$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: Fn4slHgMcwVRXCKYT6iY4mn5r0YU7lq8WKGI5KATu4w= Subject key identifier: 46:6F:A8:C4:CF:22:A9:9F:7D:BD:44:D4:67:9B:B8:A7:A3:EA:E4:59 Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0C2B Signing time: Sat 14 Jun 2025 18:26:59 +0000 Manifest this update: Sat 14 Jun 2025 18:26:58 +0000 Manifest next update: Sat 21 Jun 2025 18:26:58 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: pl0hB8hWgHzKTUxaOZggAY6gCyIcfbPNtJe3ksIbn/k=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: Jun 14 18:26:58 2025 GMT Not After : Jun 21 18:26:58 2025 GMT Subject: CN=684dbef3-68ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:be:c4:03:1e:49:98:9d:6b:af:42:b0:59: 26:6e:eb:d8:6c:33:68:e5:ea:25:d8:cc:71:04:4e: cb:07:ed:53:6a:fa:3c:36:a4:d8:50:2e:39:f9:90: c2:0d:8b:48:ef:ef:79:78:89:9a:4f:1a:0b:29:07: c7:c2:bd:10:a0:7c:2c:1a:4b:c8:ff:3c:aa:03:30: 29:dd:63:26:a4:41:e8:7c:43:80:21:69:57:d6:ae: 48:0f:20:03:8a:75:10:d3:25:3a:b5:a4:94:35:92: 28:b4:77:69:dd:61:3e:45:c2:31:c0:71:3f:82:3e: 75:71:33:8e:96:23:97:d8:75:f8:ef:4a:4f:a7:51: 6e:a3:84:45:5f:d3:b2:6b:9b:f9:6d:88:50:3f:c8: af:86:12:a5:00:cd:76:8e:45:61:45:3c:80:27:7a: b2:02:4d:30:19:b7:74:a0:13:ce:05:7c:bd:e0:2e: 55:e5:ce:ea:fe:09:7b:fe:0d:6d:79:f3:3a:a6:2c: 56:2e:eb:e4:89:e4:50:c6:ea:97:52:36:06:4c:1f: 9d:d0:43:2a:c1:7c:f9:a3:24:b5:56:f5:36:e7:b7: 34:d0:87:8b:6b:86:cc:11:18:f1:57:31:6e:dd:de: 7e:e4:f6:49:ff:26:de:98:f2:5c:d2:e2:78:e9:ec: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:A8:C4:CF:22:A9:9F:7D:BD:44:D4:67:9B:B8:A7:A3:EA:E4:59 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:77:ad:35:4a:d7:37:bb:6b:e8:31:3b:d2:6b:27:03:29: b7:02:21:98:7c:54:4f:53:cc:41:cf:94:71:cd:ba:5b:e8:a4: 5f:ff:c7:28:ea:ea:03:43:bc:0b:a0:09:cf:7c:9b:c7:94:c8: 25:6d:8d:4f:33:bc:1e:fb:9b:93:28:eb:da:56:22:47:2b:5e: 19:ca:77:90:04:a8:75:99:c1:08:dc:ef:87:62:b5:15:e3:6f: 62:38:3a:22:4b:8b:fa:52:71:f0:66:b7:1f:15:31:dc:9f:ec: 9f:58:8f:91:d1:9d:6e:c3:c4:4e:8f:e2:2a:8b:2d:88:02:ac: e5:a7:dc:db:71:78:d5:1e:27:a7:02:8a:3d:7f:12:99:cc:ac: 1b:0c:44:5d:29:d6:9a:f6:ed:72:71:cd:6d:b0:10:51:9a:0f: 71:1d:1b:3d:ac:6d:cf:19:f4:11:93:9c:ee:52:06:e9:12:ac: ba:ef:53:e4:a2:e2:57:3b:e8:4c:66:3d:bc:f3:f3:61:09:81: 66:0b:52:ce:c7:ef:f1:24:16:8a:b4:cc:94:59:50:65:07:b7: e0:1a:bd:b6:0e:f7:a2:19:62:a4:ae:11:61:73:ab:e9:3d:f5: 05:8a:5f:a1:c8:ce:54:fc:73:c2:6f:67:ab:d7:55:1a:10:ff: 05:38:75:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjUwNjE0MTgyNjU4WhcNMjUwNjIxMTgyNjU4WjAYMRYwFAYD VQQDEw02ODRkYmVmMy02OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0O+xAMeSZida69CsFkmbuvYbDNo5eol2MxxBE7LB+1Tavo8NqTYUC45+ZDC DYtI7+95eImaTxoLKQfHwr0QoHwsGkvI/zyqAzAp3WMmpEHofEOAIWlX1q5IDyAD inUQ0yU6taSUNZIotHdp3WE+RcIxwHE/gj51cTOOliOX2HX470pPp1Fuo4RFX9Oy a5v5bYhQP8ivhhKlAM12jkVhRTyAJ3qyAk0wGbd0oBPOBXy94C5V5c7q/gl7/g1t efM6pixWLuvkieRQxuqXUjYGTB+d0EMqwXz5oyS1VvU257c00IeLa4bMERjxVzFu 3d5+5PZJ/ybemPJc0uJ46ez/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZvqMTP Iqmffb1E1GebuKej6uRZMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaLHetNUrXN7tr6DE70msnAym3AiGYfFRPU8xBz5Rxzbpb6KRf/8co 6uoDQ7wLoAnPfJvHlMglbY1PM7we+5uTKOvaViJHK14ZyneQBKh1mcEI3O+HYrUV 429iODoiS4v6UnHwZrcfFTHcn+yfWI+R0Z1uw8ROj+Iqiy2IAqzlp9zbcXjVHien Aoo9fxKZzKwbDERdKdaa9u1ycc1tsBBRmg9xHRs9rG3PGfQRk5zuUgbpEqy671Pk ouJXO+hMZj288/NhCYFmC1LOx+/xJBaKtMyUWVBlB7fgGr22DveiGWKkrhFhc6vp PfUFil+hyM5U/HPCb2er11UaEP8FOHUC -----END CERTIFICATE-----Generated at Sun Jun 15 10:16:35 2025 by rpki-client