$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: IFM0QhjSZReZfD3DaK6l5Fv7BpXTa09FsfEyktJS1FY= Subject key identifier: 6A:84:93:00:08:B1:1A:57:49:50:97:3E:B0:4E:91:6F:30:54:8D:0C Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1F9C Signing time: Sat 28 Jun 2025 17:04:04 +0000 Manifest this update: Sat 28 Jun 2025 17:04:04 +0000 Manifest next update: Sat 05 Jul 2025 17:04:04 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: RU1sLknzg/Set4rAQ3MCVp9iPAefseJU9Do0DnVtbAY=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Jun 28 17:04:04 2025 GMT Not After : Jul 5 17:04:04 2025 GMT Subject: CN=68602084-4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:d0:05:67:e4:7d:71:a8:ce:c6:4f:9d:39: da:36:b7:c8:b5:1a:71:32:0d:a5:5f:e4:5a:20:2f: 0a:25:55:75:f9:a0:0e:24:26:3b:4e:80:9e:a7:22: b8:28:15:b2:94:8f:52:e5:6a:7d:fd:32:33:4a:3b: eb:e8:d8:4a:1d:97:17:12:d8:84:af:a8:ec:f1:e2: 98:87:6a:a1:90:13:47:71:09:a8:3a:94:18:56:e5: b2:7b:f9:1d:55:a7:79:81:39:90:d8:66:15:61:fd: 5a:a2:58:a3:f7:08:7e:52:3e:9b:73:6f:8a:c0:17: 95:7b:c7:e4:17:31:3c:1f:e5:c4:6c:e7:60:d9:21: 8f:c4:76:a4:61:ce:dc:ef:1e:05:c5:a0:76:d7:05: 34:8d:ad:38:4f:40:c2:e7:36:8d:64:40:8f:c3:93: 77:cc:2e:0f:47:96:49:28:76:8b:c3:0c:31:e0:f2: 15:5a:97:96:be:52:88:f4:2c:88:a0:20:81:57:b6: fb:cd:73:de:37:05:cd:b0:e1:b7:c7:e4:fe:e7:d1: f5:d0:5b:2b:19:fb:70:47:bf:cf:ca:83:c9:91:ad: 9f:9d:f2:eb:94:14:5b:42:06:b1:d5:40:25:fe:a8: c4:a6:84:c8:fc:f9:e3:cf:23:35:fc:36:1d:51:a4: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:93:00:08:B1:1A:57:49:50:97:3E:B0:4E:91:6F:30:54:8D:0C X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d7:5a:e6:b0:27:62:9c:90:91:a3:5d:95:95:28:22:41:4b: 7a:44:e1:e3:ec:de:3f:73:2a:4b:b1:bc:54:4c:f4:a9:c7:ed: 70:ba:79:50:fc:df:87:c0:e0:05:39:3e:cb:bc:07:51:a8:e6: 0d:a3:0b:ad:63:f3:0d:fe:fd:e6:34:48:40:5d:16:3f:96:d7: 8a:69:70:0b:04:28:57:1e:3c:85:b7:1e:c7:a0:52:e1:99:34: bb:08:b9:1b:6a:c8:97:78:61:88:2f:d9:80:62:50:db:b5:c6: 96:be:2f:f8:c9:95:e1:47:90:1a:f0:6e:03:28:c3:8a:af:79: 36:78:48:55:ac:5b:fb:ed:09:fe:f1:e9:03:90:ea:a0:92:e2: d8:f6:6a:c6:f2:5e:fa:98:ff:4e:22:9a:60:c8:2c:d2:03:c4: 00:11:a2:fb:dd:72:f2:1f:39:c6:bb:29:5a:04:a7:2d:95:3c: dd:e4:86:15:ae:ef:60:ae:e5:04:96:f7:7e:40:6c:d5:14:50: 2a:e9:df:64:77:f8:40:4b:48:96:9c:4a:fa:d3:fb:69:36:0a: a4:08:c8:35:37:ad:9c:a3:1e:39:e7:b0:a7:97:1f:74:8b:df: db:8c:b7:26:ff:22:ac:74:1c:58:98:0b:52:74:9d:81:4d:25: 21:5e:94:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwNjI4MTcwNDA0WhcNMjUwNzA1MTcwNDA0WjAYMRYwFAYD VQQDEw02ODYwMjA4NC00MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HTQBWfkfXGozsZPnTnaNrfItRpxMg2lX+RaIC8KJVV1+aAOJCY7ToCepyK4 KBWylI9S5Wp9/TIzSjvr6NhKHZcXEtiEr6js8eKYh2qhkBNHcQmoOpQYVuWye/kd Vad5gTmQ2GYVYf1aolij9wh+Uj6bc2+KwBeVe8fkFzE8H+XEbOdg2SGPxHakYc7c 7x4FxaB21wU0ja04T0DC5zaNZECPw5N3zC4PR5ZJKHaLwwwx4PIVWpeWvlKI9CyI oCCBV7b7zXPeNwXNsOG3x+T+59H10FsrGftwR7/PyoPJka2fnfLrlBRbQgax1UAl /qjEpoTI/PnjzyM1/DYdUaSwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqEkwAI sRpXSVCXPrBOkW8wVI0MMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB911rmsCdinJCRo12VlSgiQUt6ROHj7N4/cypLsbxUTPSpx+1wunlQ /N+HwOAFOT7LvAdRqOYNowutY/MN/v3mNEhAXRY/lteKaXALBChXHjyFtx7HoFLh mTS7CLkbasiXeGGIL9mAYlDbtcaWvi/4yZXhR5Aa8G4DKMOKr3k2eEhVrFv77Qn+ 8ekDkOqgkuLY9mrG8l76mP9OIppgyCzSA8QAEaL73XLyHznGuylaBKctlTzd5IYV ru9gruUElvd+QGzVFFAq6d9kd/hAS0iWnEr60/tpNgqkCMg1N62cox4557Cnlx90 i9/bjLcm/yKsdBxYmAtSdJ2BTSUhXpRH -----END CERTIFICATE-----Generated at Sun Jun 29 16:25:43 2025 by rpki-client