$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json) Hash identifier: OJKqbckOZRdFt3nZZE88xmbhflegjNbCQod0HbR0beI= Subject key identifier: 2E:91:97:2A:9E:FC:30:AC:CF:0B:2F:8F:72:EA:A4:C3:84:D9:E5:69 Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft Manifest number: 0A3B Signing time: Sat 28 Jun 2025 19:26:56 +0000 Manifest this update: Sat 28 Jun 2025 19:26:56 +0000 Manifest next update: Sat 05 Jul 2025 19:26:56 +0000 Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: 4gtogHJBX/jlOYA/uTie8AaBIFL0JcXYymq5VajWxTs=) 2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: Jun 28 19:26:56 2025 GMT Not After : Jul 5 19:26:56 2025 GMT Subject: CN=68604200-3749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:f5:15:21:64:a6:a1:3d:99:9c:9b:ca:7b: ae:57:a6:ff:74:c7:07:e2:5f:38:59:8c:90:48:0d: 7b:26:5f:fe:84:5e:79:1a:c6:72:e2:89:42:c2:45: e9:c0:4f:94:7b:85:5a:3a:05:10:7d:dd:fb:bd:ec: a5:09:98:b6:19:43:cf:2d:2d:02:45:b4:fe:55:4c: a3:c6:db:f9:c5:97:29:8c:00:dc:71:1c:75:77:bb: b4:05:a2:29:11:02:e5:f2:6b:15:2e:97:dc:55:61: 2c:e9:92:fd:1f:66:eb:80:b4:33:1f:ae:e1:31:76: a7:18:0b:6e:20:02:de:dd:e0:db:27:5a:2a:c1:6c: 09:91:a4:10:a4:5c:cd:59:a1:20:e2:8e:2f:8f:20: a1:93:8f:6e:75:15:52:74:9a:e2:f9:5a:5a:3a:ed: cc:7d:25:45:58:e8:99:44:75:be:48:b2:0b:c1:a8: 47:f1:ff:67:85:fb:01:08:9d:dd:f1:64:a8:80:ee: d0:57:7f:1b:d2:45:03:81:2e:71:58:a2:d5:3c:5c: 2a:d0:c2:97:95:94:3c:65:c2:1c:e0:33:86:df:87: 34:c3:19:45:d8:3d:81:95:b9:4d:d9:06:57:27:5c: b6:f5:75:c3:0a:2d:fc:92:fd:2d:db:13:bc:14:00: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:91:97:2A:9E:FC:30:AC:CF:0B:2F:8F:72:EA:A4:C3:84:D9:E5:69 X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9c:d0:e8:8e:82:ba:39:f5:40:3b:59:4a:58:8c:9f:38:89: 9c:c7:5a:2c:11:f7:3c:af:07:43:a4:7c:a0:77:55:d7:fb:fb: e0:1f:ee:8b:0f:f7:10:d2:d7:4e:d9:69:71:99:d5:bc:6b:d2: 1b:b7:cf:59:bd:e7:0f:ee:f4:2a:e7:39:4c:d9:f5:d8:60:e2: 83:09:8d:dc:13:70:5e:d3:6c:8f:40:7c:2d:5f:49:7f:da:30: a1:aa:3b:c7:6e:80:0c:d6:c0:6e:8c:ff:51:54:bb:d1:1c:61: 23:02:89:9c:b1:6c:8d:02:b3:91:06:67:fd:13:ef:3e:66:fe: be:4c:a4:91:c1:5a:21:1d:33:76:6d:61:67:4f:34:df:97:83: ac:b4:d6:61:05:6e:56:cc:b6:89:0e:d3:8e:f4:9f:50:d8:8b: 68:0b:c0:2d:85:5b:92:0b:95:56:41:61:ce:db:dc:bf:e0:89: 71:6c:9e:40:24:59:33:e1:c7:a4:5e:24:cf:fa:4c:30:6f:09: 2a:2f:92:ae:3e:5d:83:24:e0:22:f5:27:90:54:6e:9e:3d:c5: f7:0e:b8:a2:22:f3:ba:50:1a:07:24:ca:41:ec:c2:55:d7:2d: 69:66:00:a7:a5:80:47:b2:7b:34:5c:4c:f2:8c:f7:d8:e3:68: c8:bd:e9:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjUwNjI4MTkyNjU2WhcNMjUwNzA1MTkyNjU2WjAYMRYwFAYD VQQDEw02ODYwNDIwMC0zNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiv1FSFkpqE9mZybynuuV6b/dMcH4l84WYyQSA17Jl/+hF55GsZy4olCwkXp wE+Ue4VaOgUQfd37veylCZi2GUPPLS0CRbT+VUyjxtv5xZcpjADccRx1d7u0BaIp EQLl8msVLpfcVWEs6ZL9H2brgLQzH67hMXanGAtuIALe3eDbJ1oqwWwJkaQQpFzN WaEg4o4vjyChk49udRVSdJri+VpaOu3MfSVFWOiZRHW+SLILwahH8f9nhfsBCJ3d 8WSogO7QV38b0kUDgS5xWKLVPFwq0MKXlZQ8ZcIc4DOG34c0wxlF2D2BlblN2QZX J1y29XXDCi38kv0t2xO8FACYvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6Rlyqe /DCszwsvj3LqpMOE2eVpMB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTgyNC84QkZGM0JCNDZFN0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRu RThfY2dnWE1MN0lYaEdLNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfnNDojoK6OfVAO1lKWIyfOImcx1osEfc8rwdDpHygd1XX+/vgH+6L D/cQ0tdO2WlxmdW8a9Ibt89ZvecP7vQq5zlM2fXYYOKDCY3cE3Be02yPQHwtX0l/ 2jChqjvHboAM1sBujP9RVLvRHGEjAomcsWyNArORBmf9E+8+Zv6+TKSRwVohHTN2 bWFnTzTfl4OstNZhBW5WzLaJDtOO9J9Q2ItoC8AthVuSC5VWQWHO29y/4IlxbJ5A JFkz4cekXiTP+kwwbwkqL5KuPl2DJOAi9SeQVG6ePcX3DriiIvO6UBoHJMpB7MJV 1y1pZgCnpYBHsns0XEzyjPfY42jIvem5 -----END CERTIFICATE-----Generated at Mon Jun 30 17:39:55 2025 by rpki-client