$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: rgdzUOyv7gPaahDfaGSUgFW9vkBfSo/oHZ8kMveUN1Q= Subject key identifier: 17:F4:2E:5C:9B:DE:F5:48:D4:6F:3D:BE:D9:97:F8:E4:F5:FF:36:16 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 20D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 20CC Signing time: Fri 06 Jun 2025 16:00:42 +0000 Manifest this update: Fri 06 Jun 2025 16:00:42 +0000 Manifest next update: Fri 13 Jun 2025 16:00:42 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: N98Wk5FpRLjrGn90lJEE6nI+8NjYDI8MigbDRNXuaFA=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: 8rysbZt21FvuQ0omuoFXFp8YfdP5EnJpmuu61zguRxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8407 (0x20d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Jun 6 16:00:42 2025 GMT Not After : Jun 13 16:00:42 2025 GMT Subject: CN=684310aa-53e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:8b:8a:0b:a6:ef:a0:b9:de:ce:06:b9:da: c1:c1:4f:2f:8d:29:6c:bc:9d:43:e1:6a:ab:b4:aa: 88:6b:b6:02:33:da:d4:16:01:e6:13:21:35:bd:5f: f7:a7:71:98:84:0e:44:6e:90:9b:08:72:e1:c3:6b: ee:05:e0:60:c7:db:54:6f:83:2f:4e:33:aa:f0:ce: 8b:7b:e9:92:16:c1:da:39:15:cc:ea:a5:84:51:e9: c1:34:f9:c6:90:e6:38:36:40:b4:10:5b:31:18:3f: 19:2d:99:83:f1:99:eb:cc:d0:f3:72:77:b9:cd:a5: 7a:f6:ce:f5:d6:93:0a:3c:3a:c8:33:a4:05:82:fc: b5:50:eb:27:60:e6:66:d7:38:12:22:f3:62:0f:8e: 03:29:0b:0e:d8:82:14:cd:cb:b6:22:e6:75:d4:d4: 6f:d0:01:c6:8b:10:b1:f6:91:b5:1b:af:ac:0e:47: f8:a5:4f:af:af:1d:a9:ff:19:6f:b2:ce:37:9e:07: 1b:0b:8e:5e:cf:68:00:9f:64:8e:c1:3e:d2:78:22: 24:99:6d:53:51:05:b9:41:85:84:2f:aa:15:81:f2: c8:3e:0f:b3:a0:3a:e6:d1:a2:b4:c8:ff:ec:18:fe: c3:8e:5e:fd:99:82:2e:3c:7f:2e:4a:47:cc:a1:3c: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F4:2E:5C:9B:DE:F5:48:D4:6F:3D:BE:D9:97:F8:E4:F5:FF:36:16 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:79:ce:b8:09:ad:c0:af:d5:8f:47:74:52:2d:6b:b6:38:0f: 4f:97:67:69:4a:9b:9b:bd:ea:30:00:05:9a:12:ea:d3:99:fe: 52:83:60:a3:27:de:b1:b0:e7:b3:06:66:48:5a:c1:7c:06:e5: a9:50:6d:f1:f6:fa:69:1a:45:0f:be:63:4c:e4:66:8c:1c:78: 6a:67:35:b9:f8:6f:56:c0:d6:a4:ae:5d:1e:c7:33:b5:ea:84: e0:da:9b:87:30:04:6f:bd:dc:e5:11:50:c8:18:d9:ee:c8:e3: c8:12:b7:60:79:d5:74:07:4f:c5:87:df:62:af:fe:bd:f8:5c: 03:3b:78:ff:2b:cf:4a:62:1c:bd:35:fa:6e:31:e2:c5:bf:db: 2c:50:cf:17:6a:a4:ec:51:26:8d:48:02:9f:5c:e2:12:b2:b2: 4f:45:39:cb:62:f7:a8:90:05:1b:a3:0c:de:e0:11:ff:5f:77: 90:fa:69:08:9b:50:21:e2:df:0e:6e:b2:8b:d1:89:d3:c6:e1: a5:35:95:a5:f6:e2:20:79:12:89:54:4e:fd:44:29:5f:3c:2d: 92:59:c5:fc:c8:90:77:ce:fc:29:01:a5:1d:cf:10:ad:a4:0f: e9:26:64:9a:58:4c:33:55:fc:c4:dd:c2:c9:55:ae:df:82:ce: db:da:08:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICINcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjUwNjA2MTYwMDQyWhcNMjUwNjEzMTYwMDQyWjAYMRYwFAYD VQQDEw02ODQzMTBhYS01M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+GLigum76C53s4GudrBwU8vjSlsvJ1D4WqrtKqIa7YCM9rUFgHmEyE1vV/3 p3GYhA5EbpCbCHLhw2vuBeBgx9tUb4MvTjOq8M6Le+mSFsHaORXM6qWEUenBNPnG kOY4NkC0EFsxGD8ZLZmD8ZnrzNDzcne5zaV69s711pMKPDrIM6QFgvy1UOsnYOZm 1zgSIvNiD44DKQsO2IIUzcu2IuZ11NRv0AHGixCx9pG1G6+sDkf4pU+vrx2p/xlv ss43ngcbC45ez2gAn2SOwT7SeCIkmW1TUQW5QYWEL6oVgfLIPg+zoDrm0aK0yP/s GP7Djl79mYIuPH8uSkfMoTzsKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf0Llyb 3vVI1G89vtmX+OT1/zYWMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByec64Ca3Ar9WPR3RSLWu2OA9Pl2dpSpubveowAAWaEurTmf5Sg2Cj J96xsOezBmZIWsF8BuWpUG3x9vppGkUPvmNM5GaMHHhqZzW5+G9WwNakrl0exzO1 6oTg2puHMARvvdzlEVDIGNnuyOPIErdgedV0B0/Fh99ir/69+FwDO3j/K89KYhy9 NfpuMeLFv9ssUM8XaqTsUSaNSAKfXOISsrJPRTnLYveokAUbowze4BH/X3eQ+mkI m1Ah4t8ObrKL0YnTxuGlNZWl9uIgeRKJVE79RClfPC2SWcX8yJB3zvwpAaUdzxCt pA/pJmSaWEwzVfzE3cLJVa7fgs7b2gi4 -----END CERTIFICATE-----Generated at Sat Jun 7 23:12:28 2025 by rpki-client