$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: PkWzhEafftU6/uu6qPA5Bhn4riopxLcfcNsIDxnxBLE= Subject key identifier: 9A:34:B4:99:1C:D2:3E:E8:C4:EC:2A:0A:F9:4B:78:DA:70:42:3F:FF Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: BA Signing time: Thu 19 Jun 2025 05:13:09 +0000 Manifest this update: Thu 19 Jun 2025 05:13:08 +0000 Manifest next update: Thu 26 Jun 2025 05:13:08 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: K8YlUCr197K5zTDJsQD4d1fCQIaQKBz7XJ9Kzyc/lxw=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: Etmj0xt/W0SmV0Orr2NUt8hTe4pIwfnUtLKYwnR9+RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Jun 19 05:13:08 2025 GMT Not After : Jun 26 05:13:08 2025 GMT Subject: CN=68539c64-d2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:7e:50:11:a6:a2:f2:31:d5:49:79:cf:f8: 7c:71:32:4c:22:af:d0:99:13:36:1e:8c:3d:d3:b6: d8:6b:b2:b1:ac:2e:a0:34:c6:aa:ad:b8:3f:3e:ce: 26:f2:34:ba:7e:6f:92:56:7c:ae:2c:96:80:e1:9f: e9:98:38:83:18:0e:29:0b:f1:39:37:78:12:45:e1: 78:7e:df:70:56:dd:27:2a:98:30:fd:87:d0:d6:64: b4:2a:7a:86:be:be:a1:ce:f1:26:10:58:8c:eb:91: c2:b6:28:86:65:ca:48:f6:7c:cb:2c:10:0f:ff:a8: 22:dc:d6:ee:a7:11:fc:95:22:f5:94:99:46:ed:49: ae:cb:7e:2b:a8:c4:94:3e:de:c4:89:16:18:01:6d: 45:e8:29:e3:37:f5:08:d5:5b:92:f8:06:0c:99:02: c9:00:75:c4:f2:97:51:8e:27:fc:37:d6:26:e1:33: c5:22:55:4e:9d:ac:4f:57:2a:98:a0:9a:dd:02:ae: 98:20:85:bb:8c:a5:b4:56:71:0d:82:4a:c9:8a:5e: 56:93:a1:10:74:16:53:30:bf:72:fb:75:9f:d2:f3: 1b:31:9c:e4:9c:61:86:f8:b1:73:a9:97:93:83:4b: f4:ed:b9:76:c8:a1:f8:63:a0:10:6a:b5:d9:d1:3c: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:B4:99:1C:D2:3E:E8:C4:EC:2A:0A:F9:4B:78:DA:70:42:3F:FF X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e2:cc:e9:95:28:18:b1:f5:5b:a2:7c:70:8e:6b:bb:6c:6d: b8:39:b2:44:72:aa:e9:4b:f9:04:d8:80:0d:c1:d0:74:a7:ee: 7d:fe:10:5c:4d:1e:0a:4d:50:a8:53:75:a5:4b:48:4e:cb:e5: fe:52:47:3d:ed:c3:2e:ae:02:8d:00:78:60:b4:3d:b0:e7:7d: b0:62:4b:01:bb:27:6a:14:63:3a:6e:88:7c:96:69:f6:c7:b6: 1d:86:f9:80:a9:dc:8f:09:a7:99:93:a4:81:c8:d5:57:3d:24: b0:56:3e:59:7b:85:f6:6a:82:ee:44:a9:08:21:97:10:cd:32: 31:be:b5:98:35:4e:ac:62:2f:e4:24:a2:d5:63:9b:78:ca:19: 7c:94:6a:42:ab:bb:7f:68:07:83:52:41:f7:72:44:19:74:60: a8:de:6c:cf:a3:2d:3a:77:63:ce:63:f9:6a:0d:4f:34:fa:26: 06:42:49:78:ef:cf:fb:e4:5c:d5:b6:c1:13:ee:99:b7:76:36: 68:12:f3:72:c3:59:c2:db:32:c6:3f:aa:5d:35:e2:30:20:eb: 33:f1:cd:ee:90:77:3c:cc:fd:7e:55:f1:4a:f3:cc:1a:b2:e8: d3:01:f4:ba:9a:2f:72:4b:59:ef:88:51:47:72:a5:b9:b5:0e: cf:e3:f6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUwNjE5MDUxMzA4WhcNMjUwNjI2MDUxMzA4WjAYMRYwFAYD VQQDEw02ODUzOWM2NC1kMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KN+UBGmovIx1Ul5z/h8cTJMIq/QmRM2How907bYa7KxrC6gNMaqrbg/Ps4m 8jS6fm+SVnyuLJaA4Z/pmDiDGA4pC/E5N3gSReF4ft9wVt0nKpgw/YfQ1mS0KnqG vr6hzvEmEFiM65HCtiiGZcpI9nzLLBAP/6gi3NbupxH8lSL1lJlG7Umuy34rqMSU Pt7EiRYYAW1F6CnjN/UI1VuS+AYMmQLJAHXE8pdRjif8N9Ym4TPFIlVOnaxPVyqY oJrdAq6YIIW7jKW0VnENgkrJil5Wk6EQdBZTML9y+3Wf0vMbMZzknGGG+LFzqZeT g0v07bl2yKH4Y6AQarXZ0TwTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo0tJkc 0j7oxOwqCvlLeNpwQj//MB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV4szplSgYsfVbonxwjmu7bG24ObJEcqrpS/kE2IANwdB0p+59/hBc TR4KTVCoU3WlS0hOy+X+Ukc97cMurgKNAHhgtD2w532wYksBuydqFGM6boh8lmn2 x7YdhvmAqdyPCaeZk6SByNVXPSSwVj5Ze4X2aoLuRKkIIZcQzTIxvrWYNU6sYi/k JKLVY5t4yhl8lGpCq7t/aAeDUkH3ckQZdGCo3mzPoy06d2POY/lqDU80+iYGQkl4 78/75FzVtsET7pm3djZoEvNyw1nC2zLGP6pdNeIwIOsz8c3ukHc8zP1+VfFK88wa sujTAfS6mi9yS1nviFFHcqW5tQ7P4/Ya -----END CERTIFICATE-----Generated at Fri Jun 20 00:33:35 2025 by rpki-client