$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: 3h+yesw1OrP8nXojLDxkisMnaE0MnNxtz1HC2QglhdY= Subject key identifier: 9F:31:84:90:8C:88:D9:7B:D8:7F:01:6A:C8:53:CB:CC:94:E5:2B:9C Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 011C Signing time: Mon 09 Jun 2025 03:56:09 +0000 Manifest this update: Mon 09 Jun 2025 03:56:08 +0000 Manifest next update: Mon 16 Jun 2025 03:56:08 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: jMA+cDp2VFdP2TWj+LBfMFBsYmABZ5X7eQ4cT/u4MUk=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: Jun 9 03:56:08 2025 GMT Not After : Jun 16 03:56:08 2025 GMT Subject: CN=68465b59-11f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:5e:e7:16:cf:e6:bb:ea:f8:bf:60:49:63: 2e:8f:9d:61:63:c9:f9:c6:16:a5:32:ea:b5:c6:86: c0:08:f7:7b:56:d4:ef:8e:13:32:ca:3a:1b:aa:08: d3:3f:9b:50:8e:6a:cd:4c:81:54:83:5f:cc:6b:fa: b2:89:50:ac:96:56:c8:68:aa:59:c9:ea:ef:ab:e8: ea:92:da:f0:6d:8f:04:38:dd:d5:64:9e:ec:0f:ba: 5e:ae:a7:ff:ea:54:76:b1:3c:ee:64:29:9b:bb:a6: 1b:8f:c3:b8:1b:3a:01:5e:67:be:9a:b5:3a:1e:f5: 10:82:4d:99:7f:fd:74:56:f0:7f:fc:87:34:64:c6: 6a:02:34:d1:64:55:0a:05:b8:02:c4:fd:b4:4b:c4: ae:da:f3:ea:58:ba:bc:e6:06:fd:e8:ee:0e:11:48: 3b:8a:ac:ad:f4:3e:92:bf:27:03:9a:f6:db:ee:d0: 4f:e0:0d:cf:63:0e:88:e9:e8:86:72:c6:7d:60:d3: 3c:a2:8b:a6:e6:e8:3d:47:9b:01:ab:38:f6:91:bf: 1a:17:6f:2c:41:3b:37:57:67:bb:fa:0b:8e:49:6e: 8a:88:1b:78:5b:bd:61:ae:6d:a5:8e:3d:65:a7:e4: 79:10:0d:02:91:ff:6b:eb:7d:f9:6b:00:27:32:05: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:31:84:90:8C:88:D9:7B:D8:7F:01:6A:C8:53:CB:CC:94:E5:2B:9C X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cc:50:4d:35:8e:f4:ba:cd:e6:be:48:d0:af:b3:45:6a:b7: 6f:c1:5b:16:51:63:e6:cf:b3:62:ad:af:c6:50:54:8e:86:db: b0:bf:16:ca:25:05:67:d3:cf:e6:b9:86:26:f2:af:31:e3:51: 60:3a:b3:de:16:96:13:34:f2:84:e3:1f:16:72:cf:3a:0a:33: 51:d5:f3:5b:db:ab:e6:3d:dc:76:fa:b6:ff:e8:9a:04:26:18: e3:f0:4b:18:a5:89:b6:c8:96:cd:2b:1c:aa:79:c8:00:d9:bf: 19:78:b9:72:37:02:0b:8e:9e:a0:eb:e5:db:29:e9:ba:13:a1: 76:a3:a5:c5:e0:f8:27:2d:f2:44:31:2d:79:46:a5:d4:69:c5: 42:48:6c:2b:69:28:5d:ee:64:10:2c:ec:7f:ef:37:bd:69:c8: 62:61:c3:03:18:28:82:e1:ef:f7:09:3b:08:c0:91:74:e2:42: 13:0d:90:34:b6:73:39:82:35:68:d7:48:df:03:67:07:ac:7f: c4:f3:f5:bf:22:83:51:df:8d:26:ca:59:1f:2a:74:0b:1d:01: 87:20:29:20:28:fe:74:d3:ac:b7:dd:1e:da:ec:16:cf:33:d8: 6a:09:5b:5b:07:93:6e:d8:4c:a5:83:e6:d6:3d:43:ae:48:58: 6d:ed:33:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjUwNjA5MDM1NjA4WhcNMjUwNjE2MDM1NjA4WjAYMRYwFAYD VQQDEw02ODQ2NWI1OS0xMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzONe5xbP5rvq+L9gSWMuj51hY8n5xhalMuq1xobACPd7VtTvjhMyyjobqgjT P5tQjmrNTIFUg1/Ma/qyiVCsllbIaKpZyervq+jqktrwbY8EON3VZJ7sD7perqf/ 6lR2sTzuZCmbu6Ybj8O4GzoBXme+mrU6HvUQgk2Zf/10VvB//Ic0ZMZqAjTRZFUK BbgCxP20S8Su2vPqWLq85gb96O4OEUg7iqyt9D6SvycDmvbb7tBP4A3PYw6I6eiG csZ9YNM8ooum5ug9R5sBqzj2kb8aF28sQTs3V2e7+guOSW6KiBt4W71hrm2ljj1l p+R5EA0Ckf9r6335awAnMgWMEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8xhJCM iNl72H8BashTy8yU5SucMB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj NkdlY19sVVBILW15TmhDRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOzFBNNY70us3mvkjQr7NFardvwVsWUWPmz7Nira/GUFSOhtuwvxbK JQVn08/muYYm8q8x41FgOrPeFpYTNPKE4x8Wcs86CjNR1fNb26vmPdx2+rb/6JoE Jhjj8EsYpYm2yJbNKxyqecgA2b8ZeLlyNwILjp6g6+XbKem6E6F2o6XF4PgnLfJE MS15RqXUacVCSGwraShd7mQQLOx/7ze9achiYcMDGCiC4e/3CTsIwJF04kITDZA0 tnM5gjVo10jfA2cHrH/E8/W/IoNR340mylkfKnQLHQGHICkgKP5006y33R7a7BbP M9hqCVtbB5Nu2Eylg+bWPUOuSFht7TPJ -----END CERTIFICATE-----Generated at Tue Jun 10 13:24:08 2025 by rpki-client