$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json) Hash identifier: 1pBF6CTovXnmpXn0MOnNN8ne280Vxlbsi+PExIYCRjs= Subject key identifier: E6:80:68:16:E9:CC:ED:A7:32:C5:8F:D8:AA:2E:48:DB:A8:96:42:EB Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft Manifest number: 1D Signing time: Tue 01 Jul 2025 08:41:00 +0000 Manifest this update: Tue 01 Jul 2025 08:40:59 +0000 Manifest next update: Tue 08 Jul 2025 08:40:59 +0000 Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: ENmfy9i8mTPQBHTFEq3JqBnqpF87FfdcqLcLE/NyaGI=) 2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 3bcDVvnCHw6LlppchOqrgSyXHliARmZhxXNaF8dSpvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Validity Not Before: Jul 1 08:40:59 2025 GMT Not After : Jul 8 08:40:59 2025 GMT Subject: CN=68639f1c-8125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:98:fc:2b:20:9e:a6:67:9a:2f:95:c7:c7: fe:cb:97:48:49:10:fb:0b:51:81:dc:df:a3:98:18: 00:09:33:d5:af:96:a5:87:8f:3a:88:cd:c2:fd:22: 80:eb:23:a6:10:6e:40:e1:cc:57:25:da:4d:be:e9: 57:1b:42:ae:c5:f3:6e:f0:7a:6c:f0:b1:46:65:06: 06:09:c6:66:c5:9a:3b:44:51:2f:88:ba:82:37:8a: a6:8a:74:82:61:60:35:bf:5d:5a:b8:be:df:b3:ca: bb:2c:cf:e0:10:d4:01:a9:a1:fb:1c:ea:ff:c7:62: e6:4c:e0:55:73:df:b9:a9:60:a0:44:71:9f:02:a7: b3:57:9f:4e:4e:80:6f:84:0d:3e:4d:f2:dd:40:90: 0f:a7:70:61:f9:4d:72:6f:09:cc:39:a2:45:9f:4f: c0:d0:f3:db:24:4d:06:50:2d:c9:e8:1a:2f:1d:36: 13:a2:5e:93:fb:31:97:c7:78:57:08:82:89:78:7b: fb:85:53:db:62:b7:3e:4e:94:14:2b:d3:66:88:ae: 9c:c3:d6:e8:42:1d:76:65:12:dc:5b:d3:b8:de:fd: 50:d3:65:66:14:e9:59:32:97:11:1c:63:c9:4c:56: 14:01:81:e6:a4:4e:b9:80:3d:54:be:c8:ac:6c:0a: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:80:68:16:E9:CC:ED:A7:32:C5:8F:D8:AA:2E:48:DB:A8:96:42:EB X509v3 Authority Key Identifier: keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:d5:98:b2:f3:95:cd:b1:47:0e:0d:1c:65:e9:44:3a:cd:34: af:5e:f5:7e:d9:88:0e:0b:0c:38:5f:07:1c:6a:4c:85:5e:09: a1:72:09:a2:89:f9:87:79:c4:38:be:5a:0d:af:44:fc:97:82: e9:84:9e:da:08:75:85:88:85:b8:b3:3b:19:d8:e1:5b:f1:eb: c6:1b:52:77:89:e8:55:46:0c:8d:3b:8d:ba:ff:4c:7f:0a:f2: 84:ee:9a:6f:bf:39:cb:3b:a1:0a:27:bf:51:29:6d:79:14:2e: fc:59:ce:ac:bf:5e:7a:c1:5f:19:71:70:53:ce:dc:e0:60:ac: 8e:8e:33:dc:ff:05:b8:ac:70:25:84:7d:ba:10:e2:54:59:a6: ed:40:73:70:7c:b7:f0:a8:27:fd:9f:dc:e4:4f:3f:7d:ca:2b: fe:f2:21:7d:0e:84:e5:e1:a5:ba:81:06:90:f5:90:f0:97:48: a9:79:3b:7a:3d:66:ed:b8:0b:f6:4d:9a:83:53:0a:dc:7e:c7: d1:96:bb:3d:01:47:31:3e:41:30:62:84:b8:02:3e:80:2b:f8: dd:c6:c1:08:06:41:4a:6a:e2:ae:2d:e5:0d:80:d0:26:89:1f: 50:6d:0b:df:1b:f7:9a:30:82:7b:ba:70:44:c8:03:c0:28:e4: fc:db:dc:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTMwRjExMC8GA1UEBRMoQ0JCMzVCREZBMzVBOEJFQjI3MDlBNERCQjMyRTNEMjE2 MkVDMUZBODAeFw0yNTA3MDEwODQwNTlaFw0yNTA3MDgwODQwNTlaMBgxFjAUBgNV BAMTDTY4NjM5ZjFjLTgxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVIpj8KyCepmeaL5XHx/7Ll0hJEPsLUYHc36OYGAAJM9WvlqWHjzqIzcL9IoDr I6YQbkDhzFcl2k2+6VcbQq7F827wemzwsUZlBgYJxmbFmjtEUS+IuoI3iqaKdIJh YDW/XVq4vt+zyrssz+AQ1AGpofsc6v/HYuZM4FVz37mpYKBEcZ8Cp7NXn05OgG+E DT5N8t1AkA+ncGH5TXJvCcw5okWfT8DQ89skTQZQLcnoGi8dNhOiXpP7MZfHeFcI gol4e/uFU9titz5OlBQr02aIrpzD1uhCHXZlEtxb07je/VDTZWYU6VkylxEcY8lM VhQBgeakTrmAPVS+yKxsCrI1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5oBoFunM 7acyxY/Yqi5I26iWQuswHwYDVR0jBBgwFoAUy7Nb36Nai+snCaTbsy49IWLsH6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMzBGLzcyRTJDNDI0MkE0 MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1zbkNhVGJzeTQ5SVdMc0g2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTdOYjM2TmFpLXNuQ2FUYnN5NDlJV0xzSDZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MzBGLzcyRTJDNDI0MkE0MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1z bkNhVGJzeTQ5SVdMc0g2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANXVmLLzlc2xRw4NHGXpRDrNNK9e9X7ZiA4LDDhfBxxqTIVeCaFyCaKJ +Yd5xDi+Wg2vRPyXgumEntoIdYWIhbizOxnY4Vvx68YbUneJ6FVGDI07jbr/TH8K 8oTumm+/Ocs7oQonv1EpbXkULvxZzqy/XnrBXxlxcFPO3OBgrI6OM9z/BbiscCWE fboQ4lRZpu1Ac3B8t/CoJ/2f3ORPP33KK/7yIX0OhOXhpbqBBpD1kPCXSKl5O3o9 Zu24C/ZNmoNTCtx+x9GWuz0BRzE+QTBihLgCPoAr+N3GwQgGQUpq4q4t5Q2A0CaJ H1BtC98b95owgnu6cETIA8Ao5Pzb3HY= -----END CERTIFICATE-----Generated at Wed Jul 2 23:20:58 2025 by rpki-client