$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: f8iHkevU1De3V6+z/84eGcoeTvgHk1fTTfUaVkN42l4= Subject key identifier: 11:39:C6:47:E1:3B:EB:27:92:09:13:C4:B2:73:86:5D:26:12:C6:8B Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 0697 Signing time: Fri 20 Jun 2025 22:02:54 +0000 Manifest this update: Fri 20 Jun 2025 22:02:54 +0000 Manifest next update: Fri 27 Jun 2025 22:02:54 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: 7r8CwqF5S60NmbQkqe2xFDkRMUO7/6uJHJP2oTwhncQ=) 2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: Jun 20 22:02:54 2025 GMT Not After : Jun 27 22:02:54 2025 GMT Subject: CN=6855da8e-3ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:68:80:94:11:23:56:f5:e9:74:dc:22:2f: 9c:c8:02:71:aa:5b:43:d6:29:1e:b6:c8:e4:f5:94: 27:8e:68:fc:05:a7:5e:b9:a3:fe:83:0b:a9:cb:0a: 5b:b4:05:af:8a:05:a7:7d:08:e4:a8:89:72:33:94: 9b:1d:fa:91:8c:8a:b3:b6:e3:7d:ec:84:22:14:7f: 64:96:71:16:82:d0:75:d6:28:9e:56:cc:04:76:70: 7b:b8:29:64:b7:0a:bf:09:7e:34:59:95:30:55:e6: 7c:94:4b:59:94:ab:99:05:95:f1:3d:06:c8:4f:93: ed:59:63:13:06:41:97:31:a4:f3:a6:db:41:e3:3c: 69:f3:4d:fc:17:20:5e:65:8b:19:7e:91:ba:f9:dc: ec:5e:36:82:47:d2:c9:d6:2d:12:d5:5d:ca:04:a6: 28:84:d4:b0:6e:48:a9:19:89:05:49:1a:4c:8d:c5: 27:7d:59:f3:72:a4:fe:cb:d6:c7:90:2c:04:07:94: bd:1f:62:4a:38:33:0a:6e:6f:6c:5c:f2:80:af:c3: 21:d5:d1:05:78:fd:47:dd:e4:3d:24:b9:db:19:92: f1:2f:b3:f4:20:52:b5:90:0b:6c:7c:f4:e3:47:08: 86:71:b4:a9:e5:90:85:35:ff:ed:56:37:b6:09:d2: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:C6:47:E1:3B:EB:27:92:09:13:C4:B2:73:86:5D:26:12:C6:8B X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:87:74:36:88:18:c3:a5:e8:b9:10:c3:84:7c:9a:a2:24:fd: e1:d3:db:e6:f8:fb:db:53:b2:d6:cd:e1:bc:db:f5:63:50:90: 2c:d8:82:e8:5c:46:af:d4:b0:85:38:61:6a:89:1a:ab:c2:40: 24:1e:41:8c:dd:e3:81:3f:04:d4:04:44:aa:61:08:2e:16:81: 8f:63:74:a0:1f:b6:fa:dd:e5:2a:c2:ec:83:f4:64:cf:be:ce: a1:60:8d:66:76:70:da:c9:96:a4:ce:10:7c:b5:ce:c1:36:b8: 04:cd:bd:5a:f4:9a:bf:e3:55:68:54:b6:a9:17:b5:24:4a:56: e7:67:e9:96:dd:6b:83:42:2f:a7:3e:8d:3f:c2:63:b0:8f:28: da:d4:dd:bb:92:a3:02:d4:98:27:15:8e:d6:de:43:db:6c:ad: f0:00:55:d0:ef:c2:83:92:9d:da:f2:f3:d1:4a:09:fc:de:f1: bb:ac:dc:4e:21:6d:bf:4e:01:b4:0f:b7:84:40:1a:78:29:d6: 88:b2:fd:fc:e4:0a:4a:f9:6d:81:39:17:97:bf:1d:a4:c3:3d: 1b:e9:d7:5b:3f:4a:ef:a5:9b:b8:5e:2a:90:fb:ce:b5:3b:62: f6:01:59:3e:fa:c5:76:ee:19:de:72:65:c4:99:ec:ba:25:09: 75:94:17:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjUwNjIwMjIwMjU0WhcNMjUwNjI3MjIwMjU0WjAYMRYwFAYD VQQDEw02ODU1ZGE4ZS0zZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfdogJQRI1b16XTcIi+cyAJxqltD1iketsjk9ZQnjmj8BadeuaP+gwupywpb tAWvigWnfQjkqIlyM5SbHfqRjIqztuN97IQiFH9klnEWgtB11iieVswEdnB7uClk twq/CX40WZUwVeZ8lEtZlKuZBZXxPQbIT5PtWWMTBkGXMaTzpttB4zxp8038FyBe ZYsZfpG6+dzsXjaCR9LJ1i0S1V3KBKYohNSwbkipGYkFSRpMjcUnfVnzcqT+y9bH kCwEB5S9H2JKODMKbm9sXPKAr8Mh1dEFeP1H3eQ9JLnbGZLxL7P0IFK1kAtsfPTj RwiGcbSp5ZCFNf/tVje2CdIbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE5xkfh O+snkgkTxLJzhl0mEsaLMB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5h3Q2iBjDpei5EMOEfJqiJP3h09vm+PvbU7LWzeG82/VjUJAs2ILo XEav1LCFOGFqiRqrwkAkHkGM3eOBPwTUBESqYQguFoGPY3SgH7b63eUqwuyD9GTP vs6hYI1mdnDayZakzhB8tc7BNrgEzb1a9Jq/41VoVLapF7UkSlbnZ+mW3WuDQi+n Po0/wmOwjyja1N27kqMC1JgnFY7W3kPbbK3wAFXQ78KDkp3a8vPRSgn83vG7rNxO IW2/TgG0D7eEQBp4KdaIsv385ApK+W2BOReXvx2kwz0b6ddbP0rvpZu4XiqQ+861 O2L2AVk++sV27hnecmXEmey6JQl1lBcq -----END CERTIFICATE-----Generated at Sat Jun 21 07:58:36 2025 by rpki-client