$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft File: YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json) Hash identifier: JLRr96VyTZnQqX9FQ0kskHIUU3DAUfrJsm3yoed9b3A= Subject key identifier: 49:CA:64:67:BF:63:F8:80:56:04:EB:D2:9C:21:9D:BE:63:8F:98:F7 Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 Certificate issuer: /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft Manifest number: 21 Signing time: Fri 13 Jun 2025 06:44:51 +0000 Manifest this update: Fri 13 Jun 2025 06:44:51 +0000 Manifest next update: Fri 20 Jun 2025 06:44:51 +0000 Files and hashes: 1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: d9IbQLiOG8zaj1c8Xtv5138cSwmhwgUnnwT89X/3L2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Validity Not Before: Jun 13 06:44:51 2025 GMT Not After : Jun 20 06:44:51 2025 GMT Subject: CN=684bc8e3-3853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:68:ae:05:84:9f:b7:d4:bc:da:3c:d9:32: ff:a7:6a:86:41:25:a6:5a:1a:20:09:6a:a0:d6:d6: 0d:ae:13:2b:a6:bf:a7:08:d0:54:3e:26:a5:11:6d: 06:f4:58:11:96:8a:78:37:dc:3d:00:ed:cf:65:59: b8:c0:df:89:ab:97:d4:7c:de:78:f8:cd:70:53:96: ba:86:f8:d7:16:ce:3b:a1:cf:a0:14:40:1f:d4:3a: c7:76:fa:2f:54:b2:bf:2e:5e:9f:25:9f:9f:1e:db: e0:8c:d7:97:c0:14:2d:0f:6c:87:0e:c9:f4:ac:fd: 8d:b6:d0:ed:44:98:27:7a:18:e0:60:8f:5f:b2:d8: 48:16:08:86:e4:22:b5:6c:ea:a0:50:0a:17:34:a1: b7:e0:90:28:9a:b5:92:e4:dd:cb:aa:47:ef:f2:d3: c5:82:d7:9a:b1:4e:2d:1e:17:db:64:85:0c:00:1d: b8:07:d8:f7:d9:c4:68:77:e9:df:58:c2:65:3f:45: 8b:3b:83:1f:03:b7:e0:8f:1c:62:9c:c8:c9:d0:c4: 0a:95:57:1f:d7:79:2a:8d:5b:55:d6:9e:03:b1:56: 6d:8a:3e:27:a6:6f:db:f6:df:61:d2:5e:75:28:fa: e1:ef:ee:82:20:b0:09:89:5f:61:e5:41:d3:99:5d: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:64:67:BF:63:F8:80:56:04:EB:D2:9C:21:9D:BE:63:8F:98:F7 X509v3 Authority Key Identifier: keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:ee:3c:52:06:dd:e5:6f:dd:50:cc:74:b5:14:67:d5:3c:d8: 20:d8:b2:a6:ce:4a:15:8f:09:33:3e:70:ea:dc:c9:89:f7:9a: d3:fe:64:d4:91:09:0e:44:80:00:61:0e:cf:95:d5:0b:e6:6c: 75:2c:03:93:9b:2b:e0:5f:0a:df:33:11:58:37:48:07:76:98: a3:16:76:05:f7:66:73:14:74:78:6c:93:f8:34:52:2d:ad:ba: 6d:2c:a7:c0:32:f4:f5:00:57:ef:26:cc:8c:1a:9d:b0:bc:bc: 7c:3d:1a:ce:f6:c5:09:ac:8b:2c:80:17:8f:2b:c3:3b:8b:c4: 9e:01:47:c1:e7:96:06:5f:f1:f5:44:86:57:b7:82:0e:82:42: 70:95:b6:39:35:57:dc:e7:b6:18:2d:59:42:10:65:40:ad:48: 35:59:01:65:c2:c7:d0:a8:d1:9e:e5:4c:87:78:68:3b:00:fa: ab:66:65:7f:d1:02:99:50:a6:6f:ed:49:12:97:ae:df:22:6c: c7:36:a4:f6:84:51:47:5a:75:fd:6c:54:c1:09:9a:9a:c3:ef: 90:2e:63:c9:20:4c:f2:ba:1e:4e:fe:66:dc:9f:84:23:c0:39: 05:24:76:b9:a3:5d:c6:2a:4f:35:e0:43:a2:0d:00:3e:92:67: 6f:ad:b1:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoNjE4QUUwOUU3NDcxMzZENjZGMTE2NUE3QjhGRUEyRkY3 Mzg2N0RGNjAeFw0yNTA2MTMwNjQ0NTFaFw0yNTA2MjAwNjQ0NTFaMBgxFjAUBgNV BAMTDTY4NGJjOGUzLTM4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5imiuBYSft9S82jzZMv+naoZBJaZaGiAJaqDW1g2uEyumv6cI0FQ+JqURbQb0 WBGWing33D0A7c9lWbjA34mrl9R83nj4zXBTlrqG+NcWzjuhz6AUQB/UOsd2+i9U sr8uXp8ln58e2+CM15fAFC0PbIcOyfSs/Y220O1EmCd6GOBgj1+y2EgWCIbkIrVs 6qBQChc0obfgkCiatZLk3cuqR+/y08WC15qxTi0eF9tkhQwAHbgH2PfZxGh36d9Y wmU/RYs7gx8Dt+CPHGKcyMnQxAqVVx/XeSqNW1XWngOxVm2KPiemb9v232HSXnUo +uHv7oIgsAmJX2HlQdOZXUX5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUScpkZ79j +IBWBOvSnCGdvmOPmPcwHwYDVR0jBBgwFoAUYYrgnnRxNtZvEWWnuP6i/3OGffYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzBENDY4ODNDMTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRadkVXV251UDZpXzNPR2Zm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVlyZ25uUnhOdFp2RVdXbnVQNmlfM09HZmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzBENDY4ODNDMTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRa dkVXV251UDZpXzNPR2ZmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANnuPFIG3eVv3VDMdLUUZ9U82CDYsqbOShWPCTM+cOrcyYn3mtP+ZNSR CQ5EgABhDs+V1QvmbHUsA5ObK+BfCt8zEVg3SAd2mKMWdgX3ZnMUdHhsk/g0Ui2t um0sp8Ay9PUAV+8mzIwanbC8vHw9Gs72xQmsiyyAF48rwzuLxJ4BR8HnlgZf8fVE hle3gg6CQnCVtjk1V9znthgtWUIQZUCtSDVZAWXCx9Co0Z7lTId4aDsA+qtmZX/R AplQpm/tSRKXrt8ibMc2pPaEUUdadf1sVMEJmprD75AuY8kgTPK6Hk7+ZtyfhCPA OQUkdrmjXcYqTzXgQ6INAD6SZ2+tsfo= -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:55 2025 by rpki-client