$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: jRmWUI3n87Zm85LJ+H54YokmuA1TlrAXA5PNHAR2ioo= Subject key identifier: 28:2C:C2:B1:E0:A2:DB:D5:B5:B3:BA:41:C9:BA:82:F4:C9:2E:5C:5A Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 012B Signing time: Sun 15 Jun 2025 03:47:28 +0000 Manifest this update: Sun 15 Jun 2025 03:47:27 +0000 Manifest next update: Sun 22 Jun 2025 03:47:27 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 9GyG5B45be9nFjWoLpwLkfk4nMRVaLnuSJ+GlmgG3Tw=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Jun 15 03:47:27 2025 GMT Not After : Jun 22 03:47:27 2025 GMT Subject: CN=684e424f-979f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:a0:cf:6d:e3:73:c9:96:a3:8f:05:26:c2: cf:1a:5a:17:bb:45:e9:49:f8:40:52:e8:51:06:d5: 67:74:dc:da:18:db:21:2f:a5:c4:22:56:e0:a2:35: 5a:3e:8d:27:ba:8b:1f:dc:70:b7:47:91:39:d0:da: eb:73:f7:d6:e5:38:84:60:48:c2:12:bb:43:0d:b8: f4:5d:37:fd:07:36:78:1c:a3:64:3e:0e:68:56:f9: 2b:1d:a1:aa:a3:2c:51:2b:ef:79:31:b2:55:35:ef: e4:02:01:c9:01:4f:50:2c:65:71:67:3b:4e:b7:c5: 4a:9a:5b:e6:8f:21:61:6d:8c:bc:95:53:b7:15:38: f9:81:08:bc:9d:98:05:b3:50:4d:2e:36:83:4a:29: 75:62:04:6f:b6:77:a8:73:1c:9a:8e:70:80:c9:5d: 08:77:30:4d:fe:df:8d:b0:10:2a:31:30:cf:c9:c6: 9e:c5:b7:20:46:b3:ff:13:37:f0:7c:14:a8:70:1e: 5a:82:93:87:9c:fc:e3:70:92:51:39:d7:9e:f6:9f: ca:11:48:56:dd:85:d2:97:fb:66:c7:0e:b1:b1:48: 7e:03:42:50:e3:07:a2:fe:5f:1b:c1:af:0f:f9:23: 78:53:e6:1e:f3:ee:23:b1:7e:e8:c9:0d:73:26:29: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:C2:B1:E0:A2:DB:D5:B5:B3:BA:41:C9:BA:82:F4:C9:2E:5C:5A X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:a6:fc:03:99:d8:cf:91:16:e8:0e:31:71:5f:70:89:d2: 07:25:0e:96:74:cb:74:b1:79:ea:b4:d9:b7:06:e2:6d:1f:55: 6d:c9:42:22:c5:c2:3c:f2:a6:df:60:28:76:3b:0d:4a:2f:5a: 24:ed:4f:c4:99:cc:46:46:b5:20:95:d6:2f:82:bd:3c:a1:79: c5:64:cb:39:2e:52:7b:16:2c:8b:7a:98:be:65:0a:47:81:d5: f3:e6:b1:34:49:40:c6:d4:c3:cf:69:88:e4:49:17:ab:6d:c0: 95:7e:e1:55:ea:6e:2f:ff:93:8e:4e:e4:ef:d6:af:1f:98:78: b7:ac:72:66:cf:a2:12:43:11:f2:d4:d8:76:15:60:ec:f3:7c: 1a:ff:a6:2c:eb:e5:c5:7a:23:95:99:73:4c:06:60:cb:d7:05: d3:72:eb:ba:82:8d:fc:c4:80:de:1c:fc:22:2e:41:2c:0a:fa: a2:ef:08:99:1e:26:e3:07:7b:71:8d:07:c5:92:81:54:13:9d: 7e:b4:d2:54:d0:00:d9:ca:44:af:00:5f:1a:a8:95:b5:00:68: d6:08:2f:67:f3:0c:e4:a1:ea:be:d9:dc:3b:ae:7a:f0:39:13: b6:83:a6:07:52:03:22:5c:a0:43:86:0a:0a:54:71:9c:84:15: 9d:06:c7:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUwNjE1MDM0NzI3WhcNMjUwNjIyMDM0NzI3WjAYMRYwFAYD VQQDEw02ODRlNDI0Zi05NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhagz23jc8mWo48FJsLPGloXu0XpSfhAUuhRBtVndNzaGNshL6XEIlbgojVa Po0nuosf3HC3R5E50Nrrc/fW5TiEYEjCErtDDbj0XTf9BzZ4HKNkPg5oVvkrHaGq oyxRK+95MbJVNe/kAgHJAU9QLGVxZztOt8VKmlvmjyFhbYy8lVO3FTj5gQi8nZgF s1BNLjaDSil1YgRvtneocxyajnCAyV0IdzBN/t+NsBAqMTDPycaexbcgRrP/Ezfw fBSocB5agpOHnPzjcJJROdee9p/KEUhW3YXSl/tmxw6xsUh+A0JQ4wei/l8bwa8P +SN4U+Ye8+4jsX7oyQ1zJimMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgswrHg otvVtbO6Qcm6gvTJLlxaMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAf6b8A5nYz5EW6A4xcV9widIHJQ6WdMt0sXnqtNm3BuJtH1VtyUIi xcI88qbfYCh2Ow1KL1ok7U/EmcxGRrUgldYvgr08oXnFZMs5LlJ7FiyLepi+ZQpH gdXz5rE0SUDG1MPPaYjkSRerbcCVfuFV6m4v/5OOTuTv1q8fmHi3rHJmz6ISQxHy 1Nh2FWDs83wa/6Ys6+XFeiOVmXNMBmDL1wXTcuu6go38xIDeHPwiLkEsCvqi7wiZ HibjB3txjQfFkoFUE51+tNJU0ADZykSvAF8aqJW1AGjWCC9n8wzkoeq+2dw7rnrw ORO2g6YHUgMiXKBDhgoKVHGchBWdBscy -----END CERTIFICATE-----Generated at Sun Jun 15 08:26:08 2025 by rpki-client