$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json) Hash identifier: hb6ubNlfP+HEl+g4hWF+lSJP06CFRG4kfWfx2qG2d5M= Subject key identifier: 66:9C:37:02:46:24:B0:B3:6E:8A:C0:42:15:F7:E6:8B:37:18:DF:66 Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft Manifest number: 3485 Signing time: Sat 31 May 2025 14:41:14 +0000 Manifest this update: Sat 31 May 2025 14:41:14 +0000 Manifest next update: Sat 07 Jun 2025 14:41:14 +0000 Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: sthIVRcui4Kw2l5MC3pYKT4dQ+hFVJEdAZBnSRNp4qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Validity Not Before: May 31 14:41:14 2025 GMT Not After : Jun 7 14:41:14 2025 GMT Subject: CN=683b150a-344a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:1f:3b:77:d3:88:bc:66:02:98:05:1f:74: d3:a9:9c:42:99:e7:b6:23:1c:81:9b:ee:f9:f6:9b: a3:e4:22:db:f2:c9:ae:66:16:28:4b:67:b0:60:d6: 39:6f:a9:87:22:a1:d1:74:8d:d7:81:9d:b2:a3:74: 16:22:36:e3:69:dc:79:47:40:2b:48:39:5a:5b:1f: 61:61:48:22:fb:24:e0:e7:b7:aa:70:d2:ef:2a:65: bd:90:31:f3:8a:f6:3f:0d:46:47:d7:79:9a:00:ff: 83:8f:d7:df:dd:01:de:f5:a9:26:c0:6b:fd:d3:84: 50:30:82:0b:0a:64:16:07:60:62:84:6b:f1:06:86: cf:67:1c:37:99:1b:f6:b4:05:31:55:04:d2:c2:2d: 44:ae:0a:ce:ac:d7:9e:41:a1:18:01:00:b8:02:72: 1f:35:82:46:43:6d:aa:af:50:f6:77:94:33:bb:ee: 1d:db:38:74:5d:96:e8:8e:06:cf:f0:2d:2f:2c:ad: 4f:d2:f9:e9:82:50:b5:14:66:8d:0b:7a:fd:4a:e0: c4:72:14:76:d2:f4:92:c5:37:2b:2b:91:9f:17:6a: a5:7e:84:80:a6:48:04:40:4b:f3:da:96:25:e6:16: cb:9f:74:ff:f4:4c:32:7e:d1:48:bd:62:52:fe:76: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9C:37:02:46:24:B0:B3:6E:8A:C0:42:15:F7:E6:8B:37:18:DF:66 X509v3 Authority Key Identifier: keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d5:e5:bf:95:20:e6:14:2e:f6:02:98:36:10:09:bf:6a:fd: 82:db:1d:0e:aa:c8:d6:7f:96:9a:98:66:c1:ee:57:5a:66:b4: 42:67:68:cb:65:19:ae:8c:6d:d6:69:2f:a3:e7:06:df:32:bf: 4c:16:74:f0:ff:3c:8c:38:a1:92:ba:08:5f:4c:78:f5:91:46: 18:ec:fa:d3:91:fc:a0:ea:fb:18:9b:f5:87:03:80:b5:43:1f: 76:d4:dc:77:bd:be:ad:4e:3a:b6:5f:fd:83:74:43:6c:62:41: 46:fd:bb:06:c2:ae:7e:e0:6a:55:fd:f6:b7:74:6e:a9:a3:b2: 42:55:f6:4a:8f:fb:94:db:e7:4b:26:ea:23:c3:b2:e7:df:fa: 79:7d:be:09:bd:82:08:8d:eb:71:1d:4f:fb:78:90:29:34:7d: e1:4a:47:af:8f:59:d0:0c:e9:3a:39:68:03:b4:90:9a:78:37: 0f:e2:7e:83:0d:82:c5:9f:f1:c4:aa:38:55:09:84:6e:91:f6: 81:59:16:3b:5d:af:be:e1:97:b5:19:77:bc:36:06:f8:1e:95: 63:40:2b:79:21:bf:34:98:d4:25:46:93:a2:b8:11:cc:96:57: 29:6b:dc:c1:59:8f:00:73:61:4f:62:b0:08:bc:a0:57:de:16: 78:f5:79:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3OUQxMTAvBgNVBAUTKDYyQTZENUVEQzU4RDUzRUY5ODA4MDhCRUNFRDUxOUU4 MDVCMUU0MEMwHhcNMjUwNTMxMTQ0MTE0WhcNMjUwNjA3MTQ0MTE0WjAYMRYwFAYD VQQDEw02ODNiMTUwYS0zNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOsfO3fTiLxmApgFH3TTqZxCmee2IxyBm+759puj5CLb8smuZhYoS2ewYNY5 b6mHIqHRdI3XgZ2yo3QWIjbjadx5R0ArSDlaWx9hYUgi+yTg57eqcNLvKmW9kDHz ivY/DUZH13maAP+Dj9ff3QHe9akmwGv904RQMIILCmQWB2BihGvxBobPZxw3mRv2 tAUxVQTSwi1ErgrOrNeeQaEYAQC4AnIfNYJGQ22qr1D2d5Qzu+4d2zh0XZbojgbP 8C0vLK1P0vnpglC1FGaNC3r9SuDEchR20vSSxTcrK5GfF2qlfoSApkgEQEvz2pYl 5hbLn3T/9EwyftFIvWJS/nYAHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGacNwJG JLCzborAQhX35os3GN9mMB8GA1UdIwQYMBaAFGKm1e3FjVPvmAgIvs7VGegFseQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc5RC9BQzZBMTY4QzFE OTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUtLVlDQWktenRVWjZBV3g1 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxYlY3Y1dOVS0tWUNBaS16dFVaNkFXeDVBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc5RC9BQzZBMTY4QzFEOTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUt LVlDQWktenRVWjZBV3g1QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+1eW/lSDmFC72Apg2EAm/av2C2x0OqsjWf5aamGbB7ldaZrRCZ2jL ZRmujG3WaS+j5wbfMr9MFnTw/zyMOKGSughfTHj1kUYY7PrTkfyg6vsYm/WHA4C1 Qx921Nx3vb6tTjq2X/2DdENsYkFG/bsGwq5+4GpV/fa3dG6po7JCVfZKj/uU2+dL Juojw7Ln3/p5fb4JvYIIjetxHU/7eJApNH3hSkevj1nQDOk6OWgDtJCaeDcP4n6D DYLFn/HEqjhVCYRukfaBWRY7Xa++4Ze1GXe8Ngb4HpVjQCt5Ib80mNQlRpOiuBHM llcpa9zBWY8Ac2FPYrAIvKBX3hZ49Xk3 -----END CERTIFICATE-----Generated at Sat May 31 16:38:54 2025 by rpki-client