$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: KUSWz3/caLxSd05o9J0alBToSH0Y8oCGgraDibABAGU= Subject key identifier: 06:3A:B3:BA:BA:34:06:0E:5A:9D:44:B2:1F:51:C9:46:BC:F4:68:6F Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 6C Signing time: Thu 19 Jun 2025 06:37:27 +0000 Manifest this update: Thu 19 Jun 2025 06:37:26 +0000 Manifest next update: Thu 26 Jun 2025 06:37:26 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: 4P92Q5uZ/fGVm3KeAbNO8Ks9AV1wiVO6eGop/XFOcsM=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Jun 19 06:37:26 2025 GMT Not After : Jun 26 06:37:26 2025 GMT Subject: CN=6853b027-3ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:a9:90:7f:e8:03:14:b3:9b:85:4c:5d:02: 45:ad:8b:da:40:f1:af:4d:64:71:34:94:41:ee:2a: e2:78:dd:07:3a:92:0b:3b:33:70:cd:7c:22:54:b8: 48:61:c5:48:dc:f0:d2:de:84:5f:d1:1e:57:06:ad: c4:9e:80:35:ee:09:d2:b7:e1:7b:d4:11:0c:17:71: 31:13:5d:0b:61:ff:ea:21:04:91:2e:cd:85:69:52: 8d:5c:97:23:ce:57:78:a4:5d:8e:aa:60:99:7e:20: 55:29:25:12:8b:c9:12:7a:62:15:df:7c:dd:e4:aa: f4:a7:e8:6a:6d:1b:59:1f:f1:15:8a:f8:7d:7f:8a: 34:76:16:ed:e6:a6:64:dd:55:43:c0:bb:2a:4c:6f: 9c:6b:bb:c2:a5:04:25:e0:0f:4e:26:0c:f6:1f:11: e7:df:87:80:82:b1:d7:aa:3e:fd:c2:ef:10:0f:e3: e1:7e:10:59:d5:e9:4f:e7:26:e8:e5:8f:46:52:c1: f9:5c:94:af:a8:fe:d9:a8:4b:00:05:e5:43:bd:15: 77:f6:d9:d1:bf:48:62:1e:1a:ed:4e:5f:cb:79:be: 3b:fc:97:a8:36:32:53:9e:42:08:c0:a6:38:f9:fb: 6d:0f:2d:14:1e:22:ca:97:df:92:f3:25:04:aa:a6: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:B3:BA:BA:34:06:0E:5A:9D:44:B2:1F:51:C9:46:BC:F4:68:6F X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6b:c3:c7:5a:f2:88:ac:cb:33:f0:df:30:88:2c:86:aa:58: 53:c6:fb:2b:4d:41:a0:cd:e0:bf:f8:76:da:fb:f4:55:c0:e4: 27:ff:13:80:b6:d8:22:3f:3a:ca:b2:df:64:29:a7:62:fe:3b: 3c:74:29:a5:88:62:2d:04:d2:51:21:b6:e0:12:33:a8:d3:cc: a4:ac:28:89:26:e0:d9:26:55:7b:b0:81:22:5b:0c:d0:b7:09: 95:68:db:12:d1:cf:0b:15:70:c4:24:a6:05:00:4b:f6:aa:b3: ca:6a:ea:a7:21:d6:fe:ed:80:8a:73:3a:00:3a:22:0f:5f:52: 3f:8e:ff:de:63:53:f1:4f:36:2c:49:71:2c:f3:2f:20:8b:b4: dc:4a:82:f6:e1:16:20:b6:79:b6:04:3d:83:2c:75:c6:5a:9f: dc:2e:dc:4b:54:dd:24:11:14:d0:72:db:ad:cd:53:2e:9d:52: 22:14:da:b4:d0:1c:ea:8f:93:3d:50:5a:0c:29:a1:ce:55:2d: 0c:19:23:36:ad:e6:9d:97:44:26:39:17:94:7c:c5:3a:a0:83: 28:07:5c:88:a0:fc:4c:40:f6:aa:1b:00:7c:aa:95:8b:52:d1: 2a:ee:59:89:0e:2a:2c:43:2f:3e:36:50:aa:64:3b:c7:c0:75: ac:53:e7:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoNjI0Qjk2RTFENjY1RUQ3OEU3OERGQUY2QzIyMDE5MTA3 M0RCNjZDQzAeFw0yNTA2MTkwNjM3MjZaFw0yNTA2MjYwNjM3MjZaMBgxFjAUBgNV BAMTDTY4NTNiMDI3LTNhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC83qmQf+gDFLObhUxdAkWti9pA8a9NZHE0lEHuKuJ43Qc6kgs7M3DNfCJUuEhh xUjc8NLehF/RHlcGrcSegDXuCdK34XvUEQwXcTETXQth/+ohBJEuzYVpUo1clyPO V3ikXY6qYJl+IFUpJRKLyRJ6YhXffN3kqvSn6GptG1kf8RWK+H1/ijR2Fu3mpmTd VUPAuypMb5xru8KlBCXgD04mDPYfEeffh4CCsdeqPv3C7xAP4+F+EFnV6U/nJujl j0ZSwflclK+o/tmoSwAF5UO9FXf22dG/SGIeGu1OX8t5vjv8l6g2MlOeQgjApjj5 +20PLRQeIsqX35LzJQSqpn7pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBjqzuro0 Bg5anUSyH1HJRrz0aG8wHwYDVR0jBBgwFoAUYkuW4dZl7Xjnjfr2wiAZEHPbZsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0MxMTJGNTVDRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWWt1VzRkWmw3WGpuamZyMndpQVpFSFBiWnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0MxMTJGNTVDRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hq bmpmcjJ3aUFaRUhQYlpzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1rw8da8oisyzPw3zCILIaqWFPG+ytNQaDN4L/4dtr79FXA5Cf/E4C2 2CI/Osqy32Qpp2L+Ozx0KaWIYi0E0lEhtuASM6jTzKSsKIkm4NkmVXuwgSJbDNC3 CZVo2xLRzwsVcMQkpgUAS/aqs8pq6qch1v7tgIpzOgA6Ig9fUj+O/95jU/FPNixJ cSzzLyCLtNxKgvbhFiC2ebYEPYMsdcZan9wu3EtU3SQRFNBy263NUy6dUiIU2rTQ HOqPkz1QWgwpoc5VLQwZIzat5p2XRCY5F5R8xTqggygHXIig/ExA9qobAHyqlYtS 0SruWYkOKixDLz42UKpkO8fAdaxT5z4= -----END CERTIFICATE-----Generated at Thu Jun 19 08:39:59 2025 by rpki-client