$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: 1DCtPvQdXfmT+HRkcFT1Mx8X/sEjMUKenYzXLzfOTeo= Subject key identifier: 30:C0:63:65:FF:3B:92:4E:10:F9:04:0E:DB:59:7B:02:50:52:65:5B Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 0336 Signing time: Fri 13 Jun 2025 00:37:21 +0000 Manifest this update: Fri 13 Jun 2025 00:37:21 +0000 Manifest next update: Fri 20 Jun 2025 00:37:21 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: s0eA7TXWZ/+vvyn+Pk1EUtxOHpRraguyQNhzF7bvlpI=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Jun 13 00:37:21 2025 GMT Not After : Jun 20 00:37:21 2025 GMT Subject: CN=684b72c1-bc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:e6:66:b6:ce:72:7e:45:97:be:ed:2a:54: e5:34:70:b3:2d:1d:2e:38:ba:d2:40:5e:3a:c2:b5: f9:19:d6:c8:af:cb:0a:03:52:cf:1d:ff:5f:9c:9e: 4c:10:3c:27:95:b1:b0:a6:ad:18:f1:41:01:26:c6: 5c:80:aa:b6:b7:b7:c1:15:08:10:50:21:2d:e8:f5: 71:1a:7d:6d:05:e7:89:96:2d:ad:5e:f2:7e:54:1c: 56:8a:25:b5:81:98:6b:fb:d0:53:f0:a3:9a:58:de: a4:4d:a1:78:c4:f8:e6:dc:21:d4:28:e7:e2:3d:fa: dd:51:10:65:71:df:5d:e9:88:68:af:43:fc:94:c0: ed:79:c0:8e:67:65:eb:ea:2a:48:21:53:c7:bb:97: 41:f5:d1:9f:4f:da:c1:e8:17:3c:97:fd:26:a9:e7: 08:b7:8b:f5:b4:c7:41:92:8f:fc:73:98:06:99:19: 47:04:a2:fb:44:c5:9a:69:55:c6:5b:2b:ec:12:60: 8e:c5:78:7d:60:02:56:ee:4f:a9:8e:57:5b:00:bb: 97:a8:c6:e3:31:d0:0b:ff:36:01:4e:80:26:eb:d2: e6:38:15:b2:89:86:f9:4d:b9:1c:5b:03:ab:15:29: 99:19:ef:d1:7e:eb:8f:b4:c2:f1:6a:ae:38:bd:9d: 88:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C0:63:65:FF:3B:92:4E:10:F9:04:0E:DB:59:7B:02:50:52:65:5B X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a3:52:37:97:bd:f4:bd:56:5a:55:fa:07:3b:77:b6:d1:c7: 2c:10:87:e7:2d:4d:a7:11:ce:4e:24:46:4d:fe:a0:df:3f:8a: c7:e0:a7:3d:dc:8e:09:98:1f:48:7b:5e:59:26:3d:58:1b:e5: ea:69:ce:7b:d3:12:17:35:d2:a5:f6:23:6a:7b:46:c1:c7:99: 40:d5:d1:a0:87:76:3e:c0:f2:c7:ef:1d:87:85:32:09:08:41: 4a:87:75:ec:8d:7d:a6:ca:d4:5e:ba:2b:bb:06:cd:c4:52:47: b5:91:cd:51:50:5e:0d:7b:5d:98:ce:cd:01:15:e5:e7:ea:7e: a0:9f:46:9c:f5:57:8c:f4:91:20:1d:b3:63:c3:d1:07:83:62: 87:38:aa:9b:7e:3c:63:88:bf:1a:e3:c4:d1:03:68:71:f4:88: 97:1b:a6:7f:22:af:9a:b1:c8:f8:bf:08:74:cb:9c:94:2d:61: 8e:05:9b:bc:26:bc:e9:1e:59:ed:7c:24:53:dd:6a:54:40:56: 4b:8a:f3:e6:b7:f4:db:6e:eb:1b:f8:da:c9:1b:ec:77:9c:68: 9a:96:6b:9b:dc:62:16:60:0d:5c:84:46:d3:01:ad:73:a0:05: 26:0a:e0:a5:9f:05:09:15:af:a1:9a:1c:ab:55:0a:cb:44:12: dd:63:65:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwNjEzMDAzNzIxWhcNMjUwNjIwMDAzNzIxWjAYMRYwFAYD VQQDEw02ODRiNzJjMS1iYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv03mZrbOcn5Fl77tKlTlNHCzLR0uOLrSQF46wrX5GdbIr8sKA1LPHf9fnJ5M EDwnlbGwpq0Y8UEBJsZcgKq2t7fBFQgQUCEt6PVxGn1tBeeJli2tXvJ+VBxWiiW1 gZhr+9BT8KOaWN6kTaF4xPjm3CHUKOfiPfrdURBlcd9d6Yhor0P8lMDtecCOZ2Xr 6ipIIVPHu5dB9dGfT9rB6Bc8l/0mqecIt4v1tMdBko/8c5gGmRlHBKL7RMWaaVXG WyvsEmCOxXh9YAJW7k+pjldbALuXqMbjMdAL/zYBToAm69LmOBWyiYb5TbkcWwOr FSmZGe/RfuuPtMLxaq44vZ2IawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDAY2X/ O5JOEPkEDttZewJQUmVbMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2o1I3l730vVZaVfoHO3e20ccsEIfnLU2nEc5OJEZN/qDfP4rH4Kc9 3I4JmB9Ie15ZJj1YG+Xqac570xIXNdKl9iNqe0bBx5lA1dGgh3Y+wPLH7x2HhTIJ CEFKh3XsjX2mytReuiu7Bs3EUke1kc1RUF4Ne12Yzs0BFeXn6n6gn0ac9VeM9JEg HbNjw9EHg2KHOKqbfjxjiL8a48TRA2hx9IiXG6Z/Iq+ascj4vwh0y5yULWGOBZu8 JrzpHlntfCRT3WpUQFZLivPmt/Tbbusb+NrJG+x3nGialmub3GIWYA1chEbTAa1z oAUmCuClnwUJFa+hmhyrVQrLRBLdY2Xk -----END CERTIFICATE-----Generated at Sat Jun 14 17:58:36 2025 by rpki-client