$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: 04djUdur+0uV+w+QjNT5/ZiiYPtI4kpwevtJvEmEF+g= Subject key identifier: 5A:A6:97:C5:16:F6:81:2A:BE:01:7D:E0:FF:26:F0:E6:0D:54:C8:BD Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 07D1 Signing time: Sun 08 Jun 2025 20:45:34 +0000 Manifest this update: Sun 08 Jun 2025 20:45:34 +0000 Manifest next update: Sun 15 Jun 2025 20:45:34 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: 6Q4+5dhhgSVN8nJ+xQL8MCpYvlI/aYpG1c644Nn4xj0=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: Jun 8 20:45:34 2025 GMT Not After : Jun 15 20:45:34 2025 GMT Subject: CN=6845f66e-f93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:59:df:93:a7:60:2d:31:90:69:70:b6:5e: 83:37:d9:db:28:a5:57:a1:fb:e7:bf:fa:c7:b6:20: fe:8b:75:48:b5:e6:0c:6b:02:bb:9e:e2:f3:f8:32: ff:1b:c2:d3:d2:8b:52:d9:fd:a4:11:ab:41:a6:32: ac:35:ce:04:56:27:cb:53:3c:6a:19:67:5a:6e:d3: cc:0c:f2:60:dc:1c:8e:c1:fd:cd:0e:7d:99:73:68: 07:4d:3d:4e:bb:4a:fa:45:6a:e7:c4:6f:36:bf:58: 9f:48:bb:14:30:47:82:f8:8b:4d:b0:dd:df:9e:2c: 7e:4a:cb:bf:bd:95:b4:67:b8:bc:b7:27:d2:84:fe: 53:1b:4e:f6:8f:11:eb:d6:38:e6:28:9c:6c:22:01: a0:4a:86:c0:80:ef:92:dc:93:54:94:f8:fb:f6:42: 9b:d2:4a:38:39:db:8b:3e:55:02:13:d8:4c:a3:19: 08:6a:1f:32:e1:89:42:aa:36:5b:c0:33:1a:3e:9d: 75:46:67:80:24:73:93:0b:20:a4:e5:d9:fc:b2:6e: 1a:39:3d:ce:bf:33:95:2d:98:4f:65:bf:bd:dd:f6: 19:9f:0d:98:77:02:a9:6d:91:1f:ec:40:81:d5:9a: e3:de:51:97:4f:1f:cf:61:18:7b:7c:01:2d:d5:57: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A6:97:C5:16:F6:81:2A:BE:01:7D:E0:FF:26:F0:E6:0D:54:C8:BD X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:d3:00:66:bd:91:ba:01:9c:c2:ec:23:d6:72:f9:89:56: 71:0e:ef:46:f0:36:5c:8e:a8:6a:c8:42:72:ee:1f:a0:23:3a: ca:81:1d:70:b8:65:4f:37:a0:fd:7c:58:b1:c5:34:a7:9a:d9: 33:a3:9b:b7:cb:7f:c5:cc:22:9d:80:b8:59:b8:45:52:d7:01: 11:0d:37:b0:7e:7a:13:e9:78:97:8c:85:72:d2:71:11:b0:a0: d1:32:ef:0f:64:12:b0:04:46:8b:08:a0:8c:12:96:48:f6:e9: 72:50:7c:13:aa:9c:d2:c0:43:f7:78:28:9b:0a:40:4b:ad:91: f1:78:b7:38:0a:be:98:8c:1e:80:66:4b:89:71:2e:d3:ad:31: 78:c3:42:88:b7:2a:b6:ef:27:9d:16:b3:f6:54:80:9b:9b:1b: 88:99:aa:ff:d6:70:d3:d9:36:8d:f9:2f:89:ea:e4:bb:47:69: 24:bb:3a:d5:b0:1e:5c:b8:21:ba:53:f9:16:e0:0c:a6:b8:ec: 84:77:8d:1e:d6:8a:ea:f1:bc:e2:83:69:d7:89:72:27:8a:75: 17:12:d0:e5:9d:82:2e:ea:c6:6e:b5:1a:89:27:1b:1c:01:d3: d4:5a:c6:36:c4:d5:cc:45:6a:66:4a:4f:5a:06:71:b6:0b:4c: 66:03:df:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjUwNjA4MjA0NTM0WhcNMjUwNjE1MjA0NTM0WjAYMRYwFAYD VQQDEw02ODQ1ZjY2ZS1mOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsxZ35OnYC0xkGlwtl6DN9nbKKVXofvnv/rHtiD+i3VIteYMawK7nuLz+DL/ G8LT0otS2f2kEatBpjKsNc4EVifLUzxqGWdabtPMDPJg3ByOwf3NDn2Zc2gHTT1O u0r6RWrnxG82v1ifSLsUMEeC+ItNsN3fnix+Ssu/vZW0Z7i8tyfShP5TG072jxHr 1jjmKJxsIgGgSobAgO+S3JNUlPj79kKb0ko4OduLPlUCE9hMoxkIah8y4YlCqjZb wDMaPp11RmeAJHOTCyCk5dn8sm4aOT3OvzOVLZhPZb+93fYZnw2YdwKpbZEf7ECB 1Zrj3lGXTx/PYRh7fAEt1Vd5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqml8UW 9oEqvgF94P8m8OYNVMi9MB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnytMAZr2RugGcwuwj1nL5iVZxDu9G8DZcjqhqyEJy7h+gIzrKgR1w uGVPN6D9fFixxTSnmtkzo5u3y3/FzCKdgLhZuEVS1wERDTewfnoT6XiXjIVy0nER sKDRMu8PZBKwBEaLCKCMEpZI9ulyUHwTqpzSwEP3eCibCkBLrZHxeLc4Cr6YjB6A ZkuJcS7TrTF4w0KItyq27yedFrP2VICbmxuImar/1nDT2TaN+S+J6uS7R2kkuzrV sB5cuCG6U/kW4AymuOyEd40e1orq8bzig2nXiXIninUXEtDlnYIu6sZutRqJJxsc AdPUWsY2xNXMRWpmSk9aBnG2C0xmA99a -----END CERTIFICATE-----Generated at Mon Jun 9 16:46:49 2025 by rpki-client