$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: vKnsvfziF4EFDxf70bI2Dt42lAmekXRFprhkaJjZmog= Subject key identifier: 9C:4E:FF:15:FE:59:6E:6A:EC:4E:3C:A1:86:48:ED:15:3F:B5:0F:9D Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 34D2 Signing time: Fri 18 Jul 2025 15:22:15 +0000 Manifest this update: Fri 18 Jul 2025 15:22:14 +0000 Manifest next update: Fri 25 Jul 2025 15:22:14 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: jSUTTdGpZqnRiG01UzIrTNDVQ4Ja82Gdbl/rONRmQx8=) 2: 137AB7E8556211F08830E141C4F9AE02.roa (hash: J5ujZc+vMwHlknZdwOT8szkE8i/s5cFV08Bj4/0BHsw=) 3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=) 4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=) 5: 6048A87260EE11F08B648340C4F9AE02.roa (hash: jCS4XU1Br6/cxzRct37zyigL7I4mIqsBULgm77QNWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Jul 18 15:22:14 2025 GMT Not After : Jul 25 15:22:14 2025 GMT Subject: CN=687a66a7-d2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:9d:a3:6e:60:3a:f8:09:dc:80:d9:8c:01: 16:e8:e4:5e:62:58:c4:5a:23:27:d4:93:a7:15:3f: 87:c5:a1:06:a4:3c:cb:27:9a:f0:ae:bd:ff:c2:f3: 2c:84:91:11:04:63:e5:e4:5a:00:e8:9e:47:95:95: fe:b3:56:1c:86:51:5e:ee:1e:9e:66:68:26:86:49: 36:4c:fc:04:16:8c:db:5b:ee:34:61:bb:90:6e:c0: f5:62:16:7c:15:59:da:bb:0f:91:e5:d6:ea:9c:4d: 3b:9a:38:06:4b:99:90:af:c0:3d:0c:10:29:aa:d6: 1c:76:86:25:4b:83:7e:6f:35:22:fd:91:14:95:51: bc:ab:22:32:9a:d9:4b:a3:84:49:7f:bf:3a:e7:6e: 18:bb:b5:01:41:3d:b6:fc:76:d5:14:87:03:6d:a3: 4e:5d:61:8c:6b:7c:3e:c1:f3:1f:29:2a:e1:27:27: b6:be:b9:9d:97:7c:11:75:75:a7:2a:0a:ad:7f:fc: 52:96:20:de:81:42:56:12:40:17:a1:c2:0f:34:d4: eb:a2:24:04:51:22:34:8a:68:fa:8d:b8:70:40:ea: 94:02:dd:fd:a1:d4:b4:78:87:9b:df:bd:63:9c:b9: c2:7a:11:ff:b1:1a:f8:9d:0b:ec:78:ea:ff:cd:7f: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:FF:15:FE:59:6E:6A:EC:4E:3C:A1:86:48:ED:15:3F:B5:0F:9D X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c8:ba:f3:25:e5:3a:81:b0:6e:32:55:73:f1:dc:8d:db:71: 1d:af:4e:59:91:ad:48:b2:06:86:65:8b:ab:c3:bf:cd:c8:36: af:4a:30:b4:18:1b:a0:2a:35:96:2c:dc:db:61:08:16:f7:fe: 79:57:99:34:21:f9:ee:84:43:25:26:8e:1b:ca:60:34:33:74: cb:8a:b2:e0:16:97:5e:c6:43:b1:ec:a4:51:8c:23:0d:da:75: 34:79:d4:b9:c3:16:3e:78:78:cf:c5:e2:e4:75:75:10:66:f2: fd:df:2c:5e:79:ec:6a:4f:0b:d5:bd:c6:14:73:2e:9f:ef:9f: 2e:44:fc:eb:7b:0d:bf:92:9c:6e:15:29:b1:4a:35:01:a5:a4: cd:59:b7:aa:9b:2e:6e:ef:16:cd:10:47:5a:52:e3:2e:de:bd: 95:c7:4e:dc:c3:d7:35:a8:a3:78:1c:2e:b3:67:8b:50:73:b7: 7e:0f:7a:b5:c9:e2:6d:10:18:d6:70:c7:97:65:86:f4:53:09: 22:00:31:4c:62:90:8c:01:d4:63:36:c0:a3:51:da:d3:cf:d7: 5b:71:44:5e:a8:0b:0e:cf:94:a3:9a:e0:7a:27:66:c7:f3:08: 89:b4:62:a2:9f:28:a4:eb:c0:49:be:25:ce:2d:4c:28:1e:76: cf:1f:19:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUwNzE4MTUyMjE0WhcNMjUwNzI1MTUyMjE0WjAYMRYwFAYD VQQDEw02ODdhNjZhNy1kMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWydo25gOvgJ3IDZjAEW6OReYljEWiMn1JOnFT+HxaEGpDzLJ5rwrr3/wvMs hJERBGPl5FoA6J5HlZX+s1YchlFe7h6eZmgmhkk2TPwEFozbW+40YbuQbsD1YhZ8 FVnauw+R5dbqnE07mjgGS5mQr8A9DBApqtYcdoYlS4N+bzUi/ZEUlVG8qyIymtlL o4RJf786524Yu7UBQT22/HbVFIcDbaNOXWGMa3w+wfMfKSrhJye2vrmdl3wRdXWn Kgqtf/xSliDegUJWEkAXocIPNNTroiQEUSI0imj6jbhwQOqUAt39odS0eIeb371j nLnCehH/sRr4nQvseOr/zX86NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxO/xX+ WW5q7E48oYZI7RU/tQ+dMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0yLrzJeU6gbBuMlVz8dyN23Edr05Zka1IsgaGZYurw7/NyDavSjC0 GBugKjWWLNzbYQgW9/55V5k0IfnuhEMlJo4bymA0M3TLirLgFpdexkOx7KRRjCMN 2nU0edS5wxY+eHjPxeLkdXUQZvL93yxeeexqTwvVvcYUcy6f758uRPzrew2/kpxu FSmxSjUBpaTNWbeqmy5u7xbNEEdaUuMu3r2Vx07cw9c1qKN4HC6zZ4tQc7d+D3q1 yeJtEBjWcMeXZYb0UwkiADFMYpCMAdRjNsCjUdrTz9dbcUReqAsOz5SjmuB6J2bH 8wiJtGKinyik68BJviXOLUwoHnbPHxnt -----END CERTIFICATE-----Generated at Sun Jul 20 10:06:49 2025 by rpki-client