$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: rsRfmDUA8fjiXYx6SH11O4/u/RqbmwQaYAzUaIMQJwI= Subject key identifier: 94:7C:7B:95:44:B0:B4:63:58:72:07:3F:26:A0:5F:81:3B:CF:2E:7F Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03CE Signing time: Tue 03 Jun 2025 00:51:39 +0000 Manifest this update: Tue 03 Jun 2025 00:51:38 +0000 Manifest next update: Tue 10 Jun 2025 00:51:38 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: rg6/mRTq/cE/hdXS/g4ESjNB8qKjXjooY+PokgVB4e0=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Jun 3 00:51:38 2025 GMT Not After : Jun 10 00:51:38 2025 GMT Subject: CN=683e471a-0feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:62:46:53:38:20:5d:19:28:ff:cc:8a:77: a0:de:ec:6d:68:55:77:8c:f1:4e:27:89:ba:da:dc: 6d:5e:e9:36:3d:65:15:1e:ed:1a:f9:7b:98:9f:80: 81:25:01:b7:84:7d:08:36:6e:80:e4:a0:bb:55:97: d5:3c:ed:09:3b:da:b5:a7:5e:a7:80:57:e6:b5:ae: ca:b2:55:77:ac:24:b8:24:ff:02:92:71:12:ed:02: 8a:cd:7a:46:0e:bc:e0:ab:30:0c:26:64:55:a1:dd: a0:7c:f3:70:8a:7e:cf:20:df:5c:10:73:fc:ee:45: fe:09:3a:87:98:7b:bd:64:60:5d:17:08:79:72:0d: 1d:2d:e6:0d:64:45:ba:11:21:96:99:eb:6b:39:b2: c1:99:cf:b3:54:5c:4b:45:5c:8e:10:d8:d6:72:8d: f2:43:a4:3c:17:2f:dd:ec:e7:3d:35:d0:c6:67:28: da:f0:6d:09:7b:5e:ee:a1:54:e9:65:a2:eb:ae:f7: 83:a5:e5:23:99:69:54:e2:38:a1:8f:37:89:02:fd: b6:47:ba:5e:15:8a:c6:13:61:22:3c:f3:64:03:46: 56:6c:ed:5b:01:5f:73:29:05:08:8e:5b:ee:08:f9: 62:a3:d0:0d:78:e4:49:4f:0a:cf:52:d7:25:b9:54: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7C:7B:95:44:B0:B4:63:58:72:07:3F:26:A0:5F:81:3B:CF:2E:7F X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:77:38:ec:72:7f:82:ec:9a:d3:1b:aa:23:d4:fe:4b:b2:92: 20:78:09:80:38:c3:98:20:f3:ea:a4:47:f9:87:6b:ca:fb:ee: a0:05:3c:6a:67:23:bc:43:77:65:ad:ad:a7:bc:8c:60:c2:8a: 53:45:25:0d:d6:75:e6:12:d5:48:77:58:f4:01:8f:13:69:bf: d0:80:4d:7e:27:60:c6:fe:fb:3d:ca:06:c9:f0:c9:32:a7:39: a1:01:0d:b1:c3:8c:c7:a7:dd:77:d4:cc:65:ed:7b:a0:e5:22: d1:ff:19:03:bc:25:82:4d:b2:41:1f:1e:f9:20:9e:5f:17:95: ba:8d:13:b2:a8:8b:78:60:d1:a2:4f:eb:68:7d:74:b1:c3:5f: dc:ef:88:a6:08:6a:26:f4:70:87:f5:cb:06:32:04:a1:5d:4f: ee:77:d9:e1:5b:41:1d:8a:30:66:e4:d4:9e:fd:1a:13:c6:6e: 5f:00:73:26:62:8b:e0:24:5c:f9:52:18:c3:f2:59:e9:a7:fc: 57:ae:df:f5:9b:86:43:d6:76:a8:4f:02:ad:ee:26:29:c3:90: ff:75:c5:f4:fc:ba:e8:93:3b:9f:42:02:af:71:92:3a:3f:32: 1d:93:26:62:7f:3a:79:d0:3d:2e:f9:38:f3:72:4f:ff:3b:a5: cb:dd:f7:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNjAzMDA1MTM4WhcNMjUwNjEwMDA1MTM4WjAYMRYwFAYD VQQDEw02ODNlNDcxYS0wZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G9iRlM4IF0ZKP/Mineg3uxtaFV3jPFOJ4m62txtXuk2PWUVHu0a+XuYn4CB JQG3hH0INm6A5KC7VZfVPO0JO9q1p16ngFfmta7KslV3rCS4JP8CknES7QKKzXpG DrzgqzAMJmRVod2gfPNwin7PIN9cEHP87kX+CTqHmHu9ZGBdFwh5cg0dLeYNZEW6 ESGWmetrObLBmc+zVFxLRVyOENjWco3yQ6Q8Fy/d7Oc9NdDGZyja8G0Je17uoVTp ZaLrrveDpeUjmWlU4jihjzeJAv22R7peFYrGE2EiPPNkA0ZWbO1bAV9zKQUIjlvu CPlio9ANeORJTwrPUtcluVR5UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR8e5VE sLRjWHIHPyagX4E7zy5/MB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANdzjscn+C7JrTG6oj1P5LspIgeAmAOMOYIPPqpEf5h2vK++6gBTxq ZyO8Q3dlra2nvIxgwopTRSUN1nXmEtVId1j0AY8Tab/QgE1+J2DG/vs9ygbJ8Mky pzmhAQ2xw4zHp9131Mxl7Xug5SLR/xkDvCWCTbJBHx75IJ5fF5W6jROyqIt4YNGi T+tofXSxw1/c74imCGom9HCH9csGMgShXU/ud9nhW0EdijBm5NSe/RoTxm5fAHMm YovgJFz5UhjD8lnpp/xXrt/1m4ZD1naoTwKt7iYpw5D/dcX0/LrokzufQgKvcZI6 PzIdkyZifzp50D0u+Tjzck//O6XL3feT -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:44 2025 by rpki-client