$ rpki-client -vvf rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft File: yU_6eqS897yayfDTywnSlOVxFiM.mft (raw, json) Hash identifier: xJHuBYm+LHCaR33IG5TyiLIckNqL6TREnJxCpQ3AUiE= Subject key identifier: AB:6F:46:93:6B:87:66:B2:B7:DC:9A:FE:68:56:E8:52:CA:CD:58:4A Authority key identifier: C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 Certificate issuer: /CN=A915730C/serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft Manifest number: 10 Signing time: Tue 01 Jul 2025 08:53:05 +0000 Manifest this update: Tue 01 Jul 2025 08:53:04 +0000 Manifest next update: Tue 08 Jul 2025 08:53:04 +0000 Files and hashes: 1: yU_6eqS897yayfDTywnSlOVxFiM.crl (hash: qyTOEVq8nF3zOz0rvcLSczuOZ/W5LfB4cTIafjcJW1w=) 2: 949C3D70497C11F0A5181A5FC4F9AE02.roa (hash: jJYL7x8+30zgOjJC0KXeGcN5Hx3RtHR1U+WuBZx+L40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915730C, serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Validity Not Before: Jul 1 08:53:04 2025 GMT Not After : Jul 8 08:53:04 2025 GMT Subject: CN=6863a1f1-0b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:56:a4:a7:44:e8:17:21:0c:d8:db:a3:45:1a: 19:5e:75:26:00:51:c8:a0:10:8c:0c:4f:fa:ad:96: 75:72:16:a1:0d:03:92:25:87:1b:b7:05:64:f3:7c: 85:da:42:c9:94:d2:42:83:de:5a:df:6d:8a:9a:af: d9:d5:f7:57:33:1c:40:3c:87:16:e8:20:bd:a8:f9: 34:4d:31:d0:06:96:b2:c1:de:8c:eb:2d:1a:f7:b8: c7:a1:0b:8c:75:32:e3:2a:b1:15:f8:94:2c:42:fd: 63:fb:a5:67:dc:a7:a1:c9:6c:27:8c:ce:b5:b4:66: 8d:94:61:bf:74:87:39:5c:76:61:ac:64:34:61:20: 95:c7:b0:90:58:f1:b1:83:01:7d:e3:15:2f:aa:d1: f9:8c:31:ec:8f:dc:47:92:aa:8c:88:88:67:dd:fc: ae:57:33:65:25:10:ea:f8:08:01:07:16:ec:ec:3a: 97:53:d3:48:86:a7:dc:c9:80:d9:30:66:38:88:f5: 91:56:66:2b:b2:65:30:4d:4a:ed:cd:49:11:95:0e: 29:f1:b1:fe:8e:84:3a:67:47:31:8b:c0:e2:b4:84: 9c:f0:16:be:71:0b:e6:c8:2b:a4:72:3b:02:05:96: 0c:ce:aa:fe:46:9f:f3:0c:9e:e5:83:77:15:cc:64: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6F:46:93:6B:87:66:B2:B7:DC:9A:FE:68:56:E8:52:CA:CD:58:4A X509v3 Authority Key Identifier: keyid:C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:40:76:44:91:0e:35:56:11:42:7e:d6:10:74:75:18:14:e6: ad:8f:87:05:be:75:69:11:ea:e9:83:f1:92:74:4a:3a:24:41: 27:06:6d:c8:09:01:a6:83:d1:b1:e2:b0:85:3a:de:90:79:3d: 93:21:26:66:6b:f7:c6:85:42:c3:ff:07:f4:94:51:e6:c3:c9: 4f:57:32:78:c9:8b:d6:35:6b:d5:0d:c8:88:4f:92:b2:af:e3: a8:0e:d1:47:2b:af:96:8c:8d:2f:84:57:57:c5:fb:c4:da:90: 83:c9:df:7a:bf:11:aa:77:36:6c:bb:f1:0c:10:ea:6d:d1:fe: 17:5b:c1:a9:90:1e:cf:b1:59:77:1e:ab:b4:5b:c3:44:81:f6: b1:d1:0d:3f:7b:ba:5d:7d:db:45:ca:f3:9f:8a:42:3c:8d:2e: a9:18:d4:65:05:96:91:89:11:46:bf:11:a8:31:7e:cd:f6:12: 93:9f:8f:d2:34:9d:20:31:2f:97:5c:63:41:ba:b2:68:76:bf: 1f:c5:e9:a9:37:b2:af:0a:59:60:61:51:c9:b9:15:e0:33:7d: 5a:ce:a4:42:04:ac:52:4d:79:21:e5:84:cd:d5:e5:98:d1:0b: da:e3:87:7e:7d:fc:62:e9:29:05:25:0b:86:2a:af:50:06:e1: c2:5f:8f:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzMwQzExMC8GA1UEBRMoQzk0RkZBN0FBNEJDRjdCQzlBQzlGMEQzQ0IwOUQyOTRF NTcxMTYyMzAeFw0yNTA3MDEwODUzMDRaFw0yNTA3MDgwODUzMDRaMBgxFjAUBgNV BAMTDTY4NjNhMWYxLTBiMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyVqSnROgXIQzY26NFGhledSYAUcigEIwMT/qtlnVyFqENA5Ilhxu3BWTzfIXa QsmU0kKD3lrfbYqar9nV91czHEA8hxboIL2o+TRNMdAGlrLB3ozrLRr3uMehC4x1 MuMqsRX4lCxC/WP7pWfcp6HJbCeMzrW0Zo2UYb90hzlcdmGsZDRhIJXHsJBY8bGD AX3jFS+q0fmMMeyP3EeSqoyIiGfd/K5XM2UlEOr4CAEHFuzsOpdT00iGp9zJgNkw ZjiI9ZFWZiuyZTBNSu3NSRGVDinxsf6OhDpnRzGLwOK0hJzwFr5xC+bIK6RyOwIF lgzOqv5Gn/MMnuWDdxXMZLMNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq29Gk2uH ZrK33Jr+aFboUsrNWEowHwYDVR0jBBgwFoAUyU/6eqS897yayfDTywnSlOVxFiMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MzBDLzBGNkU0NzBBNDIw NzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5YXlmRFR5d25TbE9WeEZp TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVVfNmVxUzg5N3lheWZEVHl3blNsT1Z4RmlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MzBDLzBGNkU0NzBBNDIwNzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5 YXlmRFR5d25TbE9WeEZpTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKBAdkSRDjVWEUJ+1hB0dRgU5q2PhwW+dWkR6umD8ZJ0SjokQScGbcgJ AaaD0bHisIU63pB5PZMhJmZr98aFQsP/B/SUUebDyU9XMnjJi9Y1a9UNyIhPkrKv 46gO0Ucrr5aMjS+EV1fF+8TakIPJ33q/Eap3Nmy78QwQ6m3R/hdbwamQHs+xWXce q7Rbw0SB9rHRDT97ul1920XK85+KQjyNLqkY1GUFlpGJEUa/Eagxfs32EpOfj9I0 nSAxL5dcY0G6smh2vx/F6ak3sq8KWWBhUcm5FeAzfVrOpEIErFJNeSHlhM3V5ZjR C9rjh359/GLpKQUlC4Yqr1AG4cJfjzU= -----END CERTIFICATE-----Generated at Tue Jul 1 19:52:11 2025 by rpki-client