$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: XaoE2KRfShUn7XeilVfrTx8yUDFv3G1G2UI9ATaG+tg= Subject key identifier: AA:BB:45:61:2F:9D:B2:89:4F:E8:FB:11:42:CF:1A:4F:DA:1F:23:D8 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 34C3 Signing time: Thu 24 Jul 2025 15:19:13 +0000 Manifest this update: Thu 24 Jul 2025 15:19:13 +0000 Manifest next update: Thu 31 Jul 2025 15:19:13 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: sNZGIH6+zbsdgmkv2Fz5rzq8q8U7EN2CWyphslmGMs8=) 2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: 0CrTGxJaPsodlrZ0c08rHuSCxgklM8B4WytTnG2PPl0=) 3: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=) 4: 0767F34C845911EA8651FB1AC4F9AE02.roa (hash: 3DWCIf40TgibMX5CanXsNcETyUqD6pX5FWOWYBonFK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 15:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Jul 24 15:19:13 2025 GMT Not After : Jul 31 15:19:13 2025 GMT Subject: CN=68824ef1-462b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:46:24:15:7a:2f:46:b1:a3:e4:6d:f1:6a:de: 89:88:44:20:dc:07:fe:41:b1:cd:f8:78:c0:ce:77: 4b:a2:6d:53:0c:20:f7:a8:70:4c:1a:39:df:aa:93: da:43:d6:24:71:02:ff:92:bd:2e:1e:3e:61:b9:b3: a3:8b:8c:18:05:cd:1e:12:20:a9:56:31:fa:fd:cb: 84:e2:6e:c2:bb:84:48:c4:6e:ff:89:4c:a2:76:03: da:36:bf:ac:d2:8d:35:27:8a:d4:34:51:9b:2f:2f: 77:ee:96:dd:9e:05:3a:1f:8a:81:67:cb:6e:cd:c9: 18:36:26:5c:33:18:92:d4:d2:53:3f:c7:e3:6b:0f: cb:1b:73:b7:76:1c:e1:95:ea:e0:ee:f3:d8:ae:ca: e1:53:c3:56:d0:ac:d2:5d:fe:73:45:51:40:2d:82: 3a:57:71:d9:b2:78:f2:bf:fb:f7:a4:e3:e8:c6:c3: 80:f2:ea:e8:9a:4e:1c:88:c0:36:43:31:0d:54:74: 86:b3:93:14:1c:95:80:90:20:ed:a2:67:67:3d:ee: bf:6d:74:8a:12:f0:ca:a9:73:79:31:33:c1:53:cb: c7:dd:f1:85:64:13:6d:3c:4f:9f:61:e3:4f:8e:21: 2b:e9:be:81:95:85:21:bc:3e:84:73:bc:b6:11:bf: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:45:61:2F:9D:B2:89:4F:E8:FB:11:42:CF:1A:4F:DA:1F:23:D8 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8a:50:b8:36:02:10:75:e3:4c:da:33:5c:5a:ed:93:b6:95: af:fa:3e:00:9b:f8:d5:f5:0f:90:ec:cf:04:b0:d8:83:45:8a: ba:30:7b:52:77:3b:fc:77:0a:36:73:2d:02:f6:db:c1:23:c3: 80:94:7c:f7:29:99:98:1a:f3:a9:0d:5b:b3:13:af:72:09:69: a3:67:e8:b1:b1:32:95:fd:48:33:f3:37:b5:68:45:e9:70:08: 03:bf:c3:0e:32:a7:43:1c:11:d5:56:f7:68:e7:08:a9:e2:08: 0b:0f:f7:2b:e2:04:b7:d6:a4:db:98:5e:bd:c3:82:7c:cf:d7: 56:36:b2:49:4b:31:3e:56:f7:c7:bf:05:22:6d:b0:3d:63:05: 01:46:e6:83:70:aa:26:c0:cc:91:fa:3f:75:a2:86:46:42:85: 2f:5b:c1:fb:70:b6:8e:51:83:b3:90:27:58:02:55:d0:e7:22: 82:9c:cf:c0:e6:00:24:77:88:0d:38:0d:a2:c2:8b:4d:1e:9b: 22:75:b0:8d:7c:d5:08:d3:da:d4:e0:b4:e8:c0:06:e9:df:d9: 21:db:99:75:1b:56:ee:62:86:25:b8:70:8b:d2:34:a2:cf:41: ef:e8:c6:4b:e1:8d:9e:52:f8:9a:2d:2d:58:e6:bc:22:82:6a: db:42:7c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjUwNzI0MTUxOTEzWhcNMjUwNzMxMTUxOTEzWjAYMRYwFAYD VQQDEw02ODgyNGVmMS00NjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50YkFXovRrGj5G3xat6JiEQg3Af+QbHN+HjAzndLom1TDCD3qHBMGjnfqpPa Q9YkcQL/kr0uHj5hubOji4wYBc0eEiCpVjH6/cuE4m7Cu4RIxG7/iUyidgPaNr+s 0o01J4rUNFGbLy937pbdngU6H4qBZ8tuzckYNiZcMxiS1NJTP8fjaw/LG3O3dhzh lerg7vPYrsrhU8NW0KzSXf5zRVFALYI6V3HZsnjyv/v3pOPoxsOA8uromk4ciMA2 QzENVHSGs5MUHJWAkCDtomdnPe6/bXSKEvDKqXN5MTPBU8vH3fGFZBNtPE+fYeNP jiEr6b6BlYUhvD6Ec7y2Eb+F9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq7RWEv nbKJT+j7EULPGk/aHyPYMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWilC4NgIQdeNM2jNcWu2TtpWv+j4Am/jV9Q+Q7M8EsNiDRYq6MHtS dzv8dwo2cy0C9tvBI8OAlHz3KZmYGvOpDVuzE69yCWmjZ+ixsTKV/Ugz8ze1aEXp cAgDv8MOMqdDHBHVVvdo5wip4ggLD/cr4gS31qTbmF69w4J8z9dWNrJJSzE+VvfH vwUibbA9YwUBRuaDcKomwMyR+j91ooZGQoUvW8H7cLaOUYOzkCdYAlXQ5yKCnM/A 5gAkd4gNOA2iwotNHpsidbCNfNUI09rU4LTowAbp39kh25l1G1buYoYluHCL0jSi z0Hv6MZL4Y2eUviaLS1Y5rwigmrbQnzi -----END CERTIFICATE-----Generated at Fri Jul 25 07:04:22 2025 by rpki-client