$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: i3oduZ/cuNnKjVAR81m6VVmH2Dzt6sfLxDIX4KOYp9E= Subject key identifier: F0:C4:E2:41:04:55:47:90:86:9D:38:B7:75:DA:D4:CA:CF:E7:FC:E6 Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B52 Signing time: Thu 12 Jun 2025 18:57:50 +0000 Manifest this update: Thu 12 Jun 2025 18:57:49 +0000 Manifest next update: Thu 19 Jun 2025 18:57:49 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: a7EJkYAGwbx0dD2D2sT/uOPxC7yy7iRh1OfLoYZv26A=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Jun 12 18:57:49 2025 GMT Not After : Jun 19 18:57:49 2025 GMT Subject: CN=684b232e-dff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:1a:a5:83:77:b6:4a:d9:e1:42:81:04:82: de:a4:4f:05:f1:8d:58:f3:aa:5c:b7:62:09:11:8f: af:54:52:4b:ac:2a:e1:4b:77:97:d1:78:60:84:a6: 81:da:80:01:fb:ad:dd:6a:7c:b4:27:be:50:3a:2c: e2:86:ff:ad:b3:74:80:8b:a6:9d:e9:b1:01:21:95: d2:49:14:7c:96:55:8f:ce:05:b5:a9:72:25:23:f6: c2:53:3f:1a:e1:ee:65:5e:d6:d6:18:61:19:16:71: 45:0e:c9:f4:32:20:d0:67:f7:f7:1c:4e:30:73:8e: 0b:73:8e:fb:52:75:c3:31:5c:02:ed:e2:d6:fe:cf: 3e:a7:8d:1c:78:50:1e:ec:28:dd:e3:3a:62:2e:a8: 69:fb:41:48:4e:34:37:a7:00:05:02:e5:c4:ef:39: 5b:ce:a6:39:a1:33:f4:8f:2e:63:73:14:c8:74:7a: 2e:47:fe:b6:95:c6:5c:08:7a:09:57:31:aa:83:41: 84:95:c3:fa:9e:27:39:05:01:8f:31:e6:23:ae:a4: 16:11:4a:31:2c:c2:66:93:27:32:39:8f:74:f8:e4: da:01:35:c5:7e:ee:c5:62:f5:fa:3d:3d:69:ec:63: 0c:59:15:e4:9b:50:d6:82:44:07:ac:16:a3:d8:f4: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:E2:41:04:55:47:90:86:9D:38:B7:75:DA:D4:CA:CF:E7:FC:E6 X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:02:b3:03:be:40:77:4a:5f:98:18:28:de:d8:6d:29:8d:3d: 74:47:b7:8b:ad:0c:33:7c:ee:c1:2e:bd:d1:0a:da:09:26:04: eb:ec:e8:fc:91:a5:6e:33:d0:c1:ac:92:80:bf:00:cd:fa:0a: 49:c3:d4:5e:d8:d9:7f:46:a8:aa:a9:7f:03:95:8b:d8:f4:18: 0c:1c:fa:a8:9c:fd:89:9b:a9:52:5f:63:8e:ca:9d:23:4f:26: 09:f2:88:83:a8:53:2b:11:0a:ad:b4:c4:52:04:23:3e:5e:57: 85:8c:b0:d1:be:8c:11:7b:8d:62:0a:e3:de:40:69:97:5e:6e: a7:8f:40:5a:f0:f3:21:19:4b:12:db:ee:1a:10:75:c5:67:73: cc:fe:74:5e:43:54:6b:b3:a8:1d:71:ee:9b:f0:9e:f5:ea:ca: 88:15:48:e4:5a:f0:6b:a3:ec:fa:5e:b3:18:ce:10:4d:9e:f7: 8d:15:39:6e:ef:6d:41:72:61:34:a5:d8:28:43:2e:73:6c:25: d7:e3:25:15:80:71:d0:49:16:c5:3c:d6:54:92:f3:65:8a:bf: d6:6c:51:b7:eb:b0:5f:fd:db:19:c3:f2:22:00:39:f4:a6:6a: e5:7e:22:85:4f:46:ce:31:f1:5b:77:38:f2:4c:a0:fb:8a:fe: 27:5b:e9:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwNjEyMTg1NzQ5WhcNMjUwNjE5MTg1NzQ5WjAYMRYwFAYD VQQDEw02ODRiMjMyZS1kZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfsapYN3tkrZ4UKBBILepE8F8Y1Y86pct2IJEY+vVFJLrCrhS3eX0XhghKaB 2oAB+63dany0J75QOizihv+ts3SAi6ad6bEBIZXSSRR8llWPzgW1qXIlI/bCUz8a 4e5lXtbWGGEZFnFFDsn0MiDQZ/f3HE4wc44Lc477UnXDMVwC7eLW/s8+p40ceFAe 7Cjd4zpiLqhp+0FITjQ3pwAFAuXE7zlbzqY5oTP0jy5jcxTIdHouR/62lcZcCHoJ VzGqg0GElcP6nic5BQGPMeYjrqQWEUoxLMJmkycyOY90+OTaATXFfu7FYvX6PT1p 7GMMWRXkm1DWgkQHrBaj2PQZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDE4kEE VUeQhp04t3Xa1MrP5/zmMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAArMDvkB3Sl+YGCje2G0pjT10R7eLrQwzfO7BLr3RCtoJJgTr7Oj8 kaVuM9DBrJKAvwDN+gpJw9Re2Nl/RqiqqX8DlYvY9BgMHPqonP2Jm6lSX2OOyp0j TyYJ8oiDqFMrEQqttMRSBCM+XleFjLDRvowRe41iCuPeQGmXXm6nj0Ba8PMhGUsS 2+4aEHXFZ3PM/nReQ1Rrs6gdce6b8J716sqIFUjkWvBro+z6XrMYzhBNnveNFTlu 721BcmE0pdgoQy5zbCXX4yUVgHHQSRbFPNZUkvNlir/WbFG367Bf/dsZw/IiADn0 pmrlfiKFT0bOMfFbdzjyTKD7iv4nW+kT -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:33 2025 by rpki-client