$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: V9L9d9AUfva3QQQyfNzybS9neFI+SqtAx7Brq+j/nZI= Subject key identifier: D1:74:07:0B:76:17:94:7F:4C:83:B5:25:48:FC:80:65:26:44:08:92 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0E40 Signing time: Mon 16 Jun 2025 17:47:00 +0000 Manifest this update: Mon 16 Jun 2025 17:47:00 +0000 Manifest next update: Mon 23 Jun 2025 17:47:00 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: +ZlyPnkq7k8kf1qksPNDNzkQ8u+5S1sWNbD5nH21rTM=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ko6JuSH5KdHDRvbFAlQ/kuUaDfW5QK4Fi6pI4fCmc9Y=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: IVs/EZ3aUjzucqrKlhAwA1VLfGJK+bUizU/goA1sqEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3668 (0xe54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Jun 16 17:47:00 2025 GMT Not After : Jun 23 17:47:00 2025 GMT Subject: CN=68505894-a990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:c5:57:ac:8c:e3:d8:c1:7d:71:02:18:0a: 5a:72:71:82:98:bc:d6:a5:b1:ed:83:25:50:70:ab: c9:a7:2d:5f:6b:54:f3:97:0b:35:b1:4a:d5:42:70: 1f:04:17:51:44:77:9d:fd:78:df:6f:36:08:d2:3b: 8a:b5:24:0e:a5:0c:f8:fc:ca:00:20:2c:2a:8b:55: 74:af:fd:1f:d4:6d:ff:61:4b:dc:51:61:af:9d:4b: cb:50:5e:58:03:c0:63:9a:52:ac:68:27:30:ba:8e: 94:6e:21:d2:00:3a:d2:d1:65:44:25:8e:60:c0:b3: 6e:6b:ad:78:bb:93:49:0b:01:2b:e1:ce:84:84:bb: 21:66:5f:57:ce:d0:03:f9:0a:4b:3f:91:2e:35:73: 01:f5:39:a9:be:08:39:3f:45:64:a0:06:02:9a:ea: 57:0c:39:ec:3f:9f:8d:0a:d2:2d:68:71:67:7e:74: d7:df:e0:c0:a2:3a:35:11:54:8b:07:5e:e0:59:de: 41:19:28:a2:19:b5:d4:d6:0f:2b:21:13:97:6e:58: d2:9f:32:f9:28:08:d0:e0:b2:14:c9:fc:ce:d3:db: 64:46:7e:4a:f6:33:45:f3:d2:1c:01:d0:a1:dd:79: bd:0e:2d:3b:e8:f4:79:69:26:73:26:9a:95:2b:e3: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:74:07:0B:76:17:94:7F:4C:83:B5:25:48:FC:80:65:26:44:08:92 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ec:0a:e1:75:93:d6:ab:c4:5e:4b:3f:64:fe:f5:82:a1:e0: 68:0f:f0:a7:15:8f:52:1b:88:da:25:53:8c:45:c0:46:99:e3: b4:66:90:25:26:97:81:71:fb:90:79:e2:66:3d:a0:3d:03:9c: dd:7e:c8:af:f0:a7:62:6f:ec:ae:04:64:50:88:3c:c8:30:e1: 77:62:2f:aa:2a:47:a6:e7:03:66:1a:4a:f1:61:88:9d:e4:29: dc:ca:1a:5a:72:1a:6e:c4:e0:71:24:6a:ea:79:e1:49:5b:b9: c4:5c:5b:6c:20:43:1a:22:c5:3c:29:90:bf:38:8e:3a:66:bb: 86:a5:64:7c:6f:22:c8:0c:b0:9a:b0:5d:51:d3:5e:9a:cf:4d: 42:4f:82:46:70:30:24:85:7a:cd:17:43:2d:f5:e1:63:99:19: 6f:d1:07:33:61:7a:d9:68:8b:1a:51:60:69:bc:6a:5e:c9:88: b3:3f:f2:a3:fd:37:e0:32:33:61:b6:66:39:04:59:6d:7a:dd: 39:fe:7e:d4:78:0d:62:36:db:a0:20:f6:32:b0:8c:31:6e:37: 42:a9:16:a4:40:a8:e3:d7:b2:73:a8:75:8f:01:75:17:29:3c: fc:40:08:e1:a2:68:c5:ab:22:eb:43:5f:8a:f1:44:55:f5:8b: 3e:2a:8b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUwNjE2MTc0NzAwWhcNMjUwNjIzMTc0NzAwWjAYMRYwFAYD VQQDEw02ODUwNTg5NC1hOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmrFV6yM49jBfXECGApacnGCmLzWpbHtgyVQcKvJpy1fa1Tzlws1sUrVQnAf BBdRRHed/XjfbzYI0juKtSQOpQz4/MoAICwqi1V0r/0f1G3/YUvcUWGvnUvLUF5Y A8BjmlKsaCcwuo6UbiHSADrS0WVEJY5gwLNua614u5NJCwEr4c6EhLshZl9XztAD +QpLP5EuNXMB9Tmpvgg5P0VkoAYCmupXDDnsP5+NCtItaHFnfnTX3+DAojo1EVSL B17gWd5BGSiiGbXU1g8rIROXbljSnzL5KAjQ4LIUyfzO09tkRn5K9jNF89IcAdCh 3Xm9Di076PR5aSZzJpqVK+NY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF0Bwt2 F5R/TIO1JUj8gGUmRAiSMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7ArhdZPWq8ReSz9k/vWCoeBoD/CnFY9SG4jaJVOMRcBGmeO0ZpAl JpeBcfuQeeJmPaA9A5zdfsiv8Kdib+yuBGRQiDzIMOF3Yi+qKkem5wNmGkrxYYid 5CncyhpachpuxOBxJGrqeeFJW7nEXFtsIEMaIsU8KZC/OI46ZruGpWR8byLIDLCa sF1R016az01CT4JGcDAkhXrNF0Mt9eFjmRlv0QczYXrZaIsaUWBpvGpeyYizP/Kj /TfgMjNhtmY5BFltet05/n7UeA1iNtugIPYysIwxbjdCqRakQKjj17JzqHWPAXUX KTz8QAjhomjFqyLrQ1+K8URV9Ys+Kotd -----END CERTIFICATE-----Generated at Wed Jun 18 16:35:43 2025 by rpki-client