$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json) Hash identifier: FLM+qwUpoFlV2QZwoYFcEpMtCeI5IGr2+J6tiJCcQtY= Subject key identifier: 27:54:23:E0:C4:C9:B7:03:81:22:3C:AB:B2:CF:3B:F4:10:AE:7E:E4 Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft Manifest number: 05E7 Signing time: Thu 12 Jun 2025 22:35:26 +0000 Manifest this update: Thu 12 Jun 2025 22:35:26 +0000 Manifest next update: Thu 19 Jun 2025 22:35:26 +0000 Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: MzzcSNAlxQxuS9RkyzU7LCrBv6RZZA4QVK0wdVdQSPA=) 2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: Jun 12 22:35:26 2025 GMT Not After : Jun 19 22:35:26 2025 GMT Subject: CN=684b562e-edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:3c:50:55:7a:2f:6c:fa:00:c6:6d:6c:42: 0f:a3:58:93:d9:6f:05:ee:6b:0f:f1:a3:2b:23:e2: bf:1a:fc:c3:e3:6b:ca:68:b5:c3:e1:d1:b2:5a:16: 96:0a:2a:23:59:ad:f7:4b:31:aa:3c:bb:ee:0b:bd: 04:29:14:da:ea:55:ea:f6:fa:5f:69:5d:7a:25:42: 46:ed:d7:0b:3c:7e:f4:0e:79:df:35:94:06:da:8a: 65:50:dd:d4:4e:38:da:45:a4:d7:0f:ed:e7:d4:26: 57:c9:a6:01:5f:36:4c:83:d3:cf:65:9b:ed:4a:29: f7:29:d0:3a:27:9d:2b:b5:0a:7a:91:35:45:74:9f: 54:5f:de:a5:65:fe:b8:62:c8:39:62:ac:a8:5b:2c: 94:03:fd:1d:d1:ae:c8:f0:10:0b:3f:20:b0:a8:a0: 84:79:a3:0c:7b:7c:28:88:7f:08:a0:72:e1:20:c3: d2:21:01:18:83:ee:fa:3a:30:8b:8d:9c:ec:5a:a4: a4:98:d7:35:77:66:42:c1:84:b8:ac:c7:f5:fa:92: 73:75:e6:54:89:f2:a1:7b:81:77:0b:cb:ae:11:99: 2f:3d:25:84:e6:65:63:ca:b4:d7:06:dd:31:63:be: 2c:48:0d:99:18:bd:9b:55:4e:c1:91:8c:6b:3d:a6: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:23:E0:C4:C9:B7:03:81:22:3C:AB:B2:CF:3B:F4:10:AE:7E:E4 X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:04:f1:b7:a7:c2:a1:9c:65:5d:c1:d2:2b:e7:d4:05:85: ae:a5:ce:c4:8f:8d:54:14:bd:c5:07:65:a3:6d:63:88:80:bd: 08:f6:93:94:6c:e5:72:4a:b4:34:2e:a1:13:d1:68:71:15:5c: 60:40:59:82:6f:a1:14:0e:44:78:35:0f:0f:ff:6e:be:4d:59: 8b:33:fb:98:3f:76:70:28:00:f4:da:18:16:bb:bc:7e:46:ff: 0d:e4:0c:6c:f8:ee:13:9b:71:e6:32:43:5e:84:09:ff:1e:9c: 47:99:b5:ad:53:6e:09:b2:3f:25:ff:38:bb:b0:dc:22:10:ee: 29:ad:e9:ae:24:e8:05:4d:48:da:df:e0:b7:4f:56:7b:76:81: 9b:97:57:be:40:58:31:51:fb:f0:fb:aa:ec:fb:98:60:1e:22: 88:ed:34:4f:f2:fb:49:64:41:d2:f2:85:5b:16:fb:75:dc:1b: 09:b4:68:75:1f:84:cc:0e:69:b6:d1:ac:98:5c:36:a7:f4:6a: 8d:53:37:35:27:12:8c:33:cb:7d:5d:8b:c6:d1:cc:bc:e1:2c: ee:f8:db:84:97:f4:d7:8d:66:1e:60:64:56:f1:c1:7d:a8:b7: 5c:ec:00:11:53:eb:95:34:9d:d1:30:9e:b1:e4:e4:2e:00:c9: 45:22:fc:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjUwNjEyMjIzNTI2WhcNMjUwNjE5MjIzNTI2WjAYMRYwFAYD VQQDEw02ODRiNTYyZS1lZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rQ8UFV6L2z6AMZtbEIPo1iT2W8F7msP8aMrI+K/GvzD42vKaLXD4dGyWhaW CiojWa33SzGqPLvuC70EKRTa6lXq9vpfaV16JUJG7dcLPH70DnnfNZQG2oplUN3U TjjaRaTXD+3n1CZXyaYBXzZMg9PPZZvtSin3KdA6J50rtQp6kTVFdJ9UX96lZf64 Ysg5YqyoWyyUA/0d0a7I8BALPyCwqKCEeaMMe3woiH8IoHLhIMPSIQEYg+76OjCL jZzsWqSkmNc1d2ZCwYS4rMf1+pJzdeZUifKhe4F3C8uuEZkvPSWE5mVjyrTXBt0x Y74sSA2ZGL2bVU7BkYxrPaZutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdUI+DE ybcDgSI8q7LPO/QQrn7kMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTVGMi81NjMyMkQ5OEI4OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZk V3ZQeE1PeFV3ZHFHY29qQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCshgTxt6fCoZxlXcHSK+fUBYWupc7Ej41UFL3FB2WjbWOIgL0I9pOU bOVySrQ0LqET0WhxFVxgQFmCb6EUDkR4NQ8P/26+TVmLM/uYP3ZwKAD02hgWu7x+ Rv8N5Axs+O4Tm3HmMkNehAn/HpxHmbWtU24Jsj8l/zi7sNwiEO4premuJOgFTUja 3+C3T1Z7doGbl1e+QFgxUfvw+6rs+5hgHiKI7TRP8vtJZEHS8oVbFvt13BsJtGh1 H4TMDmm20ayYXDan9GqNUzc1JxKMM8t9XYvG0cy84Szu+NuEl/TXjWYeYGRW8cF9 qLdc7AARU+uVNJ3RMJ6x5OQuAMlFIvw6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:31 2025 by rpki-client