$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: 9lyuooiFat8zDpEDmrNjxYf0AKIx5avwivemhdYRwzg= Subject key identifier: 95:BE:48:B9:AA:31:CB:89:A3:85:C0:EC:09:6E:46:47:20:4E:4B:85 Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 0127 Signing time: Tue 01 Jul 2025 05:14:45 +0000 Manifest this update: Tue 01 Jul 2025 05:14:44 +0000 Manifest next update: Tue 08 Jul 2025 05:14:44 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: rAOsgEIrmVxNznV8MLt3bF9qF31B2ujip1AN+hipRYk=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: Jul 1 05:14:44 2025 GMT Not After : Jul 8 05:14:44 2025 GMT Subject: CN=68636ec5-b88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:f5:61:fa:50:d6:2f:26:97:26:66:12:9d: 83:09:7f:d7:27:b3:31:92:42:79:b0:b2:33:0b:04: 4f:88:a3:37:fd:87:07:73:92:e7:ee:9b:5d:fa:d8: f5:0f:ce:5e:87:87:00:f1:d6:37:bf:6b:e4:e1:1b: fa:ce:62:ec:bd:14:8d:42:e0:01:38:46:f5:e5:ba: e1:8b:2e:1c:f1:23:60:ca:cd:fe:5d:79:b4:7a:65: 81:6c:80:79:bf:28:0c:32:6a:16:10:2a:09:bc:9e: 42:c7:2f:9e:f7:eb:5e:78:41:e6:30:4d:a2:72:f7: 67:e1:3a:ec:f6:73:51:3b:9a:69:27:7a:a2:1f:2b: fa:6b:e3:96:8e:8b:c9:d9:09:20:8b:1f:e9:e9:73: 3f:1e:42:3d:56:37:bc:03:0b:e6:8c:be:fa:c8:a8: 7a:09:d1:64:fd:8f:c7:ea:34:30:9e:48:23:2c:35: 11:f7:c9:b4:f7:bb:9f:b4:96:3f:a0:f7:28:9f:2b: dd:3e:18:e5:9f:ee:68:d6:64:38:f9:32:8f:f1:44: f6:da:71:c0:0b:27:2b:40:33:e3:8d:12:13:1c:6b: c4:35:c6:9c:18:5a:9d:4b:28:2c:0a:e2:7c:64:79: 47:71:f3:c2:d3:79:0a:4a:84:73:4c:9a:54:4f:83: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:48:B9:AA:31:CB:89:A3:85:C0:EC:09:6E:46:47:20:4E:4B:85 X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:78:a0:7b:ad:89:5d:eb:b6:ab:93:91:88:08:1e:b8:98:f1: 6f:8c:ce:35:78:65:46:f9:62:24:16:fa:71:b6:ee:5b:94:b3: 93:c7:2c:95:95:5b:6a:c0:84:63:c2:9b:91:c9:e0:88:45:df: e4:9e:a7:f2:f6:e0:47:90:62:45:af:a4:b8:05:22:ee:4f:57: 9a:39:2d:8b:e9:f1:61:be:ac:1f:1d:ad:b8:91:ef:18:cd:ae: b4:56:7f:d6:98:c9:92:76:a4:10:63:ca:58:1f:08:9b:11:8d: be:c0:0b:0a:66:a7:47:c0:da:79:b4:85:9f:6e:40:2d:c7:b6: f1:37:8f:f4:db:d2:fb:29:bc:36:8f:92:0c:7c:1d:16:f1:dd: ce:03:ee:06:4b:5a:8f:12:80:03:3a:e8:70:c0:56:b7:19:35: ae:7b:a4:a3:6d:05:05:07:aa:61:07:fd:03:08:d5:2b:8e:fc: 3a:45:55:ea:0b:4f:66:1c:8a:b3:d7:90:7b:7d:34:80:d1:c4: b5:fa:87:a4:f3:2f:b2:b6:dc:84:22:83:20:c9:b1:e4:37:21: 72:82:07:d1:a6:fa:56:54:27:1c:26:35:9e:9d:3c:68:2f:77: fc:20:8a:4a:bf:86:04:b5:3f:a8:35:de:f0:99:4e:20:5c:0a: 8e:a8:95:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjUwNzAxMDUxNDQ0WhcNMjUwNzA4MDUxNDQ0WjAYMRYwFAYD VQQDEw02ODYzNmVjNS1iODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIX1YfpQ1i8mlyZmEp2DCX/XJ7MxkkJ5sLIzCwRPiKM3/YcHc5Ln7ptd+tj1 D85eh4cA8dY3v2vk4Rv6zmLsvRSNQuABOEb15brhiy4c8SNgys3+XXm0emWBbIB5 vygMMmoWECoJvJ5Cxy+e9+teeEHmME2icvdn4Trs9nNRO5ppJ3qiHyv6a+OWjovJ 2Qkgix/p6XM/HkI9Vje8AwvmjL76yKh6CdFk/Y/H6jQwnkgjLDUR98m097uftJY/ oPconyvdPhjln+5o1mQ4+TKP8UT22nHACycrQDPjjRITHGvENcacGFqdSygsCuJ8 ZHlHcfPC03kKSoRzTJpUT4Nx5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW+SLmq McuJo4XA7AluRkcgTkuFMB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj NkdlY19sVVBILW15TmhDRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPeKB7rYld67ark5GICB64mPFvjM41eGVG+WIkFvpxtu5blLOTxyyV lVtqwIRjwpuRyeCIRd/knqfy9uBHkGJFr6S4BSLuT1eaOS2L6fFhvqwfHa24ke8Y za60Vn/WmMmSdqQQY8pYHwibEY2+wAsKZqdHwNp5tIWfbkAtx7bxN4/029L7Kbw2 j5IMfB0W8d3OA+4GS1qPEoADOuhwwFa3GTWue6SjbQUFB6phB/0DCNUrjvw6RVXq C09mHIqz15B7fTSA0cS1+oek8y+yttyEIoMgybHkNyFyggfRpvpWVCccJjWenTxo L3f8IIpKv4YEtT+oNd7wmU4gXAqOqJXq -----END CERTIFICATE-----Generated at Wed Jul 2 21:11:32 2025 by rpki-client