqUpbqoR9y3JNka ksdDWglajBnOvhzTAjIA8UpxQymBatAmZC6JVHgqBl4SJsX5s3UkvJ09uxuTuTE8 Seh6NqdoM4k6DPRhm9e8pXbIeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGEKL4C kLOCInGvLc/ajgRMlMkMMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0P5DHZTesfSXb2tq79U80K135oJ/fWSTt/ve0zeSCjT6KTdqkX959 ncC2M7LftnhbogGZ/Prib9OqNo7+LfS5a50+o0tGdoHD+fT14GpK0k5BrE/nEQeA 7mKDwqoWXaIXO8w4TT497S/HlfUd1ZV7B039VXpiLnSeIj3EKq54RKunTn35WHQ+ 4R2ZW0mTSBUackxl8k0WaxQbFEhe99kiVwKKbID5UXr83U5O9MYcDPnLf9bsOZtO zWRI0FGfiqekaS69fgjQJYHFW7gMHR0bFxSQH9C6fuDj0UriiTaT4ngjjZZD3bWw sXvsZeG3buXZXryRgirzbkODwpUiFTwu -----END CERTIFICATE-----Generated at Thu Jul 3 01:14:58 2025 by rpki-client