$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: 99ns7Qe+mh+9r1zuU41mGgpKeNP7Zhvm0IfCuMM3ZTM= Subject key identifier: 11:D9:AD:3C:AC:3A:89:C3:5E:30:87:32:AD:48:FA:24:D9:9F:CA:B7 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 017D Signing time: Fri 13 Jun 2025 02:40:47 +0000 Manifest this update: Fri 13 Jun 2025 02:40:46 +0000 Manifest next update: Fri 20 Jun 2025 02:40:46 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: 6GV1FrghNy4Ily0QkZAneYn29SExQK6Yi12FQXbuJD0=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Jun 13 02:40:46 2025 GMT Not After : Jun 20 02:40:46 2025 GMT Subject: CN=684b8fae-950a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:f3:f4:3d:0b:c0:aa:62:d3:b4:02:77:87: d2:fe:0e:17:5c:03:2d:85:27:d0:e8:f5:93:ac:03: 1a:85:6f:d3:ee:83:e0:8d:a0:58:6e:c0:43:1e:24: c1:ee:81:fb:f7:94:5a:a1:ab:67:88:ff:4c:c0:e9: ef:6a:d0:d0:a5:88:52:7c:f5:12:c7:82:75:eb:51: 36:7e:ad:6b:c4:01:6e:08:89:c6:9b:7a:71:de:fc: 16:88:8a:5c:57:94:18:ee:cf:27:2f:2d:de:4e:6a: a9:e4:33:33:df:cf:1b:1b:51:09:b4:2d:8b:a2:9c: ae:b9:37:66:cc:5f:4e:f2:77:c8:32:ef:2f:66:64: a4:23:43:d3:ee:32:38:74:9d:95:92:9a:24:69:d3: ac:6a:da:6f:91:42:a0:6f:3f:3c:b6:40:17:48:34: f1:ee:b3:bf:40:fd:46:0d:27:02:36:d8:46:e5:7a: 59:4b:aa:39:5f:7b:7d:5b:82:5b:e3:03:3a:d0:be: 39:64:a3:ec:d6:de:41:60:c5:6d:c9:42:17:7e:64: 46:7d:3a:5d:80:ed:2a:04:82:d8:65:38:ad:f4:2d: 9f:b0:b2:03:25:9c:85:f7:3c:73:e0:f3:bd:c0:48: d2:d4:84:c9:d6:c0:d2:f7:21:64:af:c7:0a:7b:53: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:AD:3C:AC:3A:89:C3:5E:30:87:32:AD:48:FA:24:D9:9F:CA:B7 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:88:b1:48:03:8c:e2:af:2b:41:55:8d:67:45:da:93:4c:71: 6d:85:5d:76:33:0b:6c:f0:e1:87:ad:59:e3:d6:01:88:ff:f6: 34:f7:37:f7:d3:69:2c:ca:ea:cb:1d:bf:f9:9f:95:92:a4:5e: 4b:50:23:d5:e6:50:eb:42:37:ce:2d:e9:8e:cb:a4:bd:ba:7e: 18:13:c1:ae:5c:31:6f:96:f8:a2:72:d8:f4:2c:ee:ec:aa:3d: bc:1a:2a:ee:2e:7c:da:25:30:20:21:20:73:ad:04:25:7e:26: 01:e1:22:d9:27:15:3d:3c:fc:8c:53:69:e9:cc:4b:b3:0d:4a: 0c:57:56:ea:72:03:6f:34:10:99:0a:b3:63:05:48:a8:09:6d: 1e:70:47:76:88:07:5a:f4:c1:d5:31:9b:03:5b:e0:54:85:08: 4c:18:2f:15:5c:90:ed:5d:0f:89:af:7c:85:7b:d6:d4:40:2c: 12:ab:07:d3:f4:b1:fa:6a:5c:77:e8:dd:75:46:78:bf:aa:f1: a9:34:41:cb:fd:d3:c3:02:de:2e:71:f4:65:e2:f0:ad:7a:d4: 78:14:b6:3d:55:da:ab:98:33:7b:44:33:64:bf:9c:27:75:98: fa:c9:68:f1:9a:f3:17:e3:53:2d:7c:4a:ee:fe:9d:f1:6e:c3: fa:f7:b8:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUwNjEzMDI0MDQ2WhcNMjUwNjIwMDI0MDQ2WjAYMRYwFAYD VQQDEw02ODRiOGZhZS05NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqbz9D0LwKpi07QCd4fS/g4XXAMthSfQ6PWTrAMahW/T7oPgjaBYbsBDHiTB 7oH795RaoatniP9MwOnvatDQpYhSfPUSx4J161E2fq1rxAFuCInGm3px3vwWiIpc V5QY7s8nLy3eTmqp5DMz388bG1EJtC2LopyuuTdmzF9O8nfIMu8vZmSkI0PT7jI4 dJ2VkpokadOsatpvkUKgbz88tkAXSDTx7rO/QP1GDScCNthG5XpZS6o5X3t9W4Jb 4wM60L45ZKPs1t5BYMVtyUIXfmRGfTpdgO0qBILYZTit9C2fsLIDJZyF9zxz4PO9 wEjS1ITJ1sDS9yFkr8cKe1M1UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHZrTys OonDXjCHMq1I+iTZn8q3MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLiLFIA4zirytBVY1nRdqTTHFthV12Mwts8OGHrVnj1gGI//Y09zf3 02ksyurLHb/5n5WSpF5LUCPV5lDrQjfOLemOy6S9un4YE8GuXDFvlviictj0LO7s qj28GiruLnzaJTAgISBzrQQlfiYB4SLZJxU9PPyMU2npzEuzDUoMV1bqcgNvNBCZ CrNjBUioCW0ecEd2iAda9MHVMZsDW+BUhQhMGC8VXJDtXQ+Jr3yFe9bUQCwSqwfT 9LH6alx36N11Rni/qvGpNEHL/dPDAt4ucfRl4vCtetR4FLY9VdqrmDN7RDNkv5wn dZj6yWjxmvMX41MtfEru/p3xbsP697h6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:10:24 2025 by rpki-client