$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: bRfQiJBD3uYd4kKXU3/Y0IZ6jIE3MtTL19qGKmB1UAo= Subject key identifier: CB:AE:4E:77:73:96:4C:15:69:AB:1A:D6:5A:30:E0:AD:64:CF:AF:C4 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0130 Signing time: Fri 13 Jun 2025 03:31:54 +0000 Manifest this update: Fri 13 Jun 2025 03:31:54 +0000 Manifest next update: Fri 20 Jun 2025 03:31:54 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: o5coq3RhCkaXcmKkPm+tzXqrI6YjAG1uG8PPXtrF+7Q=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Jun 13 03:31:54 2025 GMT Not After : Jun 20 03:31:54 2025 GMT Subject: CN=684b9baa-4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:81:3f:ca:9f:09:e9:25:ab:1d:4d:85:6c: 8d:bd:59:71:eb:b7:30:c0:6d:51:09:7e:e2:cd:bc: 87:90:1e:7d:4c:b3:ec:93:1c:5e:e8:3a:cb:3a:1f: 08:93:5e:e2:d2:84:f2:31:dd:f0:8c:2f:62:55:8d: f9:0e:da:71:f9:9f:36:b5:73:81:b3:53:a3:15:a2: 5b:21:77:8b:1d:e4:7c:4b:9b:12:5f:c6:5d:9f:bf: de:95:ac:8f:4f:9b:65:f6:a4:43:22:d8:dc:15:26: 10:6f:66:5d:63:56:ef:d0:4b:93:d3:2c:26:61:f9: 2d:bf:a1:68:96:43:10:b8:0e:e1:70:85:18:d0:8f: f7:b2:72:b5:76:30:a8:9f:ab:c7:8d:3e:09:d7:68: 66:9e:44:4e:90:97:05:82:b1:1f:e4:42:21:45:d4: ea:68:c0:34:30:70:1a:dd:1d:c6:06:26:1c:b1:33: 95:37:b5:9b:0f:e3:72:2a:b6:10:d4:74:df:47:0b: 58:8c:9d:ee:e9:f3:1f:37:ff:b6:41:23:c3:32:51: 52:82:a7:71:a8:f6:c7:7a:2e:eb:b2:97:4c:fd:c6: c0:88:f2:6a:4a:fa:72:29:3c:fe:68:5a:5f:6d:7b: 2e:27:8f:b9:ef:3d:bf:fc:bb:1a:eb:34:66:6b:c0: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:4E:77:73:96:4C:15:69:AB:1A:D6:5A:30:E0:AD:64:CF:AF:C4 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c1:4c:b2:d1:8e:f3:37:6a:aa:be:c3:6a:3c:18:4e:35:d3: 86:e2:0c:a1:c5:ab:cf:58:6c:0d:bf:44:17:1e:4f:dd:5c:d3: 0d:18:0c:11:aa:33:2e:25:ab:93:ea:b4:c0:7e:b9:7c:1f:bc: 01:a4:73:83:9e:58:af:fb:0c:0b:b4:d2:43:be:48:ec:74:74: a7:16:9c:64:89:8a:b9:2c:03:11:ad:9e:b5:27:58:a4:b6:02: 7e:36:52:47:ed:c4:5f:57:f5:a6:8b:10:75:6a:29:7f:5d:39: 56:50:ed:d7:f2:b0:e3:b1:f8:94:dc:a7:48:87:1e:37:53:75: 19:07:88:da:83:92:cb:7e:9c:95:e3:c4:2a:18:fc:68:cb:d6: 0d:20:36:44:de:7d:d0:08:53:ca:fd:09:a5:9f:df:fa:a5:bc: 2b:cd:15:23:c3:d1:b2:3b:0b:32:68:8d:99:67:31:14:86:75: 0d:dd:19:dd:86:b7:40:f2:39:5e:a6:ea:10:a1:3d:96:9e:1a: 97:e7:98:be:ac:22:dd:0e:03:e6:de:93:20:7d:a0:4a:85:e8: 2b:b3:b2:57:2e:4f:0a:49:c4:54:d9:70:8b:9d:e2:62:81:7f: 72:66:cd:9a:ad:36:bb:89:00:06:36:ba:9f:c8:d2:f2:ab:47: 10:bc:de:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNjEzMDMzMTU0WhcNMjUwNjIwMDMzMTU0WjAYMRYwFAYD VQQDEw02ODRiOWJhYS00ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNGBP8qfCeklqx1NhWyNvVlx67cwwG1RCX7izbyHkB59TLPskxxe6DrLOh8I k17i0oTyMd3wjC9iVY35Dtpx+Z82tXOBs1OjFaJbIXeLHeR8S5sSX8Zdn7/elayP T5tl9qRDItjcFSYQb2ZdY1bv0EuT0ywmYfktv6FolkMQuA7hcIUY0I/3snK1djCo n6vHjT4J12hmnkROkJcFgrEf5EIhRdTqaMA0MHAa3R3GBiYcsTOVN7WbD+NyKrYQ 1HTfRwtYjJ3u6fMfN/+2QSPDMlFSgqdxqPbHei7rspdM/cbAiPJqSvpyKTz+aFpf bXsuJ4+57z2//Lsa6zRma8DBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuuTndz lkwVaasa1low4K1kz6/EMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGwUyy0Y7zN2qqvsNqPBhONdOG4gyhxavPWGwNv0QXHk/dXNMNGAwR qjMuJauT6rTAfrl8H7wBpHODnliv+wwLtNJDvkjsdHSnFpxkiYq5LAMRrZ61J1ik tgJ+NlJH7cRfV/WmixB1ail/XTlWUO3X8rDjsfiU3KdIhx43U3UZB4jag5LLfpyV 48QqGPxoy9YNIDZE3n3QCFPK/Qmln9/6pbwrzRUjw9GyOwsyaI2ZZzEUhnUN3Rnd hrdA8jlepuoQoT2WnhqX55i+rCLdDgPm3pMgfaBKhegrs7JXLk8KScRU2XCLneJi gX9yZs2arTa7iQAGNrqfyNLyq0cQvN5i -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:29 2025 by rpki-client