$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: DIZhkuQQyphm/Y3t/dBsUfdOW9ycNuaJ+HxyClXsOXA= Subject key identifier: 5C:56:69:63:53:BD:54:8D:16:9A:F8:70:C3:EF:8A:D8:DC:57:D4:CC Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: F8 Signing time: Sun 15 Jun 2025 04:26:55 +0000 Manifest this update: Sun 15 Jun 2025 04:26:55 +0000 Manifest next update: Sun 22 Jun 2025 04:26:55 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: 3pTlu28cwanC1RYrSmS7gqazJWdim+PZTJgjoclNAYM=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Jun 15 04:26:55 2025 GMT Not After : Jun 22 04:26:55 2025 GMT Subject: CN=684e4b8f-c416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:87:4a:23:df:2c:39:24:58:53:fa:b2:16: 76:5e:36:ff:86:02:ce:12:11:b6:ff:f4:ea:ee:32: bb:da:32:69:8d:bc:2b:a2:84:dc:92:fe:82:f0:4c: 64:31:ae:f1:c1:56:e5:d4:22:01:b9:cc:23:27:39: 22:47:54:f9:ea:6e:77:4d:49:15:fd:b6:05:fa:fc: 44:37:50:11:ac:24:38:c7:55:c7:e9:cc:53:75:27: 7d:04:4c:8c:8d:52:70:21:15:87:17:a4:ce:e9:5f: 78:8f:9a:c7:ba:2b:ec:58:61:2e:2d:52:94:24:c3: 4e:59:53:b6:d5:47:98:3d:39:c7:0c:08:3f:1e:92: b7:fe:e3:4e:01:e2:0d:03:af:48:69:06:fa:20:f1: a9:3d:53:24:d4:b7:13:55:7d:1a:93:c9:cf:36:4b: 16:56:97:98:38:47:89:df:53:76:e9:6a:47:5b:05: 5b:bc:b2:fb:b3:d4:14:23:22:c1:8f:ea:64:19:9a: 4f:b4:1a:e7:e2:39:8c:d5:0f:3b:31:f1:b5:58:f0: 0a:af:45:17:9f:18:c4:d7:38:a5:25:8b:f7:18:3c: ac:50:42:8a:d3:27:7b:2d:2a:13:39:8a:3b:43:cc: fc:d5:e4:95:cc:26:3f:89:30:b8:2b:44:ef:54:1c: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:69:63:53:BD:54:8D:16:9A:F8:70:C3:EF:8A:D8:DC:57:D4:CC X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:55:e5:33:68:06:99:74:03:36:a9:dd:d1:4b:0a:be:c0:1d: 78:ca:1a:10:15:65:34:fd:3d:17:61:3f:bd:e1:da:72:71:85: 46:9b:0c:be:c9:c3:89:62:6a:15:dc:05:fb:96:d2:8e:5c:dd: c8:09:6d:0f:8c:bf:d5:56:10:80:b2:23:63:de:61:9a:15:21: 03:7c:f3:d1:8d:aa:9c:59:70:51:8f:36:5a:83:f7:f8:23:6f: 03:d2:44:68:b9:bf:c7:22:be:ca:ae:1d:28:f9:a8:35:ba:0b: ff:ff:75:cc:23:de:46:59:f1:d3:60:ed:2b:d7:99:30:1d:95: b2:3b:8e:c8:bc:05:13:d0:6f:18:bd:54:76:5c:20:79:a6:f4: 65:af:46:a9:a1:b2:62:84:d2:f3:0b:a2:74:c7:7e:a8:81:aa: 75:1f:e1:1a:80:bd:a2:28:9e:99:7e:3a:fc:df:c9:5a:a2:ea: f2:4b:75:3e:67:2b:7f:21:87:2c:c4:09:d7:f3:94:d8:8c:b5: 95:a1:d9:69:11:80:9a:c3:e6:ad:ed:dd:68:95:9f:3f:b9:ba: 46:31:d0:d7:8f:77:e2:80:22:dc:e6:96:1a:4a:4f:31:95:c2: 54:bf:54:5a:30:48:2c:65:88:77:b9:e8:7f:13:34:d5:45:f6: ae:aa:1e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwNjE1MDQyNjU1WhcNMjUwNjIyMDQyNjU1WjAYMRYwFAYD VQQDEw02ODRlNGI4Zi1jNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud2HSiPfLDkkWFP6shZ2Xjb/hgLOEhG2//Tq7jK72jJpjbwrooTckv6C8Exk Ma7xwVbl1CIBucwjJzkiR1T56m53TUkV/bYF+vxEN1ARrCQ4x1XH6cxTdSd9BEyM jVJwIRWHF6TO6V94j5rHuivsWGEuLVKUJMNOWVO21UeYPTnHDAg/HpK3/uNOAeIN A69IaQb6IPGpPVMk1LcTVX0ak8nPNksWVpeYOEeJ31N26WpHWwVbvLL7s9QUIyLB j+pkGZpPtBrn4jmM1Q87MfG1WPAKr0UXnxjE1zilJYv3GDysUEKK0yd7LSoTOYo7 Q8z81eSVzCY/iTC4K0TvVBxrlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxWaWNT vVSNFpr4cMPvitjcV9TMMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFVeUzaAaZdAM2qd3RSwq+wB14yhoQFWU0/T0XYT+94dpycYVGmwy+ ycOJYmoV3AX7ltKOXN3ICW0PjL/VVhCAsiNj3mGaFSEDfPPRjaqcWXBRjzZag/f4 I28D0kRoub/HIr7Krh0o+ag1ugv//3XMI95GWfHTYO0r15kwHZWyO47IvAUT0G8Y vVR2XCB5pvRlr0apobJihNLzC6J0x36ogap1H+EagL2iKJ6Zfjr838laouryS3U+ Zyt/IYcsxAnX85TYjLWVodlpEYCaw+at7d1olZ8/ubpGMdDXj3figCLc5pYaSk8x lcJUv1RaMEgsZYh3ueh/EzTVRfauqh4O -----END CERTIFICATE-----Generated at Mon Jun 16 10:32:45 2025 by rpki-client