$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: QJutkctc3OlN5LAIqX9EkGB6/F6Ls1lwGjh3jBt4X6A= Subject key identifier: 0B:C1:7E:A6:37:B6:17:B3:BE:93:A0:9F:05:D8:FB:AD:B8:FB:7E:D2 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 63 Signing time: Fri 13 Jun 2025 05:58:58 +0000 Manifest this update: Fri 13 Jun 2025 05:58:58 +0000 Manifest next update: Fri 20 Jun 2025 05:58:58 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: HljhQpESmA7L7qSSmu0U77Cc6Md19d72CVoK2NTTeqI=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jun 13 05:58:58 2025 GMT Not After : Jun 20 05:58:58 2025 GMT Subject: CN=684bbe22-c011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:1e:fe:82:d2:88:21:d1:b7:fd:7c:65:08: bf:91:d6:53:54:e9:80:9c:44:75:e8:7b:8d:62:3c: 64:1e:12:33:5f:36:c6:5b:13:5e:95:ea:3f:c2:f2: 4a:77:af:51:5a:16:12:a5:67:43:91:a4:a5:eb:15: e9:66:53:f5:83:d4:ed:a3:58:58:83:04:5b:d8:b8: bb:5f:db:23:3f:76:04:64:73:6f:ff:d0:59:ab:2a: 95:32:18:42:62:4e:9c:54:1b:a7:d6:c1:ce:cf:da: a8:e5:bc:2f:22:1b:4d:80:c4:07:04:06:d1:3d:9f: a5:b8:94:bc:96:85:2a:6e:b0:05:71:86:3f:06:42: f3:7a:82:94:8b:39:f5:17:96:1d:54:ed:be:ee:23: 24:ae:c8:cc:bb:c7:b7:b0:c5:f3:06:70:84:cc:4e: 11:bf:ce:f4:ba:bb:fa:2d:09:7d:00:8e:0a:23:0f: ca:a9:7a:e9:ee:89:0e:9e:b6:53:f3:91:f5:3b:31: a5:2e:0a:43:5a:5b:75:16:72:2b:f0:a7:75:70:94: 0a:2d:4b:7e:d0:a4:76:88:59:2e:ae:c6:1a:89:ff: 16:37:ed:ed:0a:1e:86:5f:e7:25:b6:8e:1c:85:66: 02:22:9f:68:ab:2a:21:ec:bb:6a:3b:76:a7:8b:6c: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:7E:A6:37:B6:17:B3:BE:93:A0:9F:05:D8:FB:AD:B8:FB:7E:D2 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ca:0b:3a:cb:a5:62:df:9c:3a:eb:b4:7d:e2:34:2e:ac:16: 57:c4:8a:b0:0f:d5:11:30:10:3c:d9:be:9a:fb:36:d8:95:c4: 26:ef:1f:8e:b7:bc:87:74:c2:a6:c4:b1:80:dc:60:03:e9:f7: fb:9a:fe:ca:a1:a1:a3:f8:3c:92:56:ff:d1:fb:6a:67:35:3d: 5b:1a:ba:62:0e:b2:50:84:57:ee:79:16:18:2a:43:7a:28:26: 2b:08:a7:92:c2:e6:a0:71:2f:75:3c:52:d6:b4:f6:2a:9f:da: ee:30:43:9d:0b:a5:cc:4e:aa:28:19:33:ba:84:0b:c9:15:3c: b8:a5:a9:8d:c5:25:d8:17:e3:8a:7b:85:cd:dd:0b:39:3d:aa: d0:a3:a7:b7:7c:f7:05:dc:28:40:d3:35:55:9b:46:92:2c:31: 4e:6a:f9:d3:92:dd:c8:b6:e5:af:80:1b:e7:63:86:c1:91:2b: aa:1f:c2:67:22:ae:d6:f2:8e:9a:aa:f5:06:83:81:c4:ec:b8: e3:c4:1a:c5:c8:f8:85:0f:29:84:4f:27:fb:7e:58:b0:c3:d3: e4:b3:52:ea:68:66:5e:b7:5f:3f:ee:f3:81:17:3c:d7:c4:22: d7:01:77:0e:5e:80:b5:52:25:01:86:07:e4:ba:fd:b1:46:17: fc:f8:c3:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA2MTMwNTU4NThaFw0yNTA2MjAwNTU4NThaMBgxFjAUBgNV BAMTDTY4NGJiZTIyLWMwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgqh7+gtKIIdG3/XxlCL+R1lNU6YCcRHXoe41iPGQeEjNfNsZbE16V6j/C8kp3 r1FaFhKlZ0ORpKXrFelmU/WD1O2jWFiDBFvYuLtf2yM/dgRkc2//0FmrKpUyGEJi TpxUG6fWwc7P2qjlvC8iG02AxAcEBtE9n6W4lLyWhSpusAVxhj8GQvN6gpSLOfUX lh1U7b7uIySuyMy7x7ewxfMGcITMThG/zvS6u/otCX0AjgojD8qpeunuiQ6etlPz kfU7MaUuCkNaW3UWcivwp3VwlAotS37QpHaIWS6uxhqJ/xY37e0KHoZf5yW2jhyF ZgIin2irKiHsu2o7dqeLbMbjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC8F+pje2 F7O+k6CfBdj7rbj7ftIwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnKCzrLpWLfnDrrtH3iNC6sFlfEirAP1REwEDzZvpr7NtiVxCbvH463 vId0wqbEsYDcYAPp9/ua/sqhoaP4PJJW/9H7amc1PVsaumIOslCEV+55FhgqQ3oo JisIp5LC5qBxL3U8Uta09iqf2u4wQ50LpcxOqigZM7qEC8kVPLilqY3FJdgX44p7 hc3dCzk9qtCjp7d89wXcKEDTNVWbRpIsMU5q+dOS3ci25a+AG+djhsGRK6ofwmci rtbyjpqq9QaDgcTsuOPEGsXI+IUPKYRPJ/t+WLDD0+SzUupoZl63Xz/u84EXPNfE ItcBdw5egLVSJQGGB+S6/bFGF/z4wzw= -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:52 2025 by rpki-client