$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: SDTvbi1WLlhRPgWy7d4SHZZqJFVMT6JC1KpzcOhU3Bw= Subject key identifier: 25:92:3F:E4:FE:59:9E:42:12:93:52:A7:7F:91:2B:4E:91:43:09:A3 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: FB Signing time: Thu 19 Jun 2025 04:35:08 +0000 Manifest this update: Thu 19 Jun 2025 04:35:07 +0000 Manifest next update: Thu 26 Jun 2025 04:35:07 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: VogExI8H+bfjD5Shn4Ivrze7W3XkOiHPB9jzeHYXN9c=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Jun 19 04:35:07 2025 GMT Not After : Jun 26 04:35:07 2025 GMT Subject: CN=6853937c-458a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:fe:b5:8d:1c:9d:0d:02:6c:89:43:ac:f0: 22:e1:1c:d9:33:fb:c2:e5:69:d1:47:a2:7a:21:33: 88:23:28:c9:6b:5b:73:0c:0e:8a:22:8a:97:89:32: 2c:1b:ce:44:bf:c8:94:45:8e:14:b7:64:31:e1:de: 2c:ad:3e:20:a1:28:3f:db:ab:5d:9b:aa:1c:56:ca: d9:12:b0:33:11:11:2d:11:82:c5:a5:bc:f7:0a:87: b0:b4:98:5b:4c:8a:be:f9:a9:a2:c6:6f:ec:c4:ae: cd:8a:88:df:c4:5b:5c:f6:22:33:5a:d1:28:fd:0c: a4:cb:f9:17:01:f0:eb:50:bf:75:1b:6c:11:b9:93: 63:50:c7:e1:6d:67:36:e2:12:dc:cc:d9:c3:ad:3f: c6:10:5f:2a:ee:d9:d6:49:76:f2:0a:27:b2:b7:61: c4:cd:97:37:08:c9:42:e3:c5:98:44:31:29:7a:ff: 98:d1:38:e6:e8:1d:00:b6:f1:89:eb:50:dd:db:d5: 44:7f:77:47:cc:a7:8d:8f:17:b4:3e:e2:ff:3d:b6: b9:9e:58:17:e7:ae:33:f5:d5:23:7c:bf:22:26:38: b4:0b:b6:ee:78:e4:04:e5:71:18:92:79:90:b6:d1: e3:2e:a5:91:ef:fe:f8:45:35:4a:d8:8a:e7:d6:18: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:3F:E4:FE:59:9E:42:12:93:52:A7:7F:91:2B:4E:91:43:09:A3 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:31:e2:d3:0a:5f:c7:f6:19:1d:c7:25:98:50:d3:16:94:f9: dd:9c:4c:67:51:40:25:5a:86:29:7e:a3:5f:91:e3:73:da:47: cd:c4:ef:ed:1d:a5:21:b6:93:49:49:56:1c:23:43:1b:f3:22: 33:35:27:c4:78:a4:f9:f6:c5:f3:9e:9c:c7:fb:5c:df:8e:d1: fd:51:26:6f:eb:79:7a:5a:b0:23:c4:f1:29:ad:80:af:6b:87: 77:68:d6:5c:c4:75:e2:be:b6:74:1f:10:89:82:e5:57:41:17: 8c:ed:f4:fd:60:e0:c1:17:7a:ee:7a:f2:78:cf:48:a6:7c:b1: 97:4f:da:1b:ac:5e:c7:bc:6c:6b:ba:53:a6:28:4c:e1:b4:61: 26:bc:14:ff:84:15:22:c0:bf:98:a7:45:89:07:77:bd:24:42: a2:5e:34:f8:71:95:de:03:8e:d2:28:03:73:45:a3:44:a3:1a: d8:5d:4c:a1:7f:44:74:be:f6:16:f0:2d:b3:0b:11:ed:0b:5b: 89:39:74:66:ca:56:76:85:20:b9:8f:b2:3e:4d:27:a9:38:1c: f0:b9:d7:35:77:c1:05:da:d9:54:d5:d2:17:df:fe:e5:d2:6a: 5d:4b:08:13:a4:73:b1:61:b6:4e:5e:5c:d1:31:7c:e1:c3:62: c6:15:f1:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwNjE5MDQzNTA3WhcNMjUwNjI2MDQzNTA3WjAYMRYwFAYD VQQDEw02ODUzOTM3Yy00NThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKb+tY0cnQ0CbIlDrPAi4RzZM/vC5WnRR6J6ITOIIyjJa1tzDA6KIoqXiTIs G85Ev8iURY4Ut2Qx4d4srT4goSg/26tdm6ocVsrZErAzEREtEYLFpbz3CoewtJhb TIq++amixm/sxK7NiojfxFtc9iIzWtEo/Qyky/kXAfDrUL91G2wRuZNjUMfhbWc2 4hLczNnDrT/GEF8q7tnWSXbyCieyt2HEzZc3CMlC48WYRDEpev+Y0Tjm6B0AtvGJ 61Dd29VEf3dHzKeNjxe0PuL/Pba5nlgX564z9dUjfL8iJji0C7bueOQE5XEYknmQ ttHjLqWR7/74RTVK2Irn1hggZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWSP+T+ WZ5CEpNSp3+RK06RQwmjMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARMeLTCl/H9hkdxyWYUNMWlPndnExnUUAlWoYpfqNfkeNz2kfNxO/t HaUhtpNJSVYcI0Mb8yIzNSfEeKT59sXznpzH+1zfjtH9USZv63l6WrAjxPEprYCv a4d3aNZcxHXivrZ0HxCJguVXQReM7fT9YODBF3ruevJ4z0imfLGXT9obrF7HvGxr ulOmKEzhtGEmvBT/hBUiwL+Yp0WJB3e9JEKiXjT4cZXeA47SKANzRaNEoxrYXUyh f0R0vvYW8C2zCxHtC1uJOXRmylZ2hSC5j7I+TSepOBzwudc1d8EF2tlU1dIX3/7l 0mpdSwgTpHOxYbZOXlzRMXzhw2LGFfF4 -----END CERTIFICATE-----Generated at Sat Jun 21 02:53:13 2025 by rpki-client