$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: +Buz8SWKIs2wwtfLBi3b0sJvC0E6wu7LEwRwS7S/LWw= Subject key identifier: 07:2E:BE:53:4A:D7:60:2D:F7:E3:3D:72:F8:EB:44:92:57:7B:95:EF Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0AF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0AEF Signing time: Sat 14 Jun 2025 19:13:22 +0000 Manifest this update: Sat 14 Jun 2025 19:13:21 +0000 Manifest next update: Sat 21 Jun 2025 19:13:21 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: n3qwL/XqoiIElc3pZw7kvans8OH+MdQICVtrFVOUGUM=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2806 (0xaf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Jun 14 19:13:21 2025 GMT Not After : Jun 21 19:13:21 2025 GMT Subject: CN=684dc9d2-0c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:27:de:b3:02:26:ea:f1:73:d6:c2:a8:2a: a2:c8:9b:8c:ab:c8:fa:3d:ea:ac:e8:14:1e:c5:36: 21:95:7e:19:3a:aa:da:ea:f3:93:fb:6e:21:82:39: 86:02:c2:d5:3e:65:f1:ba:6e:20:bd:00:5c:91:a1: f1:39:b0:b1:43:09:83:69:8a:c6:b7:1b:3f:7f:71: 1e:bf:8e:b9:3b:10:3f:10:64:86:3c:47:cb:2d:2b: e1:cb:33:a9:7f:62:b8:cd:8a:34:b5:c1:7d:ce:8b: 38:22:44:2c:e9:a1:97:33:af:40:94:ea:c8:fe:d2: 54:af:5b:4c:cc:a6:08:e0:b7:b7:79:d0:b5:4c:8f: c4:9e:2a:1d:99:fe:5c:4e:ea:6a:8e:04:66:a8:84: f2:94:c5:02:34:72:1f:05:70:7c:72:35:e4:95:9b: 94:29:b5:cc:dc:de:a9:ac:35:19:fe:87:9d:19:5b: df:6e:f4:c4:f8:48:b1:72:f2:15:14:a6:23:d7:d5: 18:64:1b:08:ed:cb:bd:68:8e:6e:d5:a7:a3:c5:34: a0:82:cb:37:3b:7d:5d:0f:12:9d:29:21:bf:c4:8e: 69:fb:d9:38:1c:42:d8:a9:2e:82:d9:84:27:0c:e4: d7:13:db:6c:21:ef:bd:59:b1:96:a4:70:a2:59:42: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:BE:53:4A:D7:60:2D:F7:E3:3D:72:F8:EB:44:92:57:7B:95:EF X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:46:02:73:15:3d:cd:92:f0:e5:5a:d8:ab:6b:27:de:4c: 00:38:93:dd:15:be:5f:2f:e0:cb:ac:0e:d3:dc:7b:6c:bb:59: 00:8f:2c:f7:1a:de:78:6c:4f:6a:fe:11:46:35:73:bd:8e:e3: 44:0f:b1:fb:5a:56:05:a6:ee:ad:b6:de:ed:50:b6:6f:53:5d: 0b:d6:dc:a0:5b:01:6e:cb:7b:94:2a:46:aa:09:ed:91:5f:1e: f9:e0:1e:ed:ca:24:9f:cc:0a:b7:1f:a5:05:15:59:47:31:64: a9:07:ae:64:10:61:9d:36:5f:de:ee:e8:c8:30:b0:74:af:36: 33:64:15:5d:d7:18:39:10:47:95:e8:6d:b6:64:f2:1f:39:e9: 68:52:85:18:d2:58:4d:0c:3b:27:15:99:9d:c5:f7:eb:6c:91: 89:13:1b:e2:1d:ee:4e:07:ce:e0:d8:59:9f:bf:fb:8e:b5:c2: a4:db:bc:52:af:cd:2d:12:6c:5b:7a:8b:2b:72:ae:24:6d:d3: 81:59:7e:eb:f9:fa:1a:cc:17:6f:b0:e9:be:33:23:a3:a3:ef: 27:5a:f5:40:03:ec:a4:04:02:52:d0:b8:15:03:8f:95:bd:de: 75:7b:c2:28:3b:db:26:39:0a:fd:58:1a:37:49:ef:b1:af:cf: 2c:7b:db:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUwNjE0MTkxMzIxWhcNMjUwNjIxMTkxMzIxWjAYMRYwFAYD VQQDEw02ODRkYzlkMi0wYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDon3rMCJurxc9bCqCqiyJuMq8j6Peqs6BQexTYhlX4ZOqra6vOT+24hgjmG AsLVPmXxum4gvQBckaHxObCxQwmDaYrGtxs/f3Eev465OxA/EGSGPEfLLSvhyzOp f2K4zYo0tcF9zos4IkQs6aGXM69AlOrI/tJUr1tMzKYI4Le3edC1TI/Eniodmf5c TupqjgRmqITylMUCNHIfBXB8cjXklZuUKbXM3N6prDUZ/oedGVvfbvTE+EixcvIV FKYj19UYZBsI7cu9aI5u1aejxTSggss3O31dDxKdKSG/xI5p+9k4HELYqS6C2YQn DOTXE9tsIe+9WbGWpHCiWUKLpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcuvlNK 12At9+M9cvjrRJJXe5XvMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcn0YCcxU9zZLw5VrYq2sn3kwAOJPdFb5fL+DLrA7T3Htsu1kAjyz3 Gt54bE9q/hFGNXO9juNED7H7WlYFpu6ttt7tULZvU10L1tygWwFuy3uUKkaqCe2R Xx754B7tyiSfzAq3H6UFFVlHMWSpB65kEGGdNl/e7ujIMLB0rzYzZBVd1xg5EEeV 6G22ZPIfOeloUoUY0lhNDDsnFZmdxffrbJGJExviHe5OB87g2Fmfv/uOtcKk27xS r80tEmxbeosrcq4kbdOBWX7r+foazBdvsOm+MyOjo+8nWvVAA+ykBAJS0LgVA4+V vd51e8IoO9smOQr9WBo3Se+xr88se9uP -----END CERTIFICATE-----Generated at Sun Jun 15 23:09:27 2025 by rpki-client