$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: ZAOYKJDGiV7/2Ff8lWBC3g/V2eBzZKE2WXTyfuzmgzA= Subject key identifier: 91:51:A3:0C:3B:AD:F1:F8:92:B8:E1:7A:B7:E4:3C:25:9B:C6:39:80 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 07E2 Signing time: Sat 14 Jun 2025 20:50:35 +0000 Manifest this update: Sat 14 Jun 2025 20:50:34 +0000 Manifest next update: Sat 21 Jun 2025 20:50:34 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: 7O3naHsVrOBfYdsTNOEkBGDs4XCD+8g29UlfNXd04/o=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Jun 14 20:50:34 2025 GMT Not After : Jun 21 20:50:34 2025 GMT Subject: CN=684de09b-a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:1a:c7:41:6b:ab:32:53:62:95:49:80:09: 5d:2e:a8:23:b4:bd:65:69:2c:4a:f9:ee:f5:1d:e1: 33:9d:81:f2:40:e0:91:d6:73:56:1e:d6:e5:bc:45: df:27:63:8d:59:78:ae:ca:30:64:42:45:b1:7b:34: 68:06:04:db:d8:e5:82:5e:2a:94:67:cf:8c:e4:6b: a1:b0:cc:6f:87:9c:0d:30:79:8f:7d:55:fe:51:cb: 82:a8:6b:a3:c4:fa:93:7f:54:28:32:54:70:60:16: 5c:46:d6:09:82:10:3d:94:d3:82:11:59:b8:ad:c8: 8f:44:9b:c0:91:13:5b:01:4d:76:09:23:2a:13:16: 90:e1:1f:49:1e:34:77:1b:30:58:c4:c2:14:ba:0b: e6:07:3e:2b:74:ee:d1:e7:0e:4a:80:89:bb:23:0f: 81:3b:5f:e2:40:28:2a:8f:83:de:be:49:92:7e:92: 5b:31:aa:68:55:10:6d:60:60:35:69:bb:6a:02:9a: 80:9d:e1:d0:ca:15:02:43:d2:77:ed:6c:44:c1:5c: 3f:02:c4:79:34:d9:59:71:30:e9:26:2a:e7:b9:c0: db:65:99:8d:5c:f5:ab:b1:41:6a:92:aa:73:24:72: 0c:bc:d7:9a:0f:ed:2d:cd:7c:2c:b4:62:10:d9:5a: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:A3:0C:3B:AD:F1:F8:92:B8:E1:7A:B7:E4:3C:25:9B:C6:39:80 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0f:62:05:59:4d:4a:a5:47:4f:ba:f7:ad:20:3e:1c:67:a4: 88:09:cc:54:18:5d:b0:9b:58:04:34:da:6c:ac:42:a8:57:95: 21:0b:5c:fe:8b:b8:b3:1d:d2:5d:b8:fb:8f:d8:41:25:2c:23: a0:3f:ea:b1:40:c2:90:51:51:bd:1d:e3:11:42:03:15:d0:85: bb:74:a5:51:86:6b:b5:71:8f:c8:a8:ea:a3:70:d9:c7:0c:ed: 51:53:3a:90:17:32:55:32:79:0c:f0:91:bc:78:bd:0f:5b:3f: c2:ce:01:86:71:b0:c2:ab:29:06:ca:fc:14:4c:6a:25:37:b7: b0:90:6d:10:ac:64:15:de:a4:0d:e1:eb:bb:3c:f4:c4:0d:57: 63:43:ba:67:04:57:58:80:3c:ef:4f:ce:8a:70:66:1e:38:6b: d6:25:74:e0:0f:c4:01:e2:8f:ce:a3:3c:96:f5:93:1e:f7:4b: e7:b6:28:da:c0:26:ab:a7:a0:8d:47:6d:b1:a5:18:fb:da:56: dd:1d:bc:a0:e3:1c:9f:52:49:99:7c:76:98:75:2c:72:6b:3b: 43:b2:02:e0:ee:68:c2:ba:63:94:65:6b:fb:38:39:17:7f:f4: 18:b9:64:a1:18:a9:7c:54:56:5b:51:6e:a1:65:a9:b3:3d:ac: e3:1f:8b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUwNjE0MjA1MDM0WhcNMjUwNjIxMjA1MDM0WjAYMRYwFAYD VQQDEw02ODRkZTA5Yi1hNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArakax0FrqzJTYpVJgAldLqgjtL1laSxK+e71HeEznYHyQOCR1nNWHtblvEXf J2ONWXiuyjBkQkWxezRoBgTb2OWCXiqUZ8+M5GuhsMxvh5wNMHmPfVX+UcuCqGuj xPqTf1QoMlRwYBZcRtYJghA9lNOCEVm4rciPRJvAkRNbAU12CSMqExaQ4R9JHjR3 GzBYxMIUugvmBz4rdO7R5w5KgIm7Iw+BO1/iQCgqj4PevkmSfpJbMapoVRBtYGA1 abtqApqAneHQyhUCQ9J37WxEwVw/AsR5NNlZcTDpJirnucDbZZmNXPWrsUFqkqpz JHIMvNeaD+0tzXwstGIQ2VosYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFRoww7 rfH4krjherfkPCWbxjmAMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdD2IFWU1KpUdPuvetID4cZ6SICcxUGF2wm1gENNpsrEKoV5UhC1z+ i7izHdJduPuP2EElLCOgP+qxQMKQUVG9HeMRQgMV0IW7dKVRhmu1cY/IqOqjcNnH DO1RUzqQFzJVMnkM8JG8eL0PWz/CzgGGcbDCqykGyvwUTGolN7ewkG0QrGQV3qQN 4eu7PPTEDVdjQ7pnBFdYgDzvT86KcGYeOGvWJXTgD8QB4o/OozyW9ZMe90vntija wCarp6CNR22xpRj72lbdHbyg4xyfUkmZfHaYdSxyaztDsgLg7mjCumOUZWv7ODkX f/QYuWShGKl8VFZbUW6hZamzPazjH4vF -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:26 2025 by rpki-client