$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json) Hash identifier: +I0wGOOLZcejDio8hgGPy8Ez3hTbNIn/3UzhzZQMJ70= Subject key identifier: E7:E6:DC:1B:02:31:88:F8:19:E1:BB:E8:22:66:6E:0A:45:C8:7B:7C Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 1079 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft Manifest number: 1064 Signing time: Thu 12 Jun 2025 17:17:59 +0000 Manifest this update: Thu 12 Jun 2025 17:17:58 +0000 Manifest next update: Thu 19 Jun 2025 17:17:58 +0000 Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: ztGc36RFOJqNyNF+i6ULosorjIFxtcs2HOPhimz1Zf8=) 2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: fEVsLbsqwk43zT4i9cB0QOn6Yu/KoGDrIvPTQDfkam8=) 3: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc=) 4: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4217 (0x1079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Jun 12 17:17:58 2025 GMT Not After : Jun 19 17:17:58 2025 GMT Subject: CN=684b0bc7-68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:af:2d:54:ce:3d:dd:82:f5:a9:c6:10:e0: d1:a2:bd:f0:0e:67:19:e4:3e:41:d0:09:4b:be:ca: 9b:0c:96:ab:b7:5e:48:be:47:d1:73:23:50:b7:3a: 31:47:1b:19:41:b0:8e:f4:90:a8:09:e3:bc:ee:3f: 09:69:bb:1c:ea:5c:18:48:ba:24:e4:8c:03:46:93: 40:ab:eb:b3:35:69:91:1a:4e:47:2d:4b:04:db:e7: a1:3b:87:db:23:f6:09:c2:00:44:20:c2:b7:34:cd: 97:59:f7:c2:7f:35:10:26:42:e0:be:2a:78:86:ad: cb:7f:04:52:df:c3:35:ad:77:9a:74:67:4b:87:80: 4f:43:a4:98:e2:97:67:ff:2c:9e:ca:f0:1d:21:26: f1:04:74:32:b6:e3:75:fe:34:16:2c:d5:10:83:70: f8:0b:4d:6f:f8:b5:9d:16:c2:18:86:da:24:39:28: 1e:49:fc:b5:68:b5:cf:7f:b0:aa:00:b3:aa:2f:ab: 14:bd:10:66:84:ea:7d:05:d4:ba:b8:7e:99:da:48: 1d:50:e0:db:74:9b:78:7f:4b:27:dc:f4:8b:00:60: 73:37:88:72:d7:1d:f7:78:35:d7:ec:f6:ee:fb:10: 94:e5:77:63:de:30:af:26:2a:21:7c:d7:96:1d:de: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:DC:1B:02:31:88:F8:19:E1:BB:E8:22:66:6E:0A:45:C8:7B:7C X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ab:b0:d9:86:50:4e:6f:d7:9e:47:1b:51:a3:47:5e:fd:fe: 83:81:d0:86:f2:4c:00:8a:b0:54:89:f5:95:f9:fd:e5:da:91: d9:da:ae:a6:85:24:1e:ad:04:d1:65:52:bf:3b:37:cd:26:5e: cd:59:49:6b:42:60:62:52:0e:cf:5c:52:af:11:00:8a:98:94: e6:ad:8e:12:fb:72:57:71:21:c0:b6:df:c3:c3:49:00:8d:1d: ef:bc:35:c4:9f:80:6e:c4:8f:90:7f:12:66:e5:ae:37:ac:6d: 40:4c:e1:2c:63:b4:37:39:3f:01:9d:ca:c0:e9:b8:89:aa:e1: 17:81:15:61:c2:72:9e:23:ee:f8:cf:02:ed:f2:fd:a4:63:ec: 23:74:68:cf:16:4f:b7:f8:8c:7a:9d:50:fc:40:fa:3f:e2:84: 75:ec:7f:d5:27:d9:23:b3:7c:93:7a:e3:6d:fb:96:08:69:3e: 70:8b:9d:13:49:66:67:f3:a0:0b:c5:83:25:77:01:d6:f4:86: b0:56:93:8e:bc:51:dc:b2:94:4e:77:4a:91:4c:06:81:ef:be: 6c:df:a5:73:08:7c:bd:bd:f7:94:38:72:cf:98:e7:56:c2:0d: df:04:23:f4:6e:e3:cc:cb:37:4c:5f:0f:f1:4e:ca:f0:4a:b3: d8:ff:90:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjUwNjEyMTcxNzU4WhcNMjUwNjE5MTcxNzU4WjAYMRYwFAYD VQQDEw02ODRiMGJjNy02OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t6vLVTOPd2C9anGEODRor3wDmcZ5D5B0AlLvsqbDJart15IvkfRcyNQtzox RxsZQbCO9JCoCeO87j8Jabsc6lwYSLok5IwDRpNAq+uzNWmRGk5HLUsE2+ehO4fb I/YJwgBEIMK3NM2XWffCfzUQJkLgvip4hq3LfwRS38M1rXeadGdLh4BPQ6SY4pdn /yyeyvAdISbxBHQytuN1/jQWLNUQg3D4C01v+LWdFsIYhtokOSgeSfy1aLXPf7Cq ALOqL6sUvRBmhOp9BdS6uH6Z2kgdUODbdJt4f0sn3PSLAGBzN4hy1x33eDXX7Pbu +xCU5Xdj3jCvJiohfNeWHd68XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfm3BsC MYj4GeG76CJmbgpFyHt8MB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0 V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsq7DZhlBOb9eeRxtRo0de/f6DgdCG8kwAirBUifWV+f3l2pHZ2q6m hSQerQTRZVK/OzfNJl7NWUlrQmBiUg7PXFKvEQCKmJTmrY4S+3JXcSHAtt/Dw0kA jR3vvDXEn4BuxI+QfxJm5a43rG1ATOEsY7Q3OT8BncrA6biJquEXgRVhwnKeI+74 zwLt8v2kY+wjdGjPFk+3+Ix6nVD8QPo/4oR17H/VJ9kjs3yTeuNt+5YIaT5wi50T SWZn86ALxYMldwHW9IawVpOOvFHcspROd0qRTAaB775s36VzCHy9vfeUOHLPmOdW wg3fBCP0buPMyzdMXw/xTsrwSrPY/5AR -----END CERTIFICATE-----Generated at Sat Jun 14 18:03:13 2025 by rpki-client