$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft File: ySmS1w7OQRpiVb9AueCkUhSUQA0.mft (raw, json) Hash identifier: 1gosfo17t3gPvKfKyW3cq918AbPc9gkHj+WRyAg8Feo= Subject key identifier: 47:81:94:6C:26:82:A4:E6:8E:40:D4:F2:7C:44:CA:C4:8C:4E:01:71 Authority key identifier: C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D Certificate issuer: /CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Certificate serial: 0A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft Manifest number: 11EB Signing time: Sat 14 Jun 2025 19:29:28 +0000 Manifest this update: Sat 14 Jun 2025 19:29:28 +0000 Manifest next update: Sat 21 Jun 2025 19:29:28 +0000 Files and hashes: 1: ySmS1w7OQRpiVb9AueCkUhSUQA0.crl (hash: eNi2gcCrvCrILQwZ/n7crRboTogGGu/xG+c/uYKK+LE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2653 (0xa5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Validity Not Before: Jun 14 19:29:28 2025 GMT Not After : Jun 21 19:29:28 2025 GMT Subject: CN=684dcd98-e8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:fc:5c:71:8e:9f:ad:73:5a:60:b6:90:35: 7a:a0:77:e1:95:3f:25:a3:94:e1:e8:82:b7:2e:71: be:16:96:98:c4:19:bb:c4:ba:cd:ce:ed:6e:5e:53: db:9b:f2:78:c1:2c:6b:c7:3d:2c:28:46:05:40:01: 9b:62:04:58:3a:6d:b0:bb:32:a1:c0:50:9b:53:2d: 7c:50:01:75:de:6a:18:e3:8e:e9:c8:3b:a2:ae:93: 2c:26:28:f2:49:45:b3:16:0b:24:40:c0:15:a3:61: d6:ac:a0:01:49:3a:40:f3:48:d0:b2:d8:8a:5e:56: 13:14:d7:27:7f:a5:d6:80:a3:16:5a:d5:10:08:4e: c8:a7:14:91:f3:c8:93:3e:0f:fc:64:1f:4b:d9:10: 2e:78:a1:eb:07:33:db:da:1e:97:f5:6d:19:e5:f7: fa:73:12:01:fd:44:62:19:61:70:0a:7b:9d:10:c6: 17:75:cb:29:16:e2:2d:d9:de:e5:22:0f:de:9e:de: c5:d3:6a:c9:78:4c:dc:9a:c3:65:d3:99:96:d2:84: 4c:10:cd:20:51:17:8b:53:e5:a9:bd:90:d4:0f:99: 51:93:bf:76:86:15:44:24:4d:ed:4b:6a:dc:79:85: 4d:97:3a:25:27:7e:44:8f:c7:42:72:81:dc:c3:6c: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:81:94:6C:26:82:A4:E6:8E:40:D4:F2:7C:44:CA:C4:8C:4E:01:71 X509v3 Authority Key Identifier: keyid:C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:07:c8:7c:d3:cd:d7:d7:e8:6c:70:db:ef:bc:d0:1f:80:cf: 48:6d:9d:f4:67:a8:54:c1:33:f0:f1:99:f0:ea:9a:9b:4b:f1: 9b:a7:e8:39:e1:57:e7:d9:b3:c2:12:5f:20:39:77:76:f0:23: 98:50:53:93:98:a9:90:26:79:3e:5d:35:f3:49:dc:73:73:02: c7:51:64:0b:a2:df:7f:f3:88:0c:14:b0:2d:eb:fe:b2:bb:50: 0a:97:7a:b8:f9:1a:ca:be:f1:f1:7f:9a:3b:55:8b:14:5f:5d: 36:50:f2:2b:e1:8a:f9:a5:e1:7d:8f:7d:a6:c3:15:dd:33:06: 9e:6c:07:47:59:89:69:1e:79:86:ed:1b:1d:e7:08:04:03:8c: 25:ff:57:a3:13:80:23:a9:b2:2e:05:35:93:0b:e2:3d:d8:a7: 13:02:e6:02:c2:72:98:dd:5d:b6:16:12:75:f1:e8:34:a6:a3: 16:a1:60:a2:73:b2:9f:23:11:eb:fd:3f:1f:13:14:02:29:4c: f2:b7:dd:d4:f2:aa:d2:9e:bc:4d:16:50:f6:32:f5:a9:8c:ff: 21:5b:01:d0:f1:15:21:c1:f3:86:f7:d4:f5:25:87:a9:8b:56: c5:29:f3:cf:5b:2e:c1:96:e4:c8:69:59:5b:fe:ca:07:80:b0: 96:d8:1d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEM5Mjk5MkQ3MEVDRTQxMUE2MjU1QkY0MEI5RTBBNDUy MTQ5NDQwMEQwHhcNMjUwNjE0MTkyOTI4WhcNMjUwNjIxMTkyOTI4WjAYMRYwFAYD VQQDEw02ODRkY2Q5OC1lOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OD8XHGOn61zWmC2kDV6oHfhlT8lo5Th6IK3LnG+FpaYxBm7xLrNzu1uXlPb m/J4wSxrxz0sKEYFQAGbYgRYOm2wuzKhwFCbUy18UAF13moY447pyDuirpMsJijy SUWzFgskQMAVo2HWrKABSTpA80jQstiKXlYTFNcnf6XWgKMWWtUQCE7IpxSR88iT Pg/8ZB9L2RAueKHrBzPb2h6X9W0Z5ff6cxIB/URiGWFwCnudEMYXdcspFuIt2d7l Ig/ent7F02rJeEzcmsNl05mW0oRMEM0gUReLU+WpvZDUD5lRk792hhVEJE3tS2rc eYVNlzolJ35Ej8dCcoHcw2wlRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeBlGwm gqTmjkDU8nxEysSMTgFxMB8GA1UdIwQYMBaAFMkpktcOzkEaYlW/QLngpFIUlEAN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FScGlWYjlBdWVDa1VoU1VR QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTbVMxdzdPUVJwaVZiOUF1ZUNrVWhTVVFBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FS cGlWYjlBdWVDa1VoU1VRQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbB8h8083X1+hscNvvvNAfgM9IbZ30Z6hUwTPw8Znw6pqbS/Gbp+g5 4Vfn2bPCEl8gOXd28COYUFOTmKmQJnk+XTXzSdxzcwLHUWQLot9/84gMFLAt6/6y u1AKl3q4+RrKvvHxf5o7VYsUX102UPIr4Yr5peF9j32mwxXdMwaebAdHWYlpHnmG 7Rsd5wgEA4wl/1ejE4AjqbIuBTWTC+I92KcTAuYCwnKY3V22FhJ18eg0pqMWoWCi c7KfIxHr/T8fExQCKUzyt93U8qrSnrxNFlD2MvWpjP8hWwHQ8RUhwfOG99T1JYep i1bFKfPPWy7BluTIaVlb/soHgLCW2B12 -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:36 2025 by rpki-client