$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: i3VISLgZNevId/4j1OyhktzJw7JxTRq6AIDeMP2LGi8= Subject key identifier: 66:09:E7:7D:43:F8:A0:46:AF:B8:48:B7:A9:8D:A0:8A:6B:BE:DB:FB Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 69 Signing time: Tue 17 Jun 2025 05:51:42 +0000 Manifest this update: Tue 17 Jun 2025 05:51:41 +0000 Manifest next update: Tue 24 Jun 2025 05:51:41 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: 7NqOzuz3c17aGKCRDyto19csnaN9x9jPt2R+F3un7qs=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Jun 17 05:51:41 2025 GMT Not After : Jun 24 05:51:41 2025 GMT Subject: CN=6851026d-4287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:e8:6a:2e:bb:83:ef:d3:f8:f2:4f:70:b5: 5f:c5:66:cf:a6:a2:70:89:b3:68:8d:36:d0:6d:67: 4f:1a:7c:40:3a:ba:90:72:e9:7a:34:39:ca:06:80: 85:04:53:5e:07:22:25:a6:1c:6b:92:7d:c4:16:d8: 53:c5:9e:06:a3:7e:55:fe:c2:e5:af:b0:0b:d3:1b: 24:d0:e5:7f:6e:c6:7e:23:6e:00:40:d1:3d:ce:1b: b9:de:be:81:62:ef:35:8c:1d:e7:30:6c:6e:03:49: 1a:56:d9:40:14:77:ae:ed:f5:6b:10:b2:bf:20:6f: 95:ca:36:eb:07:52:21:b7:c7:a2:67:10:14:39:2a: 88:2e:bd:75:6a:cf:80:ab:fe:9f:59:ff:a9:8b:2f: 0f:16:64:ec:99:08:b4:5f:e4:e8:0e:de:5c:f7:79: 06:12:39:35:64:0b:24:08:58:a5:a2:67:0f:7d:7e: 1f:ed:1e:af:84:ae:0c:b7:2b:37:ce:45:4a:f8:cd: da:b0:43:5e:9c:3b:fb:ea:5c:1d:2c:e3:b3:f9:a2: 47:3e:07:15:83:61:62:e6:7a:a4:c7:9b:0c:0e:85: d9:9c:b9:28:d7:50:f9:69:60:7f:a7:3a:05:fc:3e: da:54:ef:5a:93:d9:3c:2c:62:14:4b:a4:18:92:a6: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:09:E7:7D:43:F8:A0:46:AF:B8:48:B7:A9:8D:A0:8A:6B:BE:DB:FB X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c0:e0:7b:62:02:49:e8:9e:0f:ed:e0:75:63:60:4f:d3:af: c9:35:a2:e9:ea:2a:16:3d:eb:c3:14:06:76:50:d3:8a:28:b1: 1c:55:ad:cd:a4:a6:03:9f:4c:b1:9c:9f:a0:d3:49:f9:7c:cc: 40:10:b9:82:c2:7d:eb:e7:11:54:e2:b9:9c:ce:f4:51:df:c8: cf:8b:32:d2:ab:8a:4d:d8:6b:7d:9e:c1:79:cc:64:cf:73:5a: fa:3d:e0:2e:d8:95:6c:a7:f1:52:79:cd:f2:78:02:27:65:2a: 7e:8a:da:ea:fb:f2:95:37:58:7f:3f:d5:b2:fe:de:29:6a:7b: c1:93:40:2c:6f:2e:1b:12:86:69:26:09:51:fd:e8:de:cb:29: c7:ff:c1:61:15:07:90:8f:3d:56:02:8f:8b:3f:a0:c4:e9:c8: d8:9e:a1:96:89:3f:d6:99:70:22:bc:94:6b:be:be:6f:0c:94: 87:46:da:49:16:ae:f3:44:5b:13:58:8a:32:7b:84:7c:70:f7: 7d:9f:90:32:b8:57:18:b4:bf:e8:2e:4d:09:da:d3:38:60:ae: 12:39:12:4d:81:c3:ec:7d:c7:9f:4c:9a:12:62:4e:40:0e:0e: 46:50:f5:46:2d:42:e6:d7:31:da:3d:d9:c6:6a:15:43:72:6e: fd:cc:f2:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkZDNTExMC8GA1UEBRMoRkQ4OERFRjlBNkJEREJFQTU5Mzg5RURDNjE3MUFBRENB MTA2QjUwOTAeFw0yNTA2MTcwNTUxNDFaFw0yNTA2MjQwNTUxNDFaMBgxFjAUBgNV BAMTDTY4NTEwMjZkLTQyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb9uhqLruD79P48k9wtV/FZs+monCJs2iNNtBtZ08afEA6upBy6Xo0OcoGgIUE U14HIiWmHGuSfcQW2FPFngajflX+wuWvsAvTGyTQ5X9uxn4jbgBA0T3OG7nevoFi 7zWMHecwbG4DSRpW2UAUd67t9WsQsr8gb5XKNusHUiG3x6JnEBQ5KoguvXVqz4Cr /p9Z/6mLLw8WZOyZCLRf5OgO3lz3eQYSOTVkCyQIWKWiZw99fh/tHq+Ergy3KzfO RUr4zdqwQ16cO/vqXB0s47P5okc+BxWDYWLmeqTHmwwOhdmcuSjXUPlpYH+nOgX8 PtpU71qT2TwsYhRLpBiSpkNNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZgnnfUP4 oEavuEi3qY2gimu+2/swHwYDVR0jBBgwFoAU/Yje+aa92+pZOJ7cYXGq3KEGtQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyRkM1L0VEQUJEMjMwQUIz RjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1lqZS1hYTkyLXBaT0o3Y1lYR3EzS0VHdFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy RkM1L0VEQUJEMjMwQUIzRjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1w Wk9KN2NZWEdxM0tFR3RRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKjA4HtiAknong/t4HVjYE/Tr8k1ounqKhY968MUBnZQ04oosRxVrc2k pgOfTLGcn6DTSfl8zEAQuYLCfevnEVTiuZzO9FHfyM+LMtKrik3Ya32ewXnMZM9z Wvo94C7YlWyn8VJ5zfJ4AidlKn6K2ur78pU3WH8/1bL+3ilqe8GTQCxvLhsShmkm CVH96N7LKcf/wWEVB5CPPVYCj4s/oMTpyNieoZaJP9aZcCK8lGu+vm8MlIdG2kkW rvNEWxNYijJ7hHxw932fkDK4Vxi0v+guTQna0zhgrhI5Ek2Bw+x9x59MmhJiTkAO DkZQ9UYtQubXMdo92cZqFUNybv3M8os= -----END CERTIFICATE-----Generated at Wed Jun 18 08:17:40 2025 by rpki-client