$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: qQCRz4sJsoYQCFRlWN/52XX09JaXH6EU7+9kxHeHDOw= Subject key identifier: BA:E4:51:36:D4:2B:70:E0:07:3C:81:1A:52:E2:B3:6C:EE:09:79:6F Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0BD4 Signing time: Sat 14 Jun 2025 18:46:32 +0000 Manifest this update: Sat 14 Jun 2025 18:46:31 +0000 Manifest next update: Sat 21 Jun 2025 18:46:31 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: QrM+dAxETWv6S1lcuFXY1xHV8aOqyeVuBHbmhIYltv4=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Jun 14 18:46:31 2025 GMT Not After : Jun 21 18:46:31 2025 GMT Subject: CN=684dc387-c667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e2:86:c2:3c:30:b1:b7:fd:88:02:6c:46:c9: 84:1e:7d:22:93:5c:07:ae:b3:b4:39:23:72:be:85: b3:7a:31:10:d3:a7:b1:f3:1b:c1:f6:bc:ff:cf:1d: 6b:46:90:fd:47:38:b3:db:f9:47:83:29:bf:f9:09: 38:07:73:d8:6f:78:79:91:f8:a1:7a:40:db:87:cf: d8:4f:63:06:c1:f2:f8:ce:96:85:fc:31:f5:ba:11: 9d:62:7e:d7:9e:ee:3c:d8:03:c2:d5:2f:e6:20:b6: 8b:69:d0:c1:b7:a6:ef:79:3f:de:e6:6c:38:c9:84: 3d:97:24:c8:49:93:f0:cf:28:c0:20:dc:72:13:ba: a8:7c:f7:79:d4:2d:4e:e7:1c:2e:0b:cc:9c:9d:2b: 9f:9f:33:82:10:b7:28:1e:88:16:d8:f3:44:a5:6f: 5b:15:09:a8:85:52:73:93:d8:73:28:c9:3d:41:c5: a0:56:14:a2:da:4f:94:a3:2e:b4:f5:96:c8:88:5d: ad:2b:2a:80:98:b8:f8:d1:d1:b6:4e:19:d9:5f:1e: 4d:a1:10:ec:91:cd:19:fe:77:6a:6d:be:d8:b5:ff: f4:09:b7:33:35:eb:71:7a:27:70:1c:d0:7e:b3:fc: b0:b1:04:fe:52:bd:2c:45:3e:ab:5d:3a:87:80:b3: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:51:36:D4:2B:70:E0:07:3C:81:1A:52:E2:B3:6C:EE:09:79:6F X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4e:94:b3:e6:54:7f:16:86:7f:b8:af:b2:98:ee:1e:cd:02: c4:52:c5:ff:2e:d5:74:8c:0d:9b:39:ea:ea:ab:65:d6:12:f1: 16:a5:ae:e5:32:11:15:39:bb:d5:58:48:d7:70:db:b4:73:5d: e3:cf:44:05:04:d2:41:69:b7:ca:72:12:5b:98:1d:bc:7c:89: 0d:8c:76:d2:b8:fd:5b:ee:5a:20:76:9f:3d:61:e8:ba:a4:e9: 8b:37:94:e0:3b:e0:d1:3e:c5:c3:52:86:14:09:e9:93:a0:4d: d4:58:07:08:f9:f4:1f:7d:4a:86:ff:49:63:62:f0:49:b5:ad: 84:a6:54:33:e1:d0:4c:17:da:cd:19:18:9f:8d:b6:4f:cd:92: 3c:f1:ce:96:48:63:f4:01:8a:0b:61:79:ca:3e:9a:d8:f8:5f: 01:5f:49:69:3f:61:1b:cb:f2:9a:79:b7:23:5e:5a:09:59:5e: 35:b1:f4:c1:23:59:fa:78:75:74:20:20:46:ad:04:d9:6e:38: a7:4b:fb:d4:41:b3:4f:ce:80:28:37:f2:d2:c3:32:b4:41:88: cc:0b:09:c0:97:f2:52:1c:b6:a9:6c:32:0d:c8:07:3d:d7:45: 03:49:28:22:21:12:ee:a3:8a:e9:05:8a:9f:69:b2:7c:9d:a7: 85:0b:47:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUwNjE0MTg0NjMxWhcNMjUwNjIxMTg0NjMxWjAYMRYwFAYD VQQDEw02ODRkYzM4Ny1jNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8uKGwjwwsbf9iAJsRsmEHn0ik1wHrrO0OSNyvoWzejEQ06ex8xvB9rz/zx1r RpD9Rziz2/lHgym/+Qk4B3PYb3h5kfihekDbh8/YT2MGwfL4zpaF/DH1uhGdYn7X nu482APC1S/mILaLadDBt6bveT/e5mw4yYQ9lyTISZPwzyjAINxyE7qofPd51C1O 5xwuC8ycnSufnzOCELcoHogW2PNEpW9bFQmohVJzk9hzKMk9QcWgVhSi2k+Uoy60 9ZbIiF2tKyqAmLj40dG2ThnZXx5NoRDskc0Z/ndqbb7Ytf/0CbczNetxeidwHNB+ s/ywsQT+Ur0sRT6rXTqHgLOVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrkUTbU K3DgBzyBGlLis2zuCXlvMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoTpSz5lR/FoZ/uK+ymO4ezQLEUsX/LtV0jA2bOerqq2XWEvEWpa7l MhEVObvVWEjXcNu0c13jz0QFBNJBabfKchJbmB28fIkNjHbSuP1b7logdp89Yei6 pOmLN5TgO+DRPsXDUoYUCemToE3UWAcI+fQffUqG/0ljYvBJta2EplQz4dBMF9rN GRifjbZPzZI88c6WSGP0AYoLYXnKPprY+F8BX0lpP2Eby/KaebcjXloJWV41sfTB I1n6eHV0ICBGrQTZbjinS/vUQbNPzoAoN/LSwzK0QYjMCwnAl/JSHLapbDINyAc9 10UDSSgiIRLuo4rpBYqfabJ8naeFC0fc -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:05 2025 by rpki-client