$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: EihCBFbYqdEMttuUZXAJcxba6chyHm3T9we9Wwy4JpY= Subject key identifier: 3D:A2:E7:A1:D3:DC:60:E0:2C:17:DF:E0:78:EA:E0:2D:0F:CD:97:AB Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 10 Signing time: Thu 03 Jul 2025 08:21:38 +0000 Manifest this update: Thu 03 Jul 2025 08:21:38 +0000 Manifest next update: Thu 10 Jul 2025 08:21:38 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: 4zJ3cSf0jXPd6sxliVNkQcgZ2YOSAonm9ZA2DHmNCYg=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Jul 3 08:21:38 2025 GMT Not After : Jul 10 08:21:38 2025 GMT Subject: CN=68663d92-a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:13:89:66:5a:ea:78:cf:44:27:f6:f0:72: c3:7b:40:ca:06:0a:4a:03:cb:cf:0d:f5:6e:12:a2: c4:5d:4e:5f:83:92:59:97:2b:94:69:05:be:a8:63: 59:6c:e7:a7:98:56:5c:71:29:72:62:58:d4:ba:17: 15:76:db:85:0a:26:b0:a3:38:ad:b3:67:39:b9:11: ae:92:f3:29:90:14:0b:55:dd:a3:79:ec:37:31:49: 24:c8:a2:0f:7c:cb:d9:6a:93:0a:93:3c:43:81:e4: 1d:43:bb:60:88:29:24:b4:3d:fe:20:f8:d9:78:9d: 89:58:f1:fd:5c:1b:5e:3d:86:85:65:0c:be:47:84: a0:96:55:ab:15:e5:fc:7e:b8:de:02:50:a4:21:66: d1:69:55:b8:28:43:ee:62:73:ad:a2:04:31:46:0f: 0d:1f:25:b3:93:7d:54:69:e6:c4:05:62:da:2c:9c: d6:ec:82:f0:00:40:b7:91:ed:c8:83:b6:df:41:09: ca:7a:0e:1c:5a:fa:c4:22:19:fb:a3:b3:80:fd:7e: 08:f5:67:3a:c0:a6:60:6b:66:19:bd:aa:3d:ca:72: 09:b1:99:fe:5e:7e:16:df:ce:c4:0c:e4:5d:3d:bd: a5:0c:83:cd:b3:cb:ef:7e:83:ef:48:af:01:98:18: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A2:E7:A1:D3:DC:60:E0:2C:17:DF:E0:78:EA:E0:2D:0F:CD:97:AB X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b3:51:72:8b:c9:97:45:65:25:3c:78:71:3a:1c:ea:05:39: 4b:b2:ad:40:01:51:d3:5d:68:46:d0:43:a1:ae:6b:a8:c5:2b: 16:5d:3e:19:20:3e:af:0e:56:17:ff:a9:1a:51:d5:4e:84:b0: 60:36:63:90:71:e0:b4:61:00:13:a4:ef:47:82:4e:a3:5b:56: 66:a3:37:e5:d4:a1:a9:5c:74:64:86:6b:25:cf:ab:1a:af:73: 8d:1c:c6:57:9f:9b:42:22:e6:16:8f:b3:b6:5e:fc:c9:f1:8c: d7:a8:32:32:09:09:d0:47:81:2e:e2:03:a1:cb:6c:3b:c1:f9: 66:29:bc:33:bc:49:a3:b4:f3:b1:da:6b:c3:87:94:51:c1:ee: b1:df:12:8f:2e:fb:3e:29:e4:ab:11:2e:a9:9e:ab:17:00:c4: 7e:6a:40:29:4b:8e:5a:57:4f:96:27:2d:fe:0d:04:4e:88:7a: 12:4a:f8:a6:88:96:5c:91:05:17:52:63:6c:57:6d:04:32:4a: 01:2e:f0:2d:ba:c5:e4:18:9f:f0:cc:f5:59:87:04:30:a7:66: a1:60:a0:70:4e:7b:89:58:e6:48:31:aa:b0:9e:2a:2b:3c:84: 21:c2:ba:af:1c:ac:34:03:b2:bd:26:00:0f:82:25:90:d5:24: bc:f5:0e:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTA3MDMwODIxMzhaFw0yNTA3MTAwODIxMzhaMBgxFjAUBgNV BAMTDTY4NjYzZDkyLWEzZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/rROJZlrqeM9EJ/bwcsN7QMoGCkoDy88N9W4SosRdTl+DklmXK5RpBb6oY1ls 56eYVlxxKXJiWNS6FxV224UKJrCjOK2zZzm5Ea6S8ymQFAtV3aN57DcxSSTIog98 y9lqkwqTPEOB5B1Du2CIKSS0Pf4g+Nl4nYlY8f1cG149hoVlDL5HhKCWVasV5fx+ uN4CUKQhZtFpVbgoQ+5ic62iBDFGDw0fJbOTfVRp5sQFYtosnNbsgvAAQLeR7ciD tt9BCcp6Dhxa+sQiGfujs4D9fgj1ZzrApmBrZhm9qj3Kcgmxmf5efhbfzsQM5F09 vaUMg82zy+9+g+9IrwGYGMGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPaLnodPc YOAsF9/geOrgLQ/Nl6swHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuzUXKLyZdFZSU8eHE6HOoFOUuyrUABUdNdaEbQQ6Gua6jFKxZdPhkg Pq8OVhf/qRpR1U6EsGA2Y5Bx4LRhABOk70eCTqNbVmajN+XUoalcdGSGayXPqxqv c40cxlefm0Ii5haPs7Ze/MnxjNeoMjIJCdBHgS7iA6HLbDvB+WYpvDO8SaO087Ha a8OHlFHB7rHfEo8u+z4p5KsRLqmeqxcAxH5qQClLjlpXT5YnLf4NBE6IehJK+KaI llyRBRdSY2xXbQQySgEu8C26xeQYn/DM9VmHBDCnZqFgoHBOe4lY5kgxqrCeKis8 hCHCuq8crDQDsr0mAA+CJZDVJLz1Dtk= -----END CERTIFICATE-----Generated at Thu Jul 3 16:51:55 2025 by rpki-client