$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json) Hash identifier: egs7WQoAts02lTwiuMw1v2Kt2h+uL+aGI7YomsFwwkM= Subject key identifier: A2:DE:66:E7:BE:2B:C8:19:2C:16:BD:6E:7E:93:9A:D5:0E:CD:C2:7E Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft Manifest number: AE Signing time: Wed 18 Jun 2025 21:36:17 +0000 Manifest this update: Wed 18 Jun 2025 21:36:16 +0000 Manifest next update: Wed 25 Jun 2025 21:36:16 +0000 Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: SWVmFo8F7ddYAiDXftSqtj3ygNSGGAYuIaj3foXA8Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Validity Not Before: Jun 18 21:36:16 2025 GMT Not After : Jun 25 21:36:16 2025 GMT Subject: CN=68533151-5d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:48:20:61:a3:5c:d7:37:9d:74:d3:1f:30: fc:c7:4b:1f:ee:44:3a:cd:fd:37:15:28:25:d0:fa: 59:3d:33:93:e6:ed:47:c0:fa:a7:5f:55:4c:f4:02: fd:72:af:36:07:df:74:2f:66:4f:2b:e5:62:77:d4: bb:7c:7d:56:85:af:89:17:f3:6b:78:09:79:59:0c: 31:cb:0a:8c:77:02:c9:09:95:31:ea:65:a3:d7:9d: b1:cb:29:b6:6d:dd:12:71:0e:3f:e0:54:33:69:ea: f0:af:19:8e:8e:39:77:bf:2f:fe:bc:0a:01:35:32: 6e:ac:61:da:8b:26:4e:ba:61:1c:13:1e:f7:ba:53: de:0c:f8:df:01:13:e1:6e:9d:ea:06:b0:d7:f3:86: 1c:02:8a:fa:6d:f2:52:3a:d6:cf:24:34:e5:5c:3b: 66:83:e5:61:76:47:1c:4e:86:f3:0e:97:4e:4b:3a: 44:ec:b6:9a:36:33:a5:7f:51:8c:16:04:ff:d8:12: 6c:b7:63:b1:7a:05:15:e4:25:77:17:45:05:1b:8f: 33:01:ea:2c:2e:a2:56:9f:fb:f1:ca:bb:d6:47:0d: e3:56:a6:bf:a2:e3:70:0a:d5:48:b4:be:df:5c:bf: f7:c0:be:b9:d9:cd:4a:75:a7:f7:c3:b4:cd:b5:a4: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DE:66:E7:BE:2B:C8:19:2C:16:BD:6E:7E:93:9A:D5:0E:CD:C2:7E X509v3 Authority Key Identifier: keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:50:be:58:36:ac:ad:93:77:26:ec:59:b9:d8:aa:f1:f3:6a: a2:f7:2b:c1:33:77:c0:0d:30:3d:1e:e9:95:fe:08:f4:78:e6: e8:e4:a7:63:e5:73:35:8a:ef:cb:99:8c:3c:b3:e6:b0:ed:5d: a3:50:10:85:a2:9b:c8:21:4c:0f:a9:93:f3:e5:41:5d:12:90: 46:8b:f3:bf:ee:a5:09:63:42:2a:72:ae:fa:fb:ac:94:0d:67: a0:f4:cb:f8:6f:15:60:a7:ff:f1:fa:2d:a1:cb:3a:72:d8:02: d8:45:d6:79:3f:6d:d1:b9:8a:11:7a:63:51:23:ab:68:8d:56: 62:9f:aa:b2:f8:f5:ea:dc:d4:1f:ab:3d:c7:ae:a5:f1:ba:9f: 83:64:96:8c:6a:bc:1a:35:0d:8b:c9:fc:65:4c:9d:64:3f:80: e8:44:d1:bb:78:ce:4d:38:84:26:53:e1:2a:a1:9c:7e:18:5a: 49:f4:ff:80:91:7f:19:c7:22:4c:6c:e3:ab:81:b7:2e:47:ac: 56:71:8b:91:b5:0e:f7:20:00:20:8d:47:91:9e:9e:a5:9d:19: 4e:ae:b2:59:5d:d6:8d:ad:cf:12:f8:9b:14:b3:77:9e:d9:9b: 5d:a4:d4:86:1b:ed:f5:34:af:38:af:bd:5b:d7:69:a9:ba:f7: c6:ac:24:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2 Mzc1NDFFNUQwHhcNMjUwNjE4MjEzNjE2WhcNMjUwNjI1MjEzNjE2WjAYMRYwFAYD VQQDEw02ODUzMzE1MS01ZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG1IIGGjXNc3nXTTHzD8x0sf7kQ6zf03FSgl0PpZPTOT5u1HwPqnX1VM9AL9 cq82B990L2ZPK+Vid9S7fH1Wha+JF/NreAl5WQwxywqMdwLJCZUx6mWj152xyym2 bd0ScQ4/4FQzaerwrxmOjjl3vy/+vAoBNTJurGHaiyZOumEcEx73ulPeDPjfARPh bp3qBrDX84YcAor6bfJSOtbPJDTlXDtmg+VhdkccTobzDpdOSzpE7LaaNjOlf1GM FgT/2BJst2OxegUV5CV3F0UFG48zAeosLqJWn/vxyrvWRw3jVqa/ouNwCtVItL7f XL/3wL652c1Kdaf3w7TNtaTr3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLeZue+ K8gZLBa9bn6TmtUOzcJ+MB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0 OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3 UldTSDloX3VhWk5qZFVIbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApUL5YNqytk3cm7Fm52Krx82qi9yvBM3fADTA9HumV/gj0eObo5Kdj 5XM1iu/LmYw8s+aw7V2jUBCFopvIIUwPqZPz5UFdEpBGi/O/7qUJY0Iqcq76+6yU DWeg9Mv4bxVgp//x+i2hyzpy2ALYRdZ5P23RuYoRemNRI6tojVZin6qy+PXq3NQf qz3HrqXxup+DZJaMarwaNQ2LyfxlTJ1kP4DoRNG7eM5NOIQmU+EqoZx+GFpJ9P+A kX8ZxyJMbOOrgbcuR6xWcYuRtQ73IAAgjUeRnp6lnRlOrrJZXdaNrc8S+JsUs3ee 2ZtdpNSGG+31NK84r71b12mpuvfGrCQt -----END CERTIFICATE-----Generated at Fri Jun 20 07:51:56 2025 by rpki-client