$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: c4DiyLM8qji8WMMblD68qY70n1Xujn5mC6QHR8QDlQA= Subject key identifier: 7F:B2:54:BC:8D:30:1A:E8:7E:80:0C:97:3D:52:20:5D:1F:38:A5:AA Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 0734 Signing time: Sat 14 Jun 2025 21:31:25 +0000 Manifest this update: Sat 14 Jun 2025 21:31:25 +0000 Manifest next update: Sat 21 Jun 2025 21:31:25 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: S0PONdZNG2wUDPfdzlTMnHmw7d0ltcHRA+x2sQRsHIw=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Jun 14 21:31:25 2025 GMT Not After : Jun 21 21:31:25 2025 GMT Subject: CN=684dea2d-7839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:1a:b3:28:98:4c:e6:9b:14:43:a9:14:0f: 5d:a8:cc:88:d1:02:55:b6:1c:ab:3a:0f:02:92:ce: fe:f4:57:63:e4:5f:40:85:a4:dc:ed:1a:f7:32:2e: 7e:51:fd:26:43:69:c2:78:19:80:ca:65:8f:ab:cb: 1a:37:e7:ee:af:7f:4f:bb:84:7d:6a:93:40:9b:dc: 26:d6:8b:89:fd:46:a9:1d:1f:5f:5f:1c:67:17:19: fc:48:9f:d9:cb:51:66:53:f0:00:5c:f0:b0:80:b1: aa:e9:74:77:28:28:85:c0:b9:99:68:9b:38:7a:05: 3b:54:7c:18:30:85:c9:9b:5c:c0:9c:38:3a:97:9b: 24:90:72:87:7b:ed:f3:49:cc:00:b6:14:8f:dd:0f: fd:5e:45:11:b9:d9:10:f7:a0:d3:55:08:6c:d0:14: 1c:dc:09:fd:37:cf:66:34:ea:b3:9a:4c:42:a7:7e: 13:48:31:9f:7c:51:80:18:80:b3:69:9b:22:d3:c4: 1a:f3:b9:5a:30:88:2a:32:ca:42:9b:49:f8:a6:1e: e1:98:15:85:08:55:97:86:67:bb:6d:35:19:07:77: 2f:28:9d:95:74:c0:4c:59:a1:82:b9:0b:07:da:d8: 47:37:3b:0c:68:7d:78:9c:a1:c7:cb:ef:63:93:77: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:54:BC:8D:30:1A:E8:7E:80:0C:97:3D:52:20:5D:1F:38:A5:AA X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:42:d0:07:4a:f5:26:df:61:6c:30:75:70:a8:49:b7:eb:ef: 73:2b:bb:2a:e2:c7:3a:bd:08:b2:e3:67:31:41:2c:3e:2b:bf: 6b:6e:bb:99:7b:f8:75:89:c2:67:50:bf:3a:50:ab:92:0f:f1: eb:b7:be:9d:2c:0b:35:12:b6:0b:a1:06:4e:25:a4:96:88:3d: b8:bc:1e:62:32:60:f5:2a:6a:22:2f:42:1f:60:58:88:59:3b: 46:e2:57:f6:10:06:01:f4:f5:2a:88:18:ef:dd:cb:e8:41:f7: 47:6e:9f:24:ac:ef:17:27:75:92:2f:98:b5:57:2f:23:79:e4: c1:17:49:fa:bb:7a:5c:3b:2d:98:cb:31:09:cf:28:6e:b6:76: 62:d7:5c:35:62:d5:1e:0c:a2:a8:e5:34:74:02:c4:9b:7f:28: bd:96:06:97:d7:93:2d:71:27:77:4c:11:a8:c9:b6:2d:57:bf: 84:33:2c:b3:df:83:1e:f0:49:6f:84:dd:f8:0f:8e:c3:9b:d9: 42:9b:b2:2d:90:1b:22:d9:9f:ea:57:57:6a:80:5c:9d:c8:de: 4c:2c:34:09:ba:56:0d:5d:56:ae:3e:97:55:59:53:6a:d1:9e: 25:e4:23:95:4e:b8:04:a8:e3:f0:a4:31:e1:df:eb:aa:00:77: ec:4e:ec:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUwNjE0MjEzMTI1WhcNMjUwNjIxMjEzMTI1WjAYMRYwFAYD VQQDEw02ODRkZWEyZC03ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqu8asyiYTOabFEOpFA9dqMyI0QJVthyrOg8Cks7+9Fdj5F9AhaTc7Rr3Mi5+ Uf0mQ2nCeBmAymWPq8saN+fur39Pu4R9apNAm9wm1ouJ/UapHR9fXxxnFxn8SJ/Z y1FmU/AAXPCwgLGq6XR3KCiFwLmZaJs4egU7VHwYMIXJm1zAnDg6l5skkHKHe+3z ScwAthSP3Q/9XkURudkQ96DTVQhs0BQc3An9N89mNOqzmkxCp34TSDGffFGAGICz aZsi08Qa87laMIgqMspCm0n4ph7hmBWFCFWXhme7bTUZB3cvKJ2VdMBMWaGCuQsH 2thHNzsMaH14nKHHy+9jk3cjQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+yVLyN MBrofoAMlz1SIF0fOKWqMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQtAHSvUm32FsMHVwqEm36+9zK7sq4sc6vQiy42cxQSw+K79rbruZ e/h1icJnUL86UKuSD/Hrt76dLAs1ErYLoQZOJaSWiD24vB5iMmD1KmoiL0IfYFiI WTtG4lf2EAYB9PUqiBjv3cvoQfdHbp8krO8XJ3WSL5i1Vy8jeeTBF0n6u3pcOy2Y yzEJzyhutnZi11w1YtUeDKKo5TR0AsSbfyi9lgaX15MtcSd3TBGoybYtV7+EMyyz 34Me8ElvhN34D47Dm9lCm7ItkBsi2Z/qV1dqgFydyN5MLDQJulYNXVauPpdVWVNq 0Z4l5COVTrgEqOPwpDHh3+uqAHfsTuzN -----END CERTIFICATE-----Generated at Mon Jun 16 08:24:39 2025 by rpki-client