$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: S2Ku+AXTE07LWC6JZjc/QYIG9eWRcW5bL5Mpx02O4fM= Subject key identifier: 5C:5E:1C:DB:1A:BE:9D:CE:56:7D:AE:AD:06:1E:44:4A:3D:C5:5D:60 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 013D Signing time: Sat 19 Jul 2025 04:38:08 +0000 Manifest this update: Sat 19 Jul 2025 04:38:08 +0000 Manifest next update: Sat 26 Jul 2025 04:38:08 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: 4PbIeUr0516qAGlQOip9Z2C8xQf1fJGnEaJarYIYa88=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Jul 19 04:38:08 2025 GMT Not After : Jul 26 04:38:08 2025 GMT Subject: CN=687b2130-9ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:9a:42:94:86:ee:bd:19:71:74:6a:9d:37: ce:c3:b5:67:d9:e5:29:e3:4f:4e:c5:b7:7c:6c:11: 04:b6:ec:72:90:a5:be:8d:92:a5:85:68:b0:a3:95: 01:6e:7c:16:06:d9:4b:08:48:1b:d0:72:31:d0:49: ac:3a:66:a6:70:07:2e:9e:25:8a:d3:15:9d:22:89: f7:39:20:c1:45:8f:df:c1:d8:5a:0b:1e:76:78:41: 50:1d:e0:f7:6a:a6:6d:ee:11:45:21:84:4e:43:04: 5c:ef:0a:de:65:3e:69:83:9f:eb:6e:55:02:35:60: 6d:94:6d:03:6e:eb:d3:c7:1f:97:95:c7:33:2c:01: 92:03:b7:38:e8:e7:37:39:ff:d1:56:36:74:03:4b: 3d:4a:39:8a:a7:61:84:6d:75:91:58:46:55:25:b0: 62:25:69:48:a0:82:09:ce:59:82:12:30:14:68:ad: 44:84:67:ce:ed:9c:99:f6:56:79:1d:89:6c:a6:cd: b2:92:34:2c:9e:cc:d3:59:ac:cd:50:65:4b:66:d8: e3:ec:6f:a7:10:3a:ee:5c:98:ac:95:5c:b0:d0:93: 17:51:66:c9:a8:03:86:22:c5:0e:85:39:71:5a:a3: 3d:87:e9:cb:69:17:c5:a0:29:44:6c:0a:ba:39:33: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5E:1C:DB:1A:BE:9D:CE:56:7D:AE:AD:06:1E:44:4A:3D:C5:5D:60 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:49:d9:ae:28:2a:e4:f4:a2:9c:5c:5a:25:21:22:68:c6:ad: 6a:eb:d0:95:23:94:72:3e:16:f0:2d:f2:3e:f3:08:ba:a2:9b: 3b:55:58:96:c4:e9:65:c6:af:56:f0:6c:86:70:6c:ce:5f:37: 5d:ea:c7:7e:ec:25:a5:39:76:8b:10:f0:5c:1e:63:3e:a2:5d: c1:02:27:2c:dd:4d:32:1e:f8:79:8d:89:5e:fc:b9:a4:dc:a9: 2c:01:08:b8:f6:3d:10:7e:e7:32:b5:8e:51:8b:ad:0d:1f:63: 1f:14:2a:ad:b1:43:24:01:ee:df:af:a1:81:4a:be:82:a7:02: 3f:f8:1f:48:04:a3:2e:40:84:ff:2c:e9:ac:cd:2d:bc:7c:9b: 0c:58:c6:29:9b:8c:8d:5a:b2:e9:af:a7:ef:68:7e:b8:f1:33: 71:b2:d4:24:48:bd:fb:4a:b4:d6:a4:03:93:0f:c3:dd:99:be: 3d:0b:36:bc:28:74:7d:b3:00:ae:d9:0d:de:65:a7:09:b0:7b: 38:8e:ee:aa:30:92:b2:2c:29:71:a7:cf:a7:10:90:cf:07:5e: b5:b1:4b:6d:62:9c:cb:5b:b3:e1:47:7b:f9:47:5c:62:71:c5: 98:c7:d1:0c:7b:4b:63:e8:5e:0e:1a:67:20:d6:5b:81:f7:d2: 19:af:92:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjUwNzE5MDQzODA4WhcNMjUwNzI2MDQzODA4WjAYMRYwFAYD VQQDEw02ODdiMjEzMC05ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphaaQpSG7r0ZcXRqnTfOw7Vn2eUp409Oxbd8bBEEtuxykKW+jZKlhWiwo5UB bnwWBtlLCEgb0HIx0EmsOmamcAcuniWK0xWdIon3OSDBRY/fwdhaCx52eEFQHeD3 aqZt7hFFIYROQwRc7wreZT5pg5/rblUCNWBtlG0DbuvTxx+XlcczLAGSA7c46Oc3 Of/RVjZ0A0s9SjmKp2GEbXWRWEZVJbBiJWlIoIIJzlmCEjAUaK1EhGfO7ZyZ9lZ5 HYlsps2ykjQsnszTWazNUGVLZtjj7G+nEDruXJislVyw0JMXUWbJqAOGIsUOhTlx WqM9h+nLaRfFoClEbAq6OTNoIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxeHNsa vp3OVn2urQYeREo9xV1gMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSdmuKCrk9KKcXFolISJoxq1q69CVI5RyPhbwLfI+8wi6ops7VViW xOllxq9W8GyGcGzOXzdd6sd+7CWlOXaLEPBcHmM+ol3BAics3U0yHvh5jYle/Lmk 3KksAQi49j0QfucytY5Ri60NH2MfFCqtsUMkAe7fr6GBSr6CpwI/+B9IBKMuQIT/ LOmszS28fJsMWMYpm4yNWrLpr6fvaH648TNxstQkSL37SrTWpAOTD8Pdmb49Cza8 KHR9swCu2Q3eZacJsHs4ju6qMJKyLClxp8+nEJDPB161sUttYpzLW7PhR3v5R1xi ccWYx9EMe0tj6F4OGmcg1luB99IZr5JG -----END CERTIFICATE-----Generated at Sun Jul 20 06:19:43 2025 by rpki-client