$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: XtqQbMCgmpLl4K8y+gnnPLppFIxA/1aqeYz57/MAyBo= Subject key identifier: 9F:77:38:B2:E9:50:EB:CA:8E:9A:97:F2:4E:F8:B9:EA:B4:60:EE:C1 Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 0406 Signing time: Sat 19 Jul 2025 00:49:15 +0000 Manifest this update: Sat 19 Jul 2025 00:49:15 +0000 Manifest next update: Sat 26 Jul 2025 00:49:15 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: +4+gVGkrEHW16JCfyopO7MJ+pGOgnT9iJCfeXLnmTtA=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: BND24LJDq2vvWZ+xp3RlYNXBh82urnxKrrVdHSwL4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Jul 19 00:49:15 2025 GMT Not After : Jul 26 00:49:15 2025 GMT Subject: CN=687aeb8b-a51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:32:df:fa:93:dd:6d:3e:b1:6b:1c:13:71: cc:0c:84:43:a5:2c:07:ac:a1:fe:21:5b:e8:37:b2: 7b:d4:eb:25:dd:bf:7b:f7:bf:1d:e8:c7:48:7b:ac: b4:ff:20:79:56:30:33:64:e6:4b:1f:a6:b3:50:77: 57:c9:da:e9:65:f6:64:51:92:03:e1:2b:7d:cd:29: 7f:1e:7c:9c:5c:df:8d:f1:71:5b:12:4f:4b:f6:76: d7:18:97:8b:44:7b:d3:71:70:dd:3e:ff:50:03:c2: 3d:89:22:b1:6c:f3:40:ff:8d:c5:39:09:6b:9e:3c: ad:66:b6:f3:ac:95:7c:42:d2:e9:44:ce:e4:00:8c: 12:0b:bb:bc:11:f0:70:36:3b:51:97:d1:ea:19:d9: 2f:da:07:d5:55:d7:0f:19:c4:e5:55:97:5e:36:c0: 34:9d:6b:e8:26:66:14:05:ad:6a:5a:7b:c1:22:51: 2d:ff:77:ab:7a:a9:0e:d4:da:6e:79:6d:d1:79:da: e6:69:e7:05:d8:10:9f:5a:d2:63:6a:5b:62:d1:e4: 6b:8f:5f:c6:3a:8f:12:4d:34:f6:62:e7:b4:fb:c5: 3f:46:d0:db:ed:34:e9:f9:52:45:47:f1:31:46:93: 04:73:fb:6d:dc:93:a2:0f:ba:41:f3:50:95:60:b1: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:77:38:B2:E9:50:EB:CA:8E:9A:97:F2:4E:F8:B9:EA:B4:60:EE:C1 X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:10:67:75:d7:84:76:0e:39:af:a0:9f:f1:9a:7d:85:af: b4:7b:86:b7:72:2e:cd:dd:6d:74:fe:12:cf:36:99:3a:b0:e0: e1:76:0a:dd:12:f4:43:5c:54:6c:1f:a0:cf:8a:15:f2:ff:2c: 7d:2d:2d:7c:bc:1a:07:db:bd:61:82:dd:f6:11:8b:92:7d:d9: 74:f3:a6:bb:da:19:98:18:87:6f:c7:69:88:d7:db:48:7c:26: 08:dc:4b:c3:99:b9:ee:77:2a:e7:4c:12:fa:15:00:63:b1:14: d1:ea:45:8b:59:ab:df:44:02:64:c8:45:3a:d3:e7:5a:ed:e8: bf:12:63:4f:cd:ce:a4:ff:fb:6e:63:f3:cb:fd:0c:40:62:c1: e7:f5:50:f2:59:9e:fc:75:5f:d6:45:8d:e6:bc:f3:9b:aa:a4: 1f:cf:43:cf:68:8a:88:f9:16:d6:e2:32:cf:26:5a:b5:ac:71: d3:59:1a:a4:a1:d4:09:a4:e9:44:aa:6f:e1:36:c5:09:41:4d: 43:66:05:d9:c9:7c:7f:a8:e5:b2:f1:c2:08:a8:17:19:1c:d1: d3:4d:96:e9:1e:97:29:61:86:46:10:7a:f5:21:79:01:d6:d7: 63:d4:0d:3b:81:8e:9c:07:ae:cd:0c:b9:42:99:48:a3:6c:63: d6:6d:31:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUwNzE5MDA0OTE1WhcNMjUwNzI2MDA0OTE1WjAYMRYwFAYD VQQDEw02ODdhZWI4Yi1hNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIwy3/qT3W0+sWscE3HMDIRDpSwHrKH+IVvoN7J71Osl3b97978d6MdIe6y0 /yB5VjAzZOZLH6azUHdXydrpZfZkUZID4St9zSl/HnycXN+N8XFbEk9L9nbXGJeL RHvTcXDdPv9QA8I9iSKxbPNA/43FOQlrnjytZrbzrJV8QtLpRM7kAIwSC7u8EfBw NjtRl9HqGdkv2gfVVdcPGcTlVZdeNsA0nWvoJmYUBa1qWnvBIlEt/3ereqkO1Npu eW3RedrmaecF2BCfWtJjalti0eRrj1/GOo8STTT2Yue0+8U/RtDb7TTp+VJFR/Ex RpMEc/tt3JOiD7pB81CVYLE+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ93OLLp UOvKjpqX8k74ueq0YO7BMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADFhBnddeEdg45r6Cf8Zp9ha+0e4a3ci7N3W10/hLPNpk6sODhdgrd EvRDXFRsH6DPihXy/yx9LS18vBoH271hgt32EYuSfdl086a72hmYGIdvx2mI19tI fCYI3EvDmbnudyrnTBL6FQBjsRTR6kWLWavfRAJkyEU60+da7ei/EmNPzc6k//tu Y/PL/QxAYsHn9VDyWZ78dV/WRY3mvPObqqQfz0PPaIqI+RbW4jLPJlq1rHHTWRqk odQJpOlEqm/hNsUJQU1DZgXZyXx/qOWy8cIIqBcZHNHTTZbpHpcpYYZGEHr1IXkB 1tdj1A07gY6cB67NDLlCmUijbGPWbTEP -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:50 2025 by rpki-client