$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: FsySKR3zyU/bN5UouEFXRWlq+9wDrPUzgd+yn0v3pLA= Subject key identifier: 53:E7:80:34:21:92:84:54:A7:DD:E3:FA:15:E6:D5:1F:BF:98:E7:60 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 0198 Signing time: Fri 13 Jun 2025 02:28:07 +0000 Manifest this update: Fri 13 Jun 2025 02:28:07 +0000 Manifest next update: Fri 20 Jun 2025 02:28:07 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: +rZ7zuzbo2gbpaCxSQXlS+hzPt2TQDkRgTnq/oOX0hI=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Jun 13 02:28:07 2025 GMT Not After : Jun 20 02:28:07 2025 GMT Subject: CN=684b8cb7-c8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:0c:e4:19:18:26:fb:2c:b0:c2:95:de:dd: 2e:f2:eb:f5:91:eb:04:a3:97:13:c5:1f:32:6a:e3: f7:ef:04:43:e4:fd:15:a6:83:ff:10:08:60:2b:08: 7b:e4:b1:66:c6:06:1a:da:eb:bf:c5:09:50:b7:5b: a9:a0:bf:e0:e9:ae:ec:52:90:2d:f2:13:a1:25:10: a7:a2:2b:23:53:af:a3:7e:ab:ad:d5:66:23:09:22: 4c:b1:5b:f9:ea:d0:c0:0f:95:92:e5:2a:1d:10:2c: 7b:9d:0d:49:26:af:ea:1a:f5:dc:68:5d:78:90:27: 0a:75:33:7a:de:32:fc:91:7b:9e:03:03:a8:9e:2f: 55:db:fc:a7:f4:ee:7d:cd:32:33:6e:d0:c6:90:ee: 50:b2:36:61:93:a8:40:3c:96:ae:bf:9d:01:b7:11: 1c:1d:f5:e1:34:42:5f:07:6b:94:c3:85:a1:03:8d: 08:c5:cf:41:4d:4e:55:b9:4b:16:b3:be:c2:c7:1d: e2:b2:ef:a7:cd:8d:7c:05:a9:16:0d:c6:87:85:f1: 70:93:69:4a:f5:2c:4a:d6:55:95:ee:f1:b7:96:00: 0d:dc:d1:59:58:f1:4f:f9:bc:b2:b4:e1:3c:24:ad: 55:d2:45:13:06:c4:34:fa:8c:77:38:a3:07:95:af: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:80:34:21:92:84:54:A7:DD:E3:FA:15:E6:D5:1F:BF:98:E7:60 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a7:0e:7d:86:42:fa:e5:3e:c6:ba:b4:98:7b:ef:46:34:c4: c8:45:59:22:f0:3c:89:18:02:69:29:48:10:f5:d0:75:92:29: 59:27:24:de:dd:fd:41:82:cb:c0:4a:c3:5e:6d:e8:02:9a:2f: 53:f3:fa:7d:93:95:39:20:a6:a4:98:e9:44:d9:5b:74:e6:1d: d3:0b:b5:26:d5:b4:d8:7a:e6:1e:56:e4:d3:47:b5:3b:34:45: f7:7d:77:12:4e:cb:e4:df:ee:d7:22:d4:be:3f:89:92:cb:98: 89:c2:43:df:c8:fe:f3:4f:b3:16:0e:52:d6:f2:26:fa:dc:13: a4:cc:6a:ca:2a:6c:c2:40:95:66:20:b4:5e:62:5d:5b:bf:66: 2c:45:3d:6a:0a:07:89:5a:d2:70:02:60:96:40:ef:fe:cc:5f: 86:0a:cd:8d:06:26:2d:50:80:a8:2c:b6:4b:04:ed:f3:b1:a4: fd:d2:80:17:57:6e:13:2d:cf:62:2c:6b:33:cf:54:6e:90:6d: 12:97:cb:50:d7:3d:8c:10:29:6b:85:b4:19:2d:e0:7d:05:f4: a3:b4:be:e9:be:5e:96:d0:30:56:40:ca:7b:2d:e4:44:f8:90: 00:6f:2d:2d:49:48:9f:57:dd:5d:d9:fc:eb:20:40:65:eb:47: e4:2e:52:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwNjEzMDIyODA3WhcNMjUwNjIwMDIyODA3WjAYMRYwFAYD VQQDEw02ODRiOGNiNy1jOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy8M5BkYJvsssMKV3t0u8uv1kesEo5cTxR8yauP37wRD5P0VpoP/EAhgKwh7 5LFmxgYa2uu/xQlQt1upoL/g6a7sUpAt8hOhJRCnoisjU6+jfqut1WYjCSJMsVv5 6tDAD5WS5SodECx7nQ1JJq/qGvXcaF14kCcKdTN63jL8kXueAwOoni9V2/yn9O59 zTIzbtDGkO5QsjZhk6hAPJauv50BtxEcHfXhNEJfB2uUw4WhA40Ixc9BTU5VuUsW s77Cxx3isu+nzY18BakWDcaHhfFwk2lK9SxK1lWV7vG3lgAN3NFZWPFP+byytOE8 JK1V0kUTBsQ0+ox3OKMHla/aLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPngDQh koRUp93j+hXm1R+/mOdgMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAepw59hkL65T7GurSYe+9GNMTIRVki8DyJGAJpKUgQ9dB1kilZJyTe 3f1BgsvASsNebegCmi9T8/p9k5U5IKakmOlE2Vt05h3TC7Um1bTYeuYeVuTTR7U7 NEX3fXcSTsvk3+7XItS+P4mSy5iJwkPfyP7zT7MWDlLW8ib63BOkzGrKKmzCQJVm ILReYl1bv2YsRT1qCgeJWtJwAmCWQO/+zF+GCs2NBiYtUICoLLZLBO3zsaT90oAX V24TLc9iLGszz1RukG0Sl8tQ1z2MEClrhbQZLeB9BfSjtL7pvl6W0DBWQMp7LeRE +JAAby0tSUifV91d2fzrIEBl60fkLlIq -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:59 2025 by rpki-client