$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json) Hash identifier: e4mvgHifIz68IRwYwYhJiiLQ5fuow4naoKS2dS1teiM= Subject key identifier: B9:23:D9:AB:54:1E:8A:1B:D1:A6:7C:84:E5:2F:B2:29:B7:30:D3:D4 Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft Manifest number: 0353 Signing time: Wed 04 Jun 2025 22:17:05 +0000 Manifest this update: Wed 04 Jun 2025 22:17:05 +0000 Manifest next update: Wed 11 Jun 2025 22:17:05 +0000 Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: mlYFj/c+rgr8JCliTK36LN1SY5/GgIXBFfuEG1zYFTQ=) 2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Validity Not Before: Jun 4 22:17:05 2025 GMT Not After : Jun 11 22:17:05 2025 GMT Subject: CN=6840c5e1-0fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:47:87:71:a9:f4:28:67:03:f8:13:26:3b: 70:3e:2e:19:f2:af:cf:e2:c8:38:04:c7:3e:43:d7: 6c:20:43:15:7a:5e:be:cd:15:d7:99:27:86:3a:05: a9:ba:38:94:c3:14:a3:86:75:8f:39:86:fb:bc:86: ea:28:3b:7c:7b:97:96:10:54:08:ac:1c:d5:4a:9c: 76:87:23:11:c2:c7:28:78:25:02:8a:24:89:f9:a1: c6:41:81:8c:ec:1f:e9:92:07:9c:a3:03:5b:71:34: aa:ae:02:c2:42:99:8e:0c:fd:ee:46:ea:45:a4:b5: 3f:ec:0e:3d:ad:e3:5b:36:d0:62:73:b2:95:ef:e8: 27:90:9a:8f:18:91:36:69:c8:0d:8c:2b:f6:02:17: a0:72:e7:79:23:81:e5:c1:d7:5e:73:f7:17:0c:d9: 50:f1:af:7f:21:05:ef:50:35:60:bc:34:d4:42:3b: 07:43:33:1a:80:69:68:4d:2d:9c:02:c4:b2:78:25: 2c:3f:90:36:98:90:e1:ae:a3:50:5a:66:b5:1e:48: f6:89:1f:3d:96:05:cc:03:54:13:d0:23:6e:ce:06: ee:90:02:e1:ee:7d:a7:b5:75:58:b2:9d:48:75:c1: 52:29:95:b7:bf:2b:d2:88:89:70:b1:56:95:20:d5: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:23:D9:AB:54:1E:8A:1B:D1:A6:7C:84:E5:2F:B2:29:B7:30:D3:D4 X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:42:f5:a5:03:22:fa:8e:59:f2:a3:8d:03:e0:ea:15:3f:8f: 8f:cd:c4:0a:3d:7e:d0:0b:1a:cb:a3:1b:9a:ae:85:9e:36:10: 19:fb:a4:0b:72:3b:40:63:4c:eb:c9:29:1d:2f:fb:a5:41:a8: 17:00:31:c5:52:25:a2:35:54:23:03:f5:eb:b5:c1:50:44:84: ff:b9:28:ec:fe:0d:05:a8:b6:d8:2e:0d:44:85:15:35:7b:34: 8e:21:90:3a:be:69:5c:51:50:44:59:b1:36:69:af:e8:67:42: 44:28:f7:6d:46:92:3c:34:e1:a3:a2:e1:f7:64:76:8a:79:c6: 70:97:3a:84:18:49:36:8b:bf:95:74:96:a7:60:99:f4:88:d7: 23:bc:ed:31:9a:60:49:9e:25:6b:13:fc:65:ad:b1:e3:40:76: 49:fd:5b:8d:fc:52:e2:96:64:c5:d9:3d:fd:b3:d9:73:aa:ed: dd:fd:86:52:2c:94:2c:14:d0:48:f2:89:a8:b6:fe:02:7f:c4: b6:d8:6a:a4:11:4d:fb:bc:a0:38:b7:c3:25:c7:15:24:99:ad: a1:28:b8:80:1e:c5:0a:18:56:25:7f:ad:84:8f:b7:f0:85:bc: d5:23:98:ff:4b:c5:1d:3f:ce:64:32:28:dc:9f:8b:34:54:98: 83:66:72:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjUwNjA0MjIxNzA1WhcNMjUwNjExMjIxNzA1WjAYMRYwFAYD VQQDEw02ODQwYzVlMS0wZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jJHh3Gp9ChnA/gTJjtwPi4Z8q/P4sg4BMc+Q9dsIEMVel6+zRXXmSeGOgWp ujiUwxSjhnWPOYb7vIbqKDt8e5eWEFQIrBzVSpx2hyMRwscoeCUCiiSJ+aHGQYGM 7B/pkgecowNbcTSqrgLCQpmODP3uRupFpLU/7A49reNbNtBic7KV7+gnkJqPGJE2 acgNjCv2Ahegcud5I4Hlwddec/cXDNlQ8a9/IQXvUDVgvDTUQjsHQzMagGloTS2c AsSyeCUsP5A2mJDhrqNQWma1Hkj2iR89lgXMA1QT0CNuzgbukALh7n2ntXVYsp1I dcFSKZW3vyvSiIlwsVaVINUV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkj2atU Hoob0aZ8hOUvsim3MNPUMB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9CRjFFNzExOEJBQzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1Vv cnFRaExNN2JjcFlUcVpGVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBQvWlAyL6jlnyo40D4OoVP4+PzcQKPX7QCxrLoxuaroWeNhAZ+6QL cjtAY0zrySkdL/ulQagXADHFUiWiNVQjA/XrtcFQRIT/uSjs/g0FqLbYLg1EhRU1 ezSOIZA6vmlcUVBEWbE2aa/oZ0JEKPdtRpI8NOGjouH3ZHaKecZwlzqEGEk2i7+V dJanYJn0iNcjvO0xmmBJniVrE/xlrbHjQHZJ/VuN/FLilmTF2T39s9lzqu3d/YZS LJQsFNBI8omotv4Cf8S22GqkEU37vKA4t8MlxxUkma2hKLiAHsUKGFYlf62Ej7fw hbzVI5j/S8UdP85kMijcn4s0VJiDZnIl -----END CERTIFICATE-----Generated at Thu Jun 5 19:15:33 2025 by rpki-client