$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json) Hash identifier: zxG3DPejjJdK14heNVz6CA5eDxVZdTJBa7SOnaINZbI= Subject key identifier: D6:27:5B:53:0F:2F:A6:02:85:12:38:37:64:95:29:BD:06:8B:95:AF Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft Manifest number: 50 Signing time: Sun 15 Jun 2025 06:21:55 +0000 Manifest this update: Sun 15 Jun 2025 06:21:55 +0000 Manifest next update: Sun 22 Jun 2025 06:21:55 +0000 Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: Mf56e7jIbB2itxrjVKwpWbq4zLyE0LnfJ9hcFcWLSrY=) 2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Validity Not Before: Jun 15 06:21:55 2025 GMT Not After : Jun 22 06:21:55 2025 GMT Subject: CN=684e6683-c0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:60:dc:d0:72:9a:6d:d0:dc:e1:b1:a7:da: ee:94:ec:66:d5:a4:4f:6e:3b:b8:63:2e:40:0a:72: 32:07:8e:38:9e:6c:d8:97:52:72:b9:28:53:f3:3e: b3:9f:f4:16:30:46:af:e0:d8:90:4d:80:f9:c7:30: b1:55:96:ed:00:dd:9c:00:2e:ac:0f:53:c9:35:20: 4b:9f:df:eb:37:02:55:c9:3c:08:a3:81:57:b3:32: 0e:d9:af:b9:60:7c:b3:a4:04:3b:be:49:37:b1:02: fc:e6:b1:e9:c7:47:01:fd:38:c5:d0:57:62:9a:8e: c3:67:ba:19:7e:48:3b:6f:ef:be:ce:58:a6:23:b5: 32:4d:8d:46:1c:f6:55:31:f7:b2:df:38:63:d9:db: c9:9c:af:e0:ed:13:3d:7e:0f:e8:fb:20:05:a4:8d: c1:08:2e:b8:4e:3f:fe:fd:07:6f:8e:12:3a:4a:cb: 00:07:92:ef:23:71:a6:5c:21:7a:8a:00:7c:cf:9c: 10:9a:35:d4:18:1a:d0:4d:4e:83:5c:48:6e:75:22: f4:ca:d7:51:35:6c:85:22:96:f9:e6:d3:84:10:ce: 87:6e:8c:48:a7:04:32:1b:24:cd:fb:0f:d0:bf:8f: 06:55:37:3c:c5:61:7c:a8:62:fd:0a:d7:bc:70:ae: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:5B:53:0F:2F:A6:02:85:12:38:37:64:95:29:BD:06:8B:95:AF X509v3 Authority Key Identifier: keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c9:b8:06:bb:73:a7:f5:5a:2b:e6:4d:6d:84:d3:3a:82:9e: 2e:a3:6d:67:fa:8a:c9:54:1b:e9:e0:37:c8:b5:a2:cf:c1:cd: 03:59:68:b5:b0:1c:83:34:ea:94:d4:bf:5a:00:64:fe:e5:2e: c6:aa:0a:42:1c:08:0a:91:e3:56:67:f5:16:c4:82:48:39:3b: 5f:93:fa:48:fb:f8:d8:20:3b:8e:88:58:58:32:98:a1:e5:2a: 3a:6b:70:9d:29:c3:7d:6c:4a:d1:82:e3:11:00:a6:19:c6:8b: a2:b0:fd:bd:6a:7b:c0:63:4f:01:58:13:0b:5d:78:6e:0f:e2: b2:d1:be:cd:34:d4:81:11:5f:15:9a:c5:22:93:df:34:d5:e8: fd:b2:64:58:3f:5f:36:85:50:37:2f:38:f0:3d:f0:1e:35:36: ba:c6:ed:95:b1:c6:3b:d8:f6:72:65:03:f6:4b:dd:bf:be:86: 2e:99:e2:d3:48:8b:c0:ba:c1:4c:83:e3:34:0a:df:37:9e:66: cc:44:27:f1:50:67:83:97:4e:b9:60:a8:e1:aa:2a:7e:1a:c9: 58:10:c3:08:59:0c:9f:01:93:69:85:7d:b3:20:50:32:90:c2: 89:a7:01:30:d2:ce:3e:7d:9e:e9:a3:6d:df:1e:e1:bb:ba:ba: 97:45:8b:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoNjE0N0EyQTZGMTA2REM1NjAxM0RDM0JDRkJBMEI0Qjc1 M0VDRDFCQzAeFw0yNTA2MTUwNjIxNTVaFw0yNTA2MjIwNjIxNTVaMBgxFjAUBgNV BAMTDTY4NGU2NjgzLWMwZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb4mDc0HKabdDc4bGn2u6U7GbVpE9uO7hjLkAKcjIHjjiebNiXUnK5KFPzPrOf 9BYwRq/g2JBNgPnHMLFVlu0A3ZwALqwPU8k1IEuf3+s3AlXJPAijgVezMg7Zr7lg fLOkBDu+STexAvzmsenHRwH9OMXQV2KajsNnuhl+SDtv777OWKYjtTJNjUYc9lUx 97LfOGPZ28mcr+DtEz1+D+j7IAWkjcEILrhOP/79B2+OEjpKywAHku8jcaZcIXqK AHzPnBCaNdQYGtBNToNcSG51IvTK11E1bIUilvnm04QQzodujEinBDIbJM37D9C/ jwZVNzzFYXyoYv0K17xwrmUNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1idbUw8v pgKFEjg3ZJUpvQaLla8wHwYDVR0jBBgwFoAUYUeipvEG3FYBPcO8+6C0t1Ps0bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzFFRDQ1MkFDRDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVVlaXB2RUczRllCUGNPOC02QzB0MVBzMGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzFFRDQ1MkFDRDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZ QlBjTzgtNkMwdDFQczBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjJuAa7c6f1WivmTW2E0zqCni6jbWf6islUG+ngN8i1os/BzQNZaLWw HIM06pTUv1oAZP7lLsaqCkIcCAqR41Zn9RbEgkg5O1+T+kj7+NggO46IWFgymKHl KjprcJ0pw31sStGC4xEAphnGi6Kw/b1qe8BjTwFYEwtdeG4P4rLRvs001IERXxWa xSKT3zTV6P2yZFg/XzaFUDcvOPA98B41NrrG7ZWxxjvY9nJlA/ZL3b++hi6Z4tNI i8C6wUyD4zQK3zeeZsxEJ/FQZ4OXTrlgqOGqKn4ayVgQwwhZDJ8Bk2mFfbMgUDKQ womnATDSzj59numjbd8e4bu6updFiw8= -----END CERTIFICATE-----Generated at Tue Jun 17 01:30:03 2025 by rpki-client