$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: bLG6VujnpEStXj+mXdyJBKDyDtPypgTC3zf/oZlE3Wk= Subject key identifier: E2:99:6D:6C:26:60:FC:33:A8:A5:8C:33:F3:22:96:0F:65:7F:56:31 Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 08CE Signing time: Fri 30 May 2025 20:41:16 +0000 Manifest this update: Fri 30 May 2025 20:41:15 +0000 Manifest next update: Fri 06 Jun 2025 20:41:15 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: YuxA1o/wz5xu+JOzLlYRO0gS9nr+O8Q5lA+lFGZUKz4=) 2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=) 3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455, serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: May 30 20:41:15 2025 GMT Not After : Jun 6 20:41:15 2025 GMT Subject: CN=683a17eb-2302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:f7:93:4c:50:28:f5:aa:42:9c:a4:d3:92: 97:4e:bd:55:85:2e:b5:60:87:ca:81:a2:97:d6:87: 4f:21:b8:bc:0e:66:74:c8:6f:95:a3:bc:55:d9:19: 5d:f8:ed:bb:1b:2b:01:d5:14:cf:1e:1f:6c:aa:28: 78:45:c3:7e:43:b5:8e:8a:aa:83:21:ed:f6:bf:a5: d5:cb:5c:82:c6:03:78:47:16:08:d2:32:f2:1d:6c: 06:f9:04:88:88:49:69:e3:c7:9c:cd:40:dc:8f:8e: 80:5f:3b:c0:47:51:aa:10:49:82:14:b8:ff:23:97: 9b:58:9b:d3:27:ad:a9:0d:bb:81:64:40:5e:54:a1: 62:6a:1b:c2:7d:a1:02:45:e0:ec:bf:3f:ba:45:4e: c1:90:33:48:28:d3:40:21:48:7a:b8:9d:ff:5c:f7: 22:f2:1f:a0:16:88:0b:64:1d:fb:fe:c9:66:6e:b8: 3b:b4:e1:d6:aa:63:84:99:45:2f:de:e8:a7:b9:e6: 3f:3a:eb:ad:60:2f:6a:c0:c1:6b:0f:57:d2:e5:df: 18:8c:8a:9c:f0:bf:ce:00:83:2c:76:30:75:31:c3: 30:73:ab:9d:da:80:04:4c:e7:bb:f8:b8:de:24:0d: f0:a6:cf:6c:25:18:b4:cd:39:9f:68:8e:76:cd:d7: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:99:6D:6C:26:60:FC:33:A8:A5:8C:33:F3:22:96:0F:65:7F:56:31 X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a4:dd:e9:44:3a:b0:13:ca:06:4d:c1:c6:7b:dd:30:a3:ad: f1:59:1e:f0:e9:6c:d7:74:c9:90:e9:2e:96:e8:5e:61:7f:7d: 3f:5a:5b:4e:e1:d7:a9:45:63:3c:bf:0f:67:c9:60:26:a8:40: f6:1a:9c:a8:b3:b3:33:22:c7:80:e9:61:e0:29:06:28:0a:e9: 7e:46:d0:2f:ec:d4:31:9a:ec:d8:b2:b7:f8:da:7a:bb:7b:61: cc:8d:da:6b:d4:fc:2e:2b:45:b6:27:d1:d8:3f:66:f9:7e:d4: 7e:c9:c7:d2:73:4e:13:36:5d:08:46:6e:78:ba:cf:10:67:c5: 19:4c:2f:c4:ff:b4:a8:0e:d8:77:ca:9d:4a:bd:74:66:4a:f9: ef:bf:b7:71:11:38:fe:a2:77:66:1a:f9:fb:ff:cc:fd:22:ed: ab:09:1e:30:e4:1b:cb:38:e9:b8:83:ac:6e:90:e6:12:98:cf: 31:99:e1:0f:ea:a5:61:53:0e:3b:a7:10:c0:47:93:15:f9:49: 8f:79:e7:8e:de:95:f1:8d:c3:9c:ab:50:c4:e2:84:33:e8:ce: 8a:fc:1c:a2:02:3a:6e:db:c2:02:1f:3e:5f:4d:6a:25:93:64: 3c:56:fe:b2:fd:7b:da:ad:4a:c7:57:c1:46:51:92:b8:a9:c1: ed:94:1b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjUwNTMwMjA0MTE1WhcNMjUwNjA2MjA0MTE1WjAYMRYwFAYD VQQDEw02ODNhMTdlYi0yMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwD3k0xQKPWqQpyk05KXTr1VhS61YIfKgaKX1odPIbi8DmZ0yG+Vo7xV2Rld +O27GysB1RTPHh9sqih4RcN+Q7WOiqqDIe32v6XVy1yCxgN4RxYI0jLyHWwG+QSI iElp48eczUDcj46AXzvAR1GqEEmCFLj/I5ebWJvTJ62pDbuBZEBeVKFiahvCfaEC ReDsvz+6RU7BkDNIKNNAIUh6uJ3/XPci8h+gFogLZB37/slmbrg7tOHWqmOEmUUv 3uinueY/OuutYC9qwMFrD1fS5d8YjIqc8L/OAIMsdjB1McMwc6ud2oAETOe7+Lje JA3wps9sJRi0zTmfaI52zdenQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKZbWwm YPwzqKWMM/Milg9lf1YxMB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTpN3pRDqwE8oGTcHGe90wo63xWR7w6WzXdMmQ6S6W6F5hf30/WltO 4depRWM8vw9nyWAmqED2Gpyos7MzIseA6WHgKQYoCul+RtAv7NQxmuzYsrf42nq7 e2HMjdpr1PwuK0W2J9HYP2b5ftR+ycfSc04TNl0IRm54us8QZ8UZTC/E/7SoDth3 yp1KvXRmSvnvv7dxETj+ondmGvn7/8z9Iu2rCR4w5BvLOOm4g6xukOYSmM8xmeEP 6qVhUw47pxDAR5MV+UmPeeeO3pXxjcOcq1DE4oQz6M6K/ByiAjpu28ICHz5fTWol k2Q8Vv6y/XvarUrHV8FGUZK4qcHtlBtK -----END CERTIFICATE-----Generated at Sat May 31 15:40:35 2025 by rpki-client