$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: KYOqcYxoh5zog8XMGXVUnz0qDzg5MMFjEN1F9gLWHbY= Subject key identifier: 5B:20:F0:FE:EA:18:B9:13:90:1C:08:B8:80:A4:E2:C8:8E:9D:9F:AC Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 075B Signing time: Fri 30 May 2025 21:52:38 +0000 Manifest this update: Fri 30 May 2025 21:52:37 +0000 Manifest next update: Fri 06 Jun 2025 21:52:37 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: 7I1xleq8EwYxrAnfEjJjky85RjY4aOYBnL9Ev1z/IRs=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: 3i/bsnBVCwTkaRt5VNWAWhHJ6/+t7BMJDdGcwpMXiuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: May 30 21:52:37 2025 GMT Not After : Jun 6 21:52:37 2025 GMT Subject: CN=683a28a6-21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:c3:c8:60:4b:9e:fa:b3:94:36:a0:be:65: 7c:35:41:c6:74:38:1c:72:b0:a3:34:de:23:a5:30: 2e:78:75:22:31:0b:e2:aa:08:fe:59:89:27:65:ea: dd:18:2e:86:ff:bd:6a:74:86:f2:b7:4b:f9:d3:9d: fa:61:1b:c6:93:d4:40:9c:d8:ed:02:53:39:d7:66: cd:b7:2e:0e:0b:67:59:74:2d:fc:00:61:78:f4:f4: 55:e2:10:41:28:c4:04:e3:7d:bd:70:42:0d:52:ab: 7d:9e:8c:f5:a2:a1:f4:3c:27:db:18:f6:4a:a8:cb: af:00:aa:ad:db:2b:32:13:c4:00:3b:df:c1:23:63: 38:ea:6b:68:26:12:3b:3a:53:0e:4b:b1:57:65:2c: f2:84:24:d6:eb:ca:ad:5a:4e:4a:ba:a8:a1:e2:90: 5d:4e:76:d4:a6:6b:04:3a:c0:a9:7d:83:8a:16:3a: c3:14:5f:25:e8:95:ae:85:8f:7b:7b:0e:7c:42:f8: b7:88:7d:73:4d:c1:1f:51:9a:46:75:f4:eb:1d:94: a3:89:9e:57:7e:b0:52:7f:b1:1c:9d:65:b9:b6:26: 04:d7:b4:41:60:ba:64:a3:f3:38:c1:7e:6a:d9:39: 85:29:a8:c3:7f:b5:40:66:e2:f2:e3:e8:de:71:bf: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:20:F0:FE:EA:18:B9:13:90:1C:08:B8:80:A4:E2:C8:8E:9D:9F:AC X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:11:96:6f:1d:24:45:a8:99:a3:1f:3b:a0:15:cf:63:72:f6: e7:97:70:51:83:cf:27:18:86:d9:07:93:10:47:55:82:ac:2f: 66:32:df:89:65:37:96:ab:03:ff:20:00:70:83:44:b7:3b:88: 24:85:e7:0b:6d:ad:c3:ae:70:85:2a:01:54:d0:97:d5:5d:67: d5:33:56:4c:f0:e4:c8:fa:fe:d0:b8:69:3c:61:dc:1a:38:b2: bd:6d:c4:6e:8f:60:a8:92:5a:a7:f1:42:c3:14:3e:ad:7d:ea: 96:7d:af:2a:40:8f:48:6c:0e:71:30:3b:cf:87:f2:cf:e2:78: df:c0:71:04:f7:45:78:f3:c9:2c:ae:5f:d6:d7:98:6e:98:11: 33:cb:41:a5:e2:ef:f0:ec:f5:8a:63:ac:52:95:e8:be:47:95: 1e:ff:26:cf:f1:26:e9:0f:9d:a2:e9:b0:39:29:78:2f:fc:70: 30:d6:da:9d:16:84:61:e4:56:b8:68:34:50:58:9a:14:58:ab: 36:c0:b9:63:b1:14:fd:e2:73:6d:1f:75:a3:a1:c8:be:55:05: 0c:f5:04:8e:8f:19:ed:d6:ef:0c:a1:ff:6c:00:54:91:fa:9c: c1:52:66:e7:5b:b1:52:7b:c4:5f:c3:c6:af:6a:30:18:53:3f: 92:be:42:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUwNTMwMjE1MjM3WhcNMjUwNjA2MjE1MjM3WjAYMRYwFAYD VQQDEw02ODNhMjhhNi0yMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttjDyGBLnvqzlDagvmV8NUHGdDgccrCjNN4jpTAueHUiMQviqgj+WYknZerd GC6G/71qdIbyt0v50536YRvGk9RAnNjtAlM512bNty4OC2dZdC38AGF49PRV4hBB KMQE4329cEINUqt9noz1oqH0PCfbGPZKqMuvAKqt2ysyE8QAO9/BI2M46mtoJhI7 OlMOS7FXZSzyhCTW68qtWk5Kuqih4pBdTnbUpmsEOsCpfYOKFjrDFF8l6JWuhY97 ew58Qvi3iH1zTcEfUZpGdfTrHZSjiZ5XfrBSf7EcnWW5tiYE17RBYLpko/M4wX5q 2TmFKajDf7VAZuLy4+jecb/uYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsg8P7q GLkTkBwIuICk4siOnZ+sMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJEZZvHSRFqJmjHzugFc9jcvbnl3BRg88nGIbZB5MQR1WCrC9mMt+J ZTeWqwP/IABwg0S3O4gkhecLba3DrnCFKgFU0JfVXWfVM1ZM8OTI+v7QuGk8Ydwa OLK9bcRuj2Coklqn8ULDFD6tfeqWfa8qQI9IbA5xMDvPh/LP4njfwHEE90V488ks rl/W15humBEzy0Gl4u/w7PWKY6xSlei+R5Ue/ybP8SbpD52i6bA5KXgv/HAw1tqd FoRh5Fa4aDRQWJoUWKs2wLljsRT94nNtH3Wjoci+VQUM9QSOjxnt1u8Mof9sAFSR +pzBUmbnW7FSe8Rfw8avajAYUz+SvkJm -----END CERTIFICATE-----Generated at Sat May 31 17:39:20 2025 by rpki-client