$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: uXyVF3G0Tghdhx56bUte+Z4AFJvUX1yfw+LX8HAyMPw= Subject key identifier: 16:AB:D6:07:54:B7:31:4F:A7:AF:A8:4F:DC:D4:AA:BF:C6:AB:20:6E Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 075F Signing time: Thu 12 Jun 2025 21:18:21 +0000 Manifest this update: Thu 12 Jun 2025 21:18:21 +0000 Manifest next update: Thu 19 Jun 2025 21:18:21 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: kp8eXW3H1rbmvJGfY7fJzTGgXya37r6K94i3S/2nlnA=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Jun 12 21:18:21 2025 GMT Not After : Jun 19 21:18:21 2025 GMT Subject: CN=684b441d-ab11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:27:7e:ce:9c:ea:77:bb:75:ed:f2:3a:0e: 18:90:8f:74:3c:7d:13:d6:ff:6a:70:1d:4f:b0:35: eb:ad:ec:22:84:84:2f:48:9a:92:af:c9:e7:b4:aa: 09:b0:d4:0e:7d:94:e2:f1:7e:38:80:6a:90:65:0c: 1a:09:f2:ba:41:b8:e8:42:c0:a4:4a:d1:00:0f:9a: 30:71:74:27:2e:b2:ae:6c:7a:24:ba:94:25:cb:ab: b6:3f:03:6a:65:8b:c6:e6:3b:c0:d3:a0:15:ca:ec: 79:ac:39:42:fc:bd:47:9b:3b:5d:7d:86:7d:c8:60: 00:e9:a1:84:8d:a3:71:82:ed:b8:8b:5a:a9:5e:08: d8:22:28:35:a0:25:64:68:9a:a5:8e:fd:0d:09:7a: 63:19:39:a8:68:c2:bf:89:0a:9a:c0:55:d1:c9:db: 23:b4:23:b7:f3:fd:2d:36:9f:50:27:ce:95:63:d5: 04:49:81:dd:92:38:72:f9:ee:ef:1c:f4:11:b9:2f: 68:53:ab:ec:1f:9b:b2:25:46:4d:02:a6:f3:45:f6: 4b:92:06:58:03:9e:a7:df:90:3f:d5:d6:12:f5:e2: 6f:96:e1:d8:ed:72:f4:74:12:70:d2:62:e4:77:a8: db:f4:61:d3:a4:4c:3a:a7:74:96:f6:7f:fa:27:90: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:D6:07:54:B7:31:4F:A7:AF:A8:4F:DC:D4:AA:BF:C6:AB:20:6E X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:38:9f:be:ef:e3:a4:31:7b:17:3c:78:b6:1b:88:9e:2d:00: 69:14:94:12:8a:cf:9d:9a:f4:5f:aa:7b:9d:59:b0:db:fe:e1: b3:93:f3:ac:9b:36:73:63:be:c7:43:47:45:43:a0:64:61:e6: e0:3e:7d:81:59:e3:6d:bf:9c:21:8c:07:d1:34:11:df:27:e2: fa:74:17:a8:7d:4b:df:90:9b:e3:82:cf:f9:a3:33:b7:0c:29: db:20:a6:c0:e8:bb:dd:84:ae:dd:43:38:2b:1f:5a:8b:60:62: f2:44:d9:ef:3d:0e:9d:32:6b:bd:aa:21:65:21:98:db:c9:3a: 67:0b:9d:36:b1:8b:b5:88:25:99:1c:35:8e:2c:9e:b2:60:e2: 22:02:79:f3:89:f4:6b:6a:7d:79:02:81:94:16:56:3b:f5:ef: ed:da:3a:39:fe:d9:b9:a2:4b:4d:1d:f3:00:f5:af:bf:ad:f5: d6:8e:8b:41:3d:7a:97:83:fc:05:8c:21:b5:28:0b:63:2e:77: 93:4d:90:55:4b:2b:34:2b:ff:c0:c1:3f:d6:4e:5e:f8:d8:22: d2:c7:e6:46:76:06:da:48:ed:21:96:f2:6b:25:2d:a2:18:ba: 9e:e3:b2:7c:9e:a7:1a:df:96:00:60:11:95:a0:8d:c0:ff:4b: bc:ce:d6:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUwNjEyMjExODIxWhcNMjUwNjE5MjExODIxWjAYMRYwFAYD VQQDEw02ODRiNDQxZC1hYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgknfs6c6ne7de3yOg4YkI90PH0T1v9qcB1PsDXrrewihIQvSJqSr8nntKoJ sNQOfZTi8X44gGqQZQwaCfK6QbjoQsCkStEAD5owcXQnLrKubHokupQly6u2PwNq ZYvG5jvA06AVyux5rDlC/L1HmztdfYZ9yGAA6aGEjaNxgu24i1qpXgjYIig1oCVk aJqljv0NCXpjGTmoaMK/iQqawFXRydsjtCO38/0tNp9QJ86VY9UESYHdkjhy+e7v HPQRuS9oU6vsH5uyJUZNAqbzRfZLkgZYA56n35A/1dYS9eJvluHY7XL0dBJw0mLk d6jb9GHTpEw6p3SW9n/6J5CuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBar1gdU tzFPp6+oT9zUqr/GqyBuMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOOJ++7+OkMXsXPHi2G4ieLQBpFJQSis+dmvRfqnudWbDb/uGzk/Os mzZzY77HQ0dFQ6BkYebgPn2BWeNtv5whjAfRNBHfJ+L6dBeofUvfkJvjgs/5ozO3 DCnbIKbA6LvdhK7dQzgrH1qLYGLyRNnvPQ6dMmu9qiFlIZjbyTpnC502sYu1iCWZ HDWOLJ6yYOIiAnnzifRran15AoGUFlY79e/t2jo5/tm5oktNHfMA9a+/rfXWjotB PXqXg/wFjCG1KAtjLneTTZBVSys0K//AwT/WTl742CLSx+ZGdgbaSO0hlvJrJS2i GLqe47J8nqca35YAYBGVoI3A/0u8ztYi -----END CERTIFICATE-----Generated at Sat Jun 14 17:23:26 2025 by rpki-client