$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: zmls8oVNm5FijGoFTENJTtWwxw1GmaGbWlHB+GID180= Subject key identifier: B4:99:93:EB:F5:92:20:0F:B7:65:A6:6F:84:F4:13:0C:4A:54:96:29 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03DD Signing time: Thu 03 Jul 2025 00:55:36 +0000 Manifest this update: Thu 03 Jul 2025 00:55:36 +0000 Manifest next update: Thu 10 Jul 2025 00:55:36 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: /2g1XjeyJzt/NlBvAcQ5fQtv1/trHBDpgyW96sLCeLk=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Jul 3 00:55:36 2025 GMT Not After : Jul 10 00:55:36 2025 GMT Subject: CN=6865d508-bb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:5c:96:a3:22:31:97:ab:b1:1c:d4:80:08: 54:0a:db:bd:2b:77:f4:5a:e5:1d:f8:fb:a8:87:fd: e7:03:18:9b:0f:ad:67:f2:87:3c:cc:65:5e:de:19: 42:ea:eb:fe:04:92:b5:06:75:c9:44:77:45:78:57: 5d:f9:83:a3:9d:48:cd:cf:d6:e8:ce:30:3a:c7:dd: 98:8c:c5:64:4e:b2:66:cd:17:8c:d0:97:e6:3e:b7: 59:24:bc:06:c5:c0:bb:4f:3b:13:4f:09:d1:ed:45: 9d:af:7d:dd:68:05:3d:56:53:6e:f0:6d:0e:12:c8: 3f:fe:8d:d2:75:88:7d:0e:fa:55:cb:03:74:bd:a9: 4d:e5:be:89:4b:d0:5b:da:9e:ff:09:89:e6:b9:51: 0f:8b:f7:26:cc:05:bb:07:9c:7e:1d:39:3b:11:6d: 07:27:77:4a:d9:11:b1:90:8a:ba:18:10:32:30:52: d3:b5:ad:89:b6:fd:44:d4:d1:5b:52:73:4e:8d:de: b1:ce:2a:e7:9b:cb:cc:95:f7:7f:43:ed:62:48:fc: 5d:09:ce:06:87:8d:59:c3:02:9c:df:bf:8b:3e:7a: 74:3f:2b:f9:5c:0e:d8:52:ea:cb:2e:2b:18:33:8a: fa:e0:c1:e8:41:86:32:f5:f3:bb:a4:35:9a:23:37: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:93:EB:F5:92:20:0F:B7:65:A6:6F:84:F4:13:0C:4A:54:96:29 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:70:56:85:4f:af:9a:ba:33:da:2b:bc:f9:d5:1e:6c:e7:84: 32:6c:0f:92:fe:5b:db:77:b2:65:4d:b7:8e:8e:6a:19:10:5c: 81:3e:c9:2e:6c:8a:4d:bf:72:f7:ab:62:9c:a8:e3:da:14:b1: ca:51:22:ca:e2:8d:d1:a7:d7:32:52:4f:7b:53:34:d8:8a:9f: f5:fa:15:d1:d4:d7:a9:6c:5f:26:e6:59:2a:36:2e:6f:c3:98: 5d:47:07:ab:7c:cd:57:21:15:bb:43:9e:fd:fb:d4:62:e3:ec: 17:10:8b:d2:8d:dd:75:02:d2:6d:65:f2:06:46:45:05:9b:1c: 3d:87:e3:2c:61:ca:c0:49:39:e9:14:20:77:65:0f:88:5c:2c: 22:9d:87:2f:8d:9f:55:1e:94:d2:1e:f6:a3:b5:e4:68:94:be: 10:89:20:cf:ac:aa:5b:13:ef:df:90:2c:69:79:63:45:a0:71: 5b:55:87:5b:4c:71:ed:e5:c9:11:6b:9e:f8:1b:9e:0a:d6:ba: 3f:fb:78:7d:34:36:90:08:71:39:c9:8e:b1:a6:9b:04:d0:15: 28:34:50:33:54:a4:8f:7a:d4:45:df:6a:b2:3a:3a:af:b3:7b: fb:23:bf:c4:5c:ee:e8:f3:02:a0:79:3c:10:02:e7:2d:6c:45: 01:a3:1e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNzAzMDA1NTM2WhcNMjUwNzEwMDA1NTM2WjAYMRYwFAYD VQQDEw02ODY1ZDUwOC1iYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LtclqMiMZersRzUgAhUCtu9K3f0WuUd+Puoh/3nAxibD61n8oc8zGVe3hlC 6uv+BJK1BnXJRHdFeFdd+YOjnUjNz9bozjA6x92YjMVkTrJmzReM0JfmPrdZJLwG xcC7TzsTTwnR7UWdr33daAU9VlNu8G0OEsg//o3SdYh9DvpVywN0valN5b6JS9Bb 2p7/CYnmuVEPi/cmzAW7B5x+HTk7EW0HJ3dK2RGxkIq6GBAyMFLTta2Jtv1E1NFb UnNOjd6xzirnm8vMlfd/Q+1iSPxdCc4Gh41ZwwKc37+LPnp0Pyv5XA7YUurLLisY M4r64MHoQYYy9fO7pDWaIzfKZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSZk+v1 kiAPt2Wmb4T0EwxKVJYpMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrcFaFT6+aujPaK7z51R5s54QybA+S/lvbd7JlTbeOjmoZEFyBPsku bIpNv3L3q2KcqOPaFLHKUSLK4o3Rp9cyUk97UzTYip/1+hXR1NepbF8m5lkqNi5v w5hdRwerfM1XIRW7Q579+9Ri4+wXEIvSjd11AtJtZfIGRkUFmxw9h+MsYcrASTnp FCB3ZQ+IXCwinYcvjZ9VHpTSHvajteRolL4QiSDPrKpbE+/fkCxpeWNFoHFbVYdb THHt5ckRa574G54K1ro/+3h9NDaQCHE5yY6xppsE0BUoNFAzVKSPetRF32qyOjqv s3v7I7/EXO7o8wKgeTwQAuctbEUBox5J -----END CERTIFICATE-----Generated at Thu Jul 3 05:05:12 2025 by rpki-client