$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: 3fcYCElmtohhUfNvK7z9cGHRLmPkGajpiUhdUzl69hg= Subject key identifier: D7:FE:15:F3:94:1F:22:B6:B6:AD:A4:79:EF:54:E7:35:C0:1C:FB:7D Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 0704 Signing time: Fri 30 May 2025 22:07:49 +0000 Manifest this update: Fri 30 May 2025 22:07:48 +0000 Manifest next update: Fri 06 Jun 2025 22:07:48 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: L7TSNvADgRGlULsF3iAPw2B2DEqsmB2UyrilQQ2Iavs=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: May 30 22:07:48 2025 GMT Not After : Jun 6 22:07:48 2025 GMT Subject: CN=683a2c34-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:d4:ba:68:ec:5b:e6:fc:8b:12:9a:3e:44: 7f:eb:d7:b8:5e:ea:99:16:95:16:1f:f4:48:c4:2e: f9:2b:32:bd:c4:b3:89:2f:17:f1:ce:4a:af:7e:2d: 23:50:6b:0d:11:89:7c:e2:5e:af:61:e4:7f:b3:4b: e2:09:bc:43:92:02:cb:43:fc:3b:a9:46:ab:ed:f1: 2f:6a:1b:89:8a:64:08:9c:3a:34:63:cf:c6:7e:91: de:db:ae:3d:20:79:96:52:a7:fe:e2:37:03:9b:ac: f5:7a:a9:32:30:ac:4a:8e:62:f4:ab:b8:ff:ae:b9: 61:0a:c7:21:42:c2:a4:02:cf:26:1f:6d:a5:96:79: 56:dd:94:c2:26:e1:9c:02:83:da:fa:f8:c6:1f:48: 6a:af:b7:12:ac:79:36:1f:97:83:b5:bb:3a:7e:12: 7c:f8:14:ce:0b:c3:b9:0f:4e:de:9f:3e:95:27:67: 0c:c2:7a:90:be:24:b6:06:01:72:01:19:cf:7a:de: a9:77:2c:5b:76:13:36:65:58:43:30:9a:7c:3f:9a: 16:15:d2:19:d7:9a:d6:c2:fc:8e:89:c5:28:df:eb: 61:9f:cb:f8:10:08:b1:34:a3:62:8d:c0:85:e4:bb: c7:f9:6c:36:55:a8:46:c3:4a:e5:60:3e:ad:d4:f0: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FE:15:F3:94:1F:22:B6:B6:AD:A4:79:EF:54:E7:35:C0:1C:FB:7D X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ae:28:32:35:8d:df:f5:6e:c5:2d:1d:ad:4d:e7:20:c5:22: 76:e6:62:5e:3f:d0:16:fc:a5:a1:c3:2d:d8:c5:02:6c:f0:20: d4:7d:f8:07:68:4c:4c:66:ce:ba:3d:a0:5e:80:85:df:2a:44: 91:5f:2b:d3:3c:33:7b:5a:fa:eb:2e:3a:da:ab:46:dc:22:4d: 75:3d:71:47:7a:00:b4:94:9a:1b:b8:b3:67:45:18:f3:aa:5b: 58:8c:46:42:5a:d4:ed:fe:8e:af:90:22:e5:c9:11:0e:b7:ac: 63:68:b6:7f:0d:f4:3a:02:3b:89:6a:bd:df:48:a5:13:da:11: 7d:38:d7:19:97:b7:b6:33:8e:ef:9b:b7:53:8f:78:21:70:21: 22:ba:82:44:93:d6:0e:41:32:bf:47:58:8a:b1:25:9f:e4:c8: 75:7c:0d:2a:89:74:d0:95:c5:9c:ae:b9:bf:8a:79:12:76:1d: ad:56:6c:28:fe:77:40:8d:42:47:ac:c3:92:bb:fb:ca:8e:c3: 2a:af:1f:25:65:de:66:fa:b8:81:7d:77:b7:a2:93:44:9c:e3: 9d:9c:0f:73:c0:f5:f7:c4:19:fa:e4:3e:42:ea:7e:e6:c8:c2: 68:38:78:69:13:91:5d:18:8e:36:34:7a:92:a7:64:03:73:15: 82:11:35:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjUwNTMwMjIwNzQ4WhcNMjUwNjA2MjIwNzQ4WjAYMRYwFAYD VQQDEw02ODNhMmMzNC0xYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XTUumjsW+b8ixKaPkR/69e4XuqZFpUWH/RIxC75KzK9xLOJLxfxzkqvfi0j UGsNEYl84l6vYeR/s0viCbxDkgLLQ/w7qUar7fEvahuJimQInDo0Y8/GfpHe2649 IHmWUqf+4jcDm6z1eqkyMKxKjmL0q7j/rrlhCschQsKkAs8mH22llnlW3ZTCJuGc AoPa+vjGH0hqr7cSrHk2H5eDtbs6fhJ8+BTOC8O5D07enz6VJ2cMwnqQviS2BgFy ARnPet6pdyxbdhM2ZVhDMJp8P5oWFdIZ15rWwvyOicUo3+thn8v4EAixNKNijcCF 5LvH+Ww2VahGw0rlYD6t1PBIbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf+FfOU HyK2tq2kee9U5zXAHPt9MB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANrigyNY3f9W7FLR2tTecgxSJ25mJeP9AW/KWhwy3YxQJs8CDUffgH aExMZs66PaBegIXfKkSRXyvTPDN7WvrrLjraq0bcIk11PXFHegC0lJobuLNnRRjz qltYjEZCWtTt/o6vkCLlyREOt6xjaLZ/DfQ6AjuJar3fSKUT2hF9ONcZl7e2M47v m7dTj3ghcCEiuoJEk9YOQTK/R1iKsSWf5Mh1fA0qiXTQlcWcrrm/inkSdh2tVmwo /ndAjUJHrMOSu/vKjsMqrx8lZd5m+riBfXe3opNEnOOdnA9zwPX3xBn65D5C6n7m yMJoOHhpE5FdGI42NHqSp2QDcxWCETVU -----END CERTIFICATE-----Generated at Sat May 31 16:34:05 2025 by rpki-client