$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json) Hash identifier: 9jn4HsrgNZgTxnsa77BQCRmWG3kX42TusTD5qDKb2hY= Subject key identifier: 10:F3:70:BB:0A:37:FA:90:DF:9F:16:61:C4:CE:E7:0A:0A:A4:5C:CA Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft Manifest number: 09A2 Signing time: Mon 16 Jun 2025 19:52:54 +0000 Manifest this update: Mon 16 Jun 2025 19:52:54 +0000 Manifest next update: Mon 23 Jun 2025 19:52:54 +0000 Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: B9UcUuIrxJszqRqDgpLsJyNYEGPtOQzLVWpU+LkeTpc=) 2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: LX76oihYc6Vcq0IqMjxINDxugVvobb/j/buf30BAPmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Validity Not Before: Jun 16 19:52:54 2025 GMT Not After : Jun 23 19:52:54 2025 GMT Subject: CN=68507616-9458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:c6:04:f6:fa:55:c6:8e:ff:5d:e4:e4:97: 09:da:91:62:fc:e3:d5:22:61:95:1d:be:ba:e3:70: e4:39:c1:d8:40:81:e5:84:19:35:6b:be:53:d3:c1: eb:3a:c3:29:9d:1d:d3:7d:ea:e2:06:a2:e7:a7:dc: 63:b8:c2:32:79:cf:c3:b4:96:6b:fa:b2:51:e4:f0: ff:55:08:9b:37:e6:e4:a1:81:c8:84:1e:96:e9:2d: 65:92:e6:86:a1:3f:cf:63:7a:20:7f:7d:35:9e:c5: b8:6f:16:88:23:0f:a1:23:16:c8:01:b8:2b:9e:8a: 6a:6d:41:29:59:8e:58:74:20:fa:6d:fa:ed:c9:c5: 84:8f:77:90:3a:96:ce:71:5f:31:2f:52:fb:6e:a2: 91:21:cf:30:93:9d:58:3d:00:13:e6:ad:0d:f5:43: a2:93:b9:33:c9:c3:40:f6:b1:4e:4c:bb:70:44:5e: 06:5d:03:68:26:1b:a5:97:39:d0:1d:fd:fe:95:47: c3:69:13:70:e2:49:41:a3:d7:2a:0b:94:53:1c:2e: 07:50:63:14:64:af:31:af:23:3d:75:ba:8a:b6:e5: 93:05:ef:8e:61:96:d2:61:69:7e:3e:b3:79:a9:38: a0:2e:53:c7:75:f4:c2:c3:9f:74:87:3a:a4:af:bf: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F3:70:BB:0A:37:FA:90:DF:9F:16:61:C4:CE:E7:0A:0A:A4:5C:CA X509v3 Authority Key Identifier: keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:53:ae:94:96:45:af:80:ae:36:f5:fc:16:95:80:78:24: 0d:fc:b0:ac:de:8f:4e:57:99:08:e7:4d:20:54:af:52:68:2a: a8:71:f1:bc:b3:80:f5:19:5c:76:31:db:26:ee:b8:15:bf:ab: 4b:95:1f:fa:8e:62:73:7b:e8:84:7f:df:10:c0:7b:dd:14:50: e8:25:8b:80:9f:4e:8e:4a:de:5a:7d:84:5e:44:79:09:9a:c4: af:05:18:d6:80:e0:33:37:54:0f:d9:69:0f:49:9f:de:36:c1: c6:55:5a:8f:2b:24:73:a2:91:7b:2c:86:16:ed:c7:54:5f:76: 22:a8:33:fc:f3:d7:29:ad:86:aa:a6:4d:08:78:19:d9:3f:a1: ba:7e:7e:f8:8a:b6:f4:30:2b:f8:c2:85:84:b4:e8:6c:e7:c7: 48:4f:f4:b6:d7:0a:d0:00:21:08:94:c2:1c:1c:99:69:3b:e6: 24:da:d9:23:0e:ce:6d:70:e2:26:ed:d6:50:60:93:b7:cb:85: 19:dc:ae:98:43:19:b0:3e:7b:a8:af:65:80:98:16:b0:54:77: 15:fe:56:db:f4:29:0f:a7:77:2a:9c:4d:bf:76:89:1e:2d:5a: f7:c3:f5:87:48:d6:4b:b1:82:68:f6:ae:2f:08:54:0a:69:63: 83:2d:d4:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz NEQwMTAyNzcwHhcNMjUwNjE2MTk1MjU0WhcNMjUwNjIzMTk1MjU0WjAYMRYwFAYD VQQDEw02ODUwNzYxNi05NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn7GBPb6VcaO/13k5JcJ2pFi/OPVImGVHb6643DkOcHYQIHlhBk1a75T08Hr OsMpnR3TferiBqLnp9xjuMIyec/DtJZr+rJR5PD/VQibN+bkoYHIhB6W6S1lkuaG oT/PY3ogf301nsW4bxaIIw+hIxbIAbgrnopqbUEpWY5YdCD6bfrtycWEj3eQOpbO cV8xL1L7bqKRIc8wk51YPQAT5q0N9UOik7kzycNA9rFOTLtwRF4GXQNoJhullznQ Hf3+lUfDaRNw4klBo9cqC5RTHC4HUGMUZK8xryM9dbqKtuWTBe+OYZbSYWl+PrN5 qTigLlPHdfTCw590hzqkr7/NiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDzcLsK N/qQ358WYcTO5woKpFzKMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5 NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr WlMzWE1IVHlnc00wMEJBbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOd1OulJZFr4CuNvX8FpWAeCQN/LCs3o9OV5kI500gVK9SaCqocfG8 s4D1GVx2Mdsm7rgVv6tLlR/6jmJze+iEf98QwHvdFFDoJYuAn06OSt5afYReRHkJ msSvBRjWgOAzN1QP2WkPSZ/eNsHGVVqPKyRzopF7LIYW7cdUX3YiqDP889cprYaq pk0IeBnZP6G6fn74irb0MCv4woWEtOhs58dIT/S21wrQACEIlMIcHJlpO+Yk2tkj Ds5tcOIm7dZQYJO3y4UZ3K6YQxmwPnuor2WAmBawVHcV/lbb9CkPp3cqnE2/doke LVr3w/WHSNZLsYJo9q4vCFQKaWODLdTQ -----END CERTIFICATE-----Generated at Tue Jun 17 01:33:44 2025 by rpki-client