$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json) Hash identifier: /lXH1D1uuGe+p986nJqcWJqpMje28exP9XUsOU/iz+0= Subject key identifier: 13:A2:95:E4:47:A4:3E:09:36:63:B9:E7:11:20:9E:BA:99:22:97:4C Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft Manifest number: 55 Signing time: Tue 01 Jul 2025 08:00:05 +0000 Manifest this update: Tue 01 Jul 2025 08:00:04 +0000 Manifest next update: Tue 08 Jul 2025 08:00:04 +0000 Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: qkQ0B9Cz4dbOHP1DfUTNtmsPsxS4DDBK04bprUKZ1XY=) 2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Validity Not Before: Jul 1 08:00:04 2025 GMT Not After : Jul 8 08:00:04 2025 GMT Subject: CN=68639584-e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:32:9e:74:04:f9:8c:4d:6b:e7:fa:75:b8:79: a0:f8:aa:e8:be:62:4a:d4:88:1b:0e:17:3f:79:16: 6a:e0:03:63:98:b8:07:e8:06:87:8f:c9:c8:fa:a7: 8e:2d:e7:19:d1:be:b4:ea:f1:6e:8f:8c:5d:08:42: 46:e7:b3:4d:fe:db:5b:26:ab:7e:5f:71:3b:86:33: cc:71:8e:0a:12:e5:0c:61:6e:aa:21:35:65:c8:96: f5:b9:f8:13:c2:4f:c0:31:9b:d3:a9:01:b7:d3:df: 49:87:30:db:6b:92:ad:b3:08:fc:d6:36:6b:0b:3d: 3b:02:f5:e7:87:f8:52:e6:4e:a7:19:b9:2c:eb:50: e0:b6:91:85:e6:b7:25:48:3b:0c:96:2b:75:fb:55: 39:d5:92:ce:68:41:07:fd:ec:41:a6:e1:33:84:45: 10:5d:ec:80:53:e3:78:97:80:76:bc:a2:6a:cc:ae: 75:bd:c4:38:20:5c:86:f4:e2:f8:d3:8e:4a:9a:4e: f2:fc:de:75:62:15:6f:bd:0d:e7:78:7c:4a:e7:58: c1:2e:63:d4:21:ca:de:4c:5f:97:ed:bc:8d:e6:00: f5:26:8c:cc:fe:e1:fe:37:4b:33:2c:89:6f:d7:16: 9c:5d:aa:20:43:28:a7:1e:91:fd:da:55:1b:00:87: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A2:95:E4:47:A4:3E:09:36:63:B9:E7:11:20:9E:BA:99:22:97:4C X509v3 Authority Key Identifier: keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:da:51:d4:5a:11:3c:bd:1f:b7:bd:9d:dc:c7:ed:6e:c5:90: 37:de:fc:96:53:b6:81:88:7a:d4:53:ed:f1:2f:94:46:f9:83: 9f:cd:2c:ab:48:e9:22:36:d9:2f:95:d3:ba:a7:11:3c:d3:3d: fb:e6:a1:16:22:b7:6a:ef:4c:3e:aa:b3:79:c5:c4:0e:98:c2: 97:30:5f:0c:fc:e0:89:b0:e8:bc:7e:d2:94:96:f7:63:8f:01: 3a:04:40:0b:aa:d9:61:56:16:79:08:80:c2:18:74:1b:b0:3b: e5:5a:68:55:f3:f6:aa:7e:30:20:65:81:0b:9f:20:fe:73:79: 85:9a:a9:b2:1c:d3:1d:28:2d:a6:88:e1:95:bd:ee:6c:83:d5: 96:25:60:8a:f7:d2:5c:fd:ec:52:ca:6a:3e:2c:7e:62:87:19: 1a:d6:51:c7:bb:98:8d:56:8d:dc:d9:09:c1:ea:52:52:a1:21: 11:a9:f7:de:6c:14:62:3c:bb:e2:97:10:04:1e:2d:25:89:30: 0b:2d:94:8d:1b:ba:80:89:ff:4a:0c:14:b0:0f:78:14:68:24: 63:a9:b9:13:da:5d:8b:a2:16:e4:17:40:c9:b5:29:25:3c:01: c1:fe:cc:e7:8e:10:38:7d:31:2f:12:ae:a5:6a:80:df:ad:43: e3:5e:ff:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OENDMzExMC8GA1UEBRMoQzkxNkFFNUE5NTIwQjVGNjc2N0U3OUM5MTVBRkExQkY2 RTQ5MTg5OTAeFw0yNTA3MDEwODAwMDRaFw0yNTA3MDgwODAwMDRaMBgxFjAUBgNV BAMTDTY4NjM5NTg0LWU2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4Mp50BPmMTWvn+nW4eaD4qui+YkrUiBsOFz95FmrgA2OYuAfoBoePycj6p44t 5xnRvrTq8W6PjF0IQkbns03+21smq35fcTuGM8xxjgoS5QxhbqohNWXIlvW5+BPC T8Axm9OpAbfT30mHMNtrkq2zCPzWNmsLPTsC9eeH+FLmTqcZuSzrUOC2kYXmtyVI OwyWK3X7VTnVks5oQQf97EGm4TOERRBd7IBT43iXgHa8omrMrnW9xDggXIb04vjT jkqaTvL83nViFW+9Ded4fErnWMEuY9Qhyt5MX5ftvI3mAPUmjMz+4f43SzMsiW/X FpxdqiBDKKcekf3aVRsAhzcLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE6KV5Eek Pgk2Y7nnESCeupkil0wwHwYDVR0jBBgwFoAUyRauWpUgtfZ2fnnJFa+hv25JGJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Q0MzL0VEREEzNkUyRDcy MzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJhdVdwVWd0ZloyZm5uSkZhLWh2MjVKR0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Q0MzL0VEREEzNkUyRDcyMzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZa MmZubkpGYS1odjI1SkdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABraUdRaETy9H7e9ndzH7W7FkDfe/JZTtoGIetRT7fEvlEb5g5/NLKtI 6SI22S+V07qnETzTPfvmoRYit2rvTD6qs3nFxA6YwpcwXwz84Imw6Lx+0pSW92OP AToEQAuq2WFWFnkIgMIYdBuwO+VaaFXz9qp+MCBlgQufIP5zeYWaqbIc0x0oLaaI 4ZW97myD1ZYlYIr30lz97FLKaj4sfmKHGRrWUce7mI1WjdzZCcHqUlKhIRGp995s FGI8u+KXEAQeLSWJMAstlI0buoCJ/0oMFLAPeBRoJGOpuRPaXYuiFuQXQMm1KSU8 AcH+zOeOEDh9MS8SrqVqgN+tQ+Ne/wU= -----END CERTIFICATE-----Generated at Wed Jul 2 21:38:56 2025 by rpki-client