$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: YociBVaEd9dOWs9rqfMo9Z7QuqD2gkhMbngE69F5Ai0= Subject key identifier: 52:C5:EC:9E:DC:D4:C3:5C:90:D5:BB:BD:4A:E7:05:BD:27:AC:44:C3 Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 07B7 Signing time: Fri 30 May 2025 21:25:27 +0000 Manifest this update: Fri 30 May 2025 21:25:27 +0000 Manifest next update: Fri 06 Jun 2025 21:25:27 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: 16sVrDKfX5FBe3ssCT+xGNe9NMvAj1rzRxaTK6MAX3k=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: qdn4Rx6KYVWRsCXtm49GAL/TWxFXG2srvh1gEG2saCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: May 30 21:25:27 2025 GMT Not After : Jun 6 21:25:27 2025 GMT Subject: CN=683a2247-7510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:34:01:cc:1c:6f:8d:b8:b6:86:d5:b7:d6: 2d:e6:7e:be:c5:94:a9:ce:5f:cc:c5:1d:ed:63:9c: d0:6d:ec:2a:fd:77:bd:6b:c6:40:a2:b6:1b:b1:76: 4a:73:80:96:20:0d:06:9a:35:01:50:69:b0:60:99: db:ae:80:02:76:8e:1b:94:08:48:25:67:55:e4:81: a8:17:a5:60:2f:82:f8:12:d7:6c:fa:02:06:b7:fd: 77:80:35:9f:a9:de:ac:3d:0e:d2:98:b6:83:23:3d: a3:5f:9e:d9:ab:a5:83:79:7e:21:51:a1:7e:12:6b: d4:1a:82:2c:fd:d7:41:b5:e3:3c:b0:76:02:1b:62: 72:64:74:4f:e5:bc:6c:68:47:b3:13:72:9a:72:a3: 95:46:51:01:60:04:b9:53:db:c1:7b:95:e3:6a:ab: ff:7b:a5:bb:ef:32:d7:a8:cb:f6:df:af:53:b0:c3: 57:05:44:8e:51:16:45:a3:92:fa:37:21:82:e8:5f: 06:67:41:41:e4:00:fa:3d:b6:8e:37:c7:a8:4f:e3: 04:92:90:49:a4:ec:99:40:cd:8f:06:dd:a6:0e:01: d8:64:56:84:89:74:90:d1:ee:01:12:6c:8c:a2:bd: 0d:8b:ed:e9:e5:b7:a5:c0:d1:81:9b:ee:97:1a:96: d6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:EC:9E:DC:D4:C3:5C:90:D5:BB:BD:4A:E7:05:BD:27:AC:44:C3 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:97:d6:b7:b9:61:de:59:c4:81:ba:1b:3c:c7:0c:5d:85:ca: 57:25:26:85:01:15:f5:75:e9:59:31:31:5e:14:7c:99:52:d3: be:30:de:12:0e:92:9d:74:b7:2f:9d:9a:97:ea:ed:2e:b1:c5: 4d:23:5b:5c:5b:cc:99:34:18:ff:f5:42:a0:6d:f8:2a:65:9e: 35:36:0d:a4:4f:af:47:e5:7c:28:39:9a:47:8f:bf:fd:8a:90: e4:2d:21:fc:0e:44:78:4b:2e:2f:09:c8:d4:13:3e:91:a3:e5: 65:c8:19:f3:84:51:01:be:a3:1d:1b:1e:01:3a:79:c7:b1:3d: c1:7c:d2:36:b1:62:a1:5a:aa:84:f5:27:f1:80:aa:cf:ae:0e: 10:4a:d6:69:e7:00:ad:ae:1d:a2:a3:f3:7f:85:be:20:e3:8a: 17:31:1b:0c:5b:04:fb:8b:17:08:15:a1:92:a7:d9:e6:7f:7d: e0:9c:84:48:35:84:39:36:e5:20:f9:1a:24:c5:5e:a9:3d:8b: e4:15:ef:5d:ac:56:c3:90:c4:69:24:fe:93:e6:aa:01:81:57: 7e:52:89:52:7b:cd:2b:06:88:4a:04:1f:0d:9d:1e:7a:b8:56: 25:4a:e6:95:29:9d:b1:fe:cb:d0:d8:4c:b0:38:ac:87:1c:0a: 9f:11:3a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjUwNTMwMjEyNTI3WhcNMjUwNjA2MjEyNTI3WjAYMRYwFAYD VQQDEw02ODNhMjI0Ny03NTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs040Acwcb424tobVt9Yt5n6+xZSpzl/MxR3tY5zQbewq/Xe9a8ZAorYbsXZK c4CWIA0GmjUBUGmwYJnbroACdo4blAhIJWdV5IGoF6VgL4L4Etds+gIGt/13gDWf qd6sPQ7SmLaDIz2jX57Zq6WDeX4hUaF+EmvUGoIs/ddBteM8sHYCG2JyZHRP5bxs aEezE3KacqOVRlEBYAS5U9vBe5Xjaqv/e6W77zLXqMv2369TsMNXBUSOURZFo5L6 NyGC6F8GZ0FB5AD6PbaON8eoT+MEkpBJpOyZQM2PBt2mDgHYZFaEiXSQ0e4BEmyM or0Ni+3p5belwNGBm+6XGpbWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLF7J7c 1MNckNW7vUrnBb0nrETDMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPl9a3uWHeWcSBuhs8xwxdhcpXJSaFARX1delZMTFeFHyZUtO+MN4S DpKddLcvnZqX6u0uscVNI1tcW8yZNBj/9UKgbfgqZZ41Ng2kT69H5XwoOZpHj7/9 ipDkLSH8DkR4Sy4vCcjUEz6Ro+VlyBnzhFEBvqMdGx4BOnnHsT3BfNI2sWKhWqqE 9SfxgKrPrg4QStZp5wCtrh2io/N/hb4g44oXMRsMWwT7ixcIFaGSp9nmf33gnIRI NYQ5NuUg+RokxV6pPYvkFe9drFbDkMRpJP6T5qoBgVd+UolSe80rBohKBB8NnR56 uFYlSuaVKZ2x/svQ2EywOKyHHAqfEToi -----END CERTIFICATE-----Generated at Sat May 31 17:26:14 2025 by rpki-client