$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: /cSfQUBAeG7tX4MtgIGBkzgx929TTyo7gHty+FJ0JZ0= Subject key identifier: B0:A4:6E:65:92:6D:FD:B3:6F:05:E3:75:FF:2C:D3:E6:CA:D8:23:78 Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 03FB Signing time: Tue 01 Jul 2025 01:09:53 +0000 Manifest this update: Tue 01 Jul 2025 01:09:52 +0000 Manifest next update: Tue 08 Jul 2025 01:09:52 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: fYftndm8265EqpvxrciWW7CIWtlSl8Ynw24TNQ7ga1c=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Jul 1 01:09:52 2025 GMT Not After : Jul 8 01:09:52 2025 GMT Subject: CN=68633560-4624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:41:d8:5e:78:81:60:53:09:ec:b6:2b:e5: 5a:2b:a1:39:45:8b:33:93:96:07:a8:7a:33:51:94: 42:63:21:63:9e:48:13:61:d5:07:83:b2:dc:3a:71: 21:16:67:b6:56:5e:03:bc:b7:e9:7c:0f:f9:ba:2b: f4:48:95:9a:31:bc:e8:e4:b3:4e:26:55:17:84:38: 00:2e:8a:b5:d2:16:a4:b5:04:1f:34:41:1c:ed:cb: d0:ca:19:c3:86:0e:ee:57:83:2d:cb:1b:16:ba:4e: 93:64:bd:29:9c:6a:4f:be:9f:29:b5:f4:5c:cd:3b: 2f:f8:31:32:05:67:50:e8:3f:7a:fa:d4:8a:0f:22: f6:20:3c:eb:f7:a2:e7:ee:21:38:fd:c5:ad:c5:97: 57:a0:a9:23:64:7c:25:09:3c:7c:97:33:51:34:3e: 05:3d:87:d2:fb:61:76:c5:e0:50:e2:f8:e0:5d:39: 86:96:e1:29:29:08:61:b0:b5:08:82:5a:f7:de:b4: b7:c9:77:ad:c2:26:41:4c:03:81:45:89:16:db:3f: 12:38:bb:6d:b6:11:d4:5c:05:65:ba:94:c1:4d:d9: 9b:dd:30:1a:7e:e0:d1:be:b9:6f:42:8e:59:63:21: a6:8b:4f:52:eb:17:67:03:3f:2d:04:5f:29:2b:81: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:6E:65:92:6D:FD:B3:6F:05:E3:75:FF:2C:D3:E6:CA:D8:23:78 X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:3f:f9:8d:bd:58:22:a8:ac:29:14:26:3d:92:46:18:83: 5e:74:e2:37:e8:9a:e8:3a:f0:16:fa:6d:f5:b4:bd:24:a2:ae: fe:4e:ab:3e:73:be:f2:2b:17:b9:0a:a2:2d:4f:11:96:3e:9c: b3:e3:52:a8:bc:4d:38:54:e9:43:08:4d:11:d7:bd:c5:3c:69: 22:71:03:0d:9c:a6:e6:8f:ae:8f:73:87:a9:5d:db:6a:46:fe: 17:42:07:22:fe:d2:d5:44:15:28:c2:cc:a2:8e:01:54:c1:f2: ae:cb:73:28:0c:d5:93:a6:5f:96:cd:b3:b3:27:1e:f2:4e:a7: 8e:77:d3:99:37:ee:ca:9c:fc:fb:d7:79:05:1f:32:a2:63:d7: 03:8e:23:77:3c:22:97:97:16:3b:0d:ad:b7:fe:be:c5:a5:43: 11:d0:01:c5:49:14:61:a3:c4:a5:f9:d3:5c:83:cd:09:47:1c: cd:1e:ec:d4:9b:ec:e5:cc:26:86:a6:d0:98:b8:80:3d:5a:bb: cd:66:44:e0:85:11:f3:73:b7:88:c9:e1:e7:21:d9:9b:cd:61: e6:9d:fb:50:53:65:af:58:96:ac:fb:5a:17:f8:7f:5f:bf:ea: 47:b6:a1:b9:b0:1a:d0:ba:51:b7:08:d9:3e:25:a2:42:34:61: 95:b2:ef:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTA3MDEwMTA5NTJaFw0yNTA3MDgwMTA5NTJaMBgxFjAUBgNV BAMTDTY4NjMzNTYwLTQ2MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWBEHYXniBYFMJ7LYr5VoroTlFizOTlgeoejNRlEJjIWOeSBNh1QeDstw6cSEW Z7ZWXgO8t+l8D/m6K/RIlZoxvOjks04mVReEOAAuirXSFqS1BB80QRzty9DKGcOG Du5Xgy3LGxa6TpNkvSmcak++nym19FzNOy/4MTIFZ1DoP3r61IoPIvYgPOv3oufu ITj9xa3Fl1egqSNkfCUJPHyXM1E0PgU9h9L7YXbF4FDi+OBdOYaW4SkpCGGwtQiC WvfetLfJd63CJkFMA4FFiRbbPxI4u222EdRcBWW6lMFN2ZvdMBp+4NG+uW9Cjllj IaaLT1LrF2cDPy0EXykrge1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsKRuZZJt /bNvBeN1/yzT5srYI3gwHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCLP/mNvVgiqKwpFCY9kkYYg1504jfomug68Bb6bfW0vSSirv5Oqz5z vvIrF7kKoi1PEZY+nLPjUqi8TThU6UMITRHXvcU8aSJxAw2cpuaPro9zh6ld22pG /hdCByL+0tVEFSjCzKKOAVTB8q7LcygM1ZOmX5bNs7MnHvJOp45305k37sqc/PvX eQUfMqJj1wOOI3c8IpeXFjsNrbf+vsWlQxHQAcVJFGGjxKX501yDzQlHHM0e7NSb 7OXMJoam0Ji4gD1au81mROCFEfNzt4jJ4ech2ZvNYead+1BTZa9Ylqz7Whf4f1+/ 6ke2obmwGtC6UbcI2T4lokI0YZWy72c= -----END CERTIFICATE-----Generated at Wed Jul 2 15:25:40 2025 by rpki-client