$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: tkx0dAGvx0XKsRFdj5gtqz2YUwO4PMrc04owULXk5g4= Subject key identifier: 4E:42:07:A2:C4:A8:97:9E:CE:47:78:6B:BC:BC:FB:5F:E6:E5:3A:AE Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 03A2 Signing time: Tue 17 Jun 2025 00:23:58 +0000 Manifest this update: Tue 17 Jun 2025 00:23:57 +0000 Manifest next update: Tue 24 Jun 2025 00:23:57 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: V5amF74epfNZHSPuZ+MT5gnmF1VwtZ7oRqS0DPLPd74=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ctAElc1BM1zI8owbq6eyFwFyuzNUp7IAey45t5f8jpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Jun 17 00:23:57 2025 GMT Not After : Jun 24 00:23:57 2025 GMT Subject: CN=6850b59d-3971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:d9:4b:90:0c:3f:cd:35:b3:ea:f0:44:d7: e8:22:2b:f5:45:7a:ba:8c:8a:5b:a7:9f:55:96:6e: 26:2b:2b:82:2b:36:0b:e4:19:3c:a5:f6:48:ea:23: 1f:10:8d:84:df:13:b6:b3:dd:ed:7b:2f:f3:25:17: 2b:bf:ee:57:3b:9b:f8:c2:12:70:79:2b:08:34:ca: e1:f1:01:4b:8a:d4:6f:af:02:52:94:6a:36:ed:db: 89:0f:4a:9e:0e:63:5a:74:8c:d1:95:fc:ab:18:a6: cf:00:b7:06:dd:41:20:b6:9f:5d:18:35:bb:db:a2: 94:40:1a:8c:47:d7:df:7c:c2:6b:ef:75:9f:4f:e1: 91:d0:ab:d0:cf:eb:67:9c:79:a5:ac:cc:0a:8a:48: e7:d6:09:8c:fe:b0:50:e4:a8:21:ac:1c:a2:53:a6: 88:87:1c:19:a7:5c:18:7d:b2:20:74:86:1a:7f:c6: a6:ec:f4:70:6b:23:ee:f8:56:6a:b0:cc:05:87:1e: d2:35:9a:ec:52:49:01:bf:c3:94:3f:4a:8e:b1:19: 44:bc:7c:16:d6:25:32:5e:45:0a:4c:a0:08:5a:63: c5:7d:8b:19:6a:2c:8e:92:19:f9:fa:97:3f:15:46: a9:39:b2:49:7d:49:fc:08:72:16:23:21:57:98:99: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:42:07:A2:C4:A8:97:9E:CE:47:78:6B:BC:BC:FB:5F:E6:E5:3A:AE X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d3:9b:15:f5:94:f0:30:26:91:5d:1c:dd:d3:cb:af:08:e2: 6c:33:82:71:f8:34:27:e6:48:66:80:72:c8:05:e2:4b:ad:8b: d8:c1:1d:32:2b:a0:24:00:f8:2e:8b:24:dd:b5:91:36:24:ae: ce:d0:15:28:84:d5:a9:89:53:89:00:8a:c9:38:77:93:e4:35: bb:96:cb:a2:b4:33:9b:14:ca:c3:88:3f:06:62:ae:03:d1:07: cd:e2:82:6a:1e:ef:56:a1:ac:e1:fb:f4:f7:e8:f4:23:b4:5f: a4:49:4a:e8:31:30:b3:a3:41:a1:44:d9:07:09:6a:13:a1:a8: dc:9f:34:6a:e8:0f:77:c2:a0:5c:7a:0f:5e:78:49:99:b9:f5: 20:9e:66:00:4b:5e:d7:dd:a0:ad:0f:4f:b7:07:22:22:98:05: 80:dc:28:0a:3c:f1:f9:ca:14:5d:3a:0c:c3:f5:2e:3b:0d:77: a0:0d:64:19:74:f9:bb:ce:55:ad:12:c1:94:8a:7b:89:b6:86: eb:2e:03:34:7b:82:1c:1e:87:fa:28:c9:ad:0f:75:6f:2a:5f: db:06:5f:fe:4d:63:5f:45:3f:1e:c7:cd:e6:41:d7:9e:4d:48: 41:59:35:bc:01:32:48:f1:82:c8:f4:bb:fb:08:4f:22:1a:e9: 00:31:31:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUwNjE3MDAyMzU3WhcNMjUwNjI0MDAyMzU3WjAYMRYwFAYD VQQDEw02ODUwYjU5ZC0zOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kDZS5AMP801s+rwRNfoIiv1RXq6jIpbp59Vlm4mKyuCKzYL5Bk8pfZI6iMf EI2E3xO2s93tey/zJRcrv+5XO5v4whJweSsINMrh8QFLitRvrwJSlGo27duJD0qe DmNadIzRlfyrGKbPALcG3UEgtp9dGDW726KUQBqMR9fffMJr73WfT+GR0KvQz+tn nHmlrMwKikjn1gmM/rBQ5KghrByiU6aIhxwZp1wYfbIgdIYaf8am7PRwayPu+FZq sMwFhx7SNZrsUkkBv8OUP0qOsRlEvHwW1iUyXkUKTKAIWmPFfYsZaiyOkhn5+pc/ FUapObJJfUn8CHIWIyFXmJkkXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5CB6LE qJeezkd4a7y8+1/m5TquMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj05sV9ZTwMCaRXRzd08uvCOJsM4Jx+DQn5khmgHLIBeJLrYvYwR0y K6AkAPguiyTdtZE2JK7O0BUohNWpiVOJAIrJOHeT5DW7lsuitDObFMrDiD8GYq4D 0QfN4oJqHu9Woazh+/T36PQjtF+kSUroMTCzo0GhRNkHCWoToajcnzRq6A93wqBc eg9eeEmZufUgnmYAS17X3aCtD0+3ByIimAWA3CgKPPH5yhRdOgzD9S47DXegDWQZ dPm7zlWtEsGUinuJtobrLgM0e4IcHof6KMmtD3VvKl/bBl/+TWNfRT8ex83mQdee TUhBWTW8ATJI8YLI9Lv7CE8iGukAMTH3 -----END CERTIFICATE-----Generated at Tue Jun 17 05:37:43 2025 by rpki-client