$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: 7mSwTqFlQjt8TAOCdWycoa1tWmuz1Ut4odbMF6gq2Oc= Subject key identifier: B2:52:14:BA:62:EC:85:BD:FF:09:79:5A:EC:3C:A8:CB:12:AC:03:C3 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 4D Signing time: Thu 19 Jun 2025 06:43:38 +0000 Manifest this update: Thu 19 Jun 2025 06:43:38 +0000 Manifest next update: Thu 26 Jun 2025 06:43:38 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: Kyzq5PpR0R9NBSXJMWAtfbrtJoigmFLoRygKylStmZY=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Jun 19 06:43:38 2025 GMT Not After : Jun 26 06:43:38 2025 GMT Subject: CN=6853b19a-ba17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:c2:3e:2b:07:f2:46:82:25:86:2d:20:6e: 1b:66:ad:02:bc:1f:9e:c1:51:78:17:9b:ba:26:37: 97:fb:58:b9:6d:e0:9e:5f:61:bb:8c:eb:d6:06:34: 68:4b:7d:b9:cb:2d:9d:0d:8f:df:70:3a:58:18:16: b5:f1:8b:f9:71:39:c3:35:f9:cd:5e:a1:12:ac:ce: 54:70:fc:10:d7:50:83:c9:af:87:cd:72:80:c2:a5: c2:fb:6f:68:ea:08:23:52:da:43:70:ab:8a:3d:b0: 0c:e0:65:0a:1a:26:07:e6:20:a1:b0:d2:97:7c:9f: d9:c9:28:f5:63:f0:88:aa:6a:bd:34:bd:2a:7e:f0: df:46:b9:5e:92:3a:e5:cd:37:d2:49:14:4d:a5:b1: e9:39:45:ce:f5:c9:3a:d5:bf:3d:f0:6e:17:a9:8c: 01:53:fe:d6:b0:4f:64:30:62:cb:a4:ed:d5:a7:69: 94:6f:38:2f:c8:ff:d1:9b:0b:01:a5:85:d6:ab:86: 0a:04:56:7c:08:35:5a:98:7a:64:8b:97:08:c5:7f: e2:8e:52:b6:e5:4b:3e:d6:62:8b:57:9f:9a:f3:02: 8d:b6:bf:c2:1d:74:0c:21:7c:26:75:67:a0:58:df: 24:da:dd:14:71:5f:20:67:07:5e:ff:c8:44:55:cf: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:52:14:BA:62:EC:85:BD:FF:09:79:5A:EC:3C:A8:CB:12:AC:03:C3 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6b:82:a3:a5:93:d1:13:bf:5b:b1:0c:12:1f:19:44:bb:59: f4:ca:e0:00:9a:fe:18:a7:3f:67:60:d2:55:ba:de:5d:db:24: 90:ee:92:c7:6e:dd:1c:0a:f9:71:80:5c:c3:a6:e0:c9:36:26: 66:60:78:10:57:3b:86:22:72:b4:e2:e8:8c:fb:fc:a2:86:85: f2:1e:5a:4c:2a:59:84:d3:97:2c:d6:bc:7c:18:24:02:0b:43: 19:6e:ff:a7:dd:75:9c:f1:d8:10:5e:cf:f7:de:94:a7:af:3d: 3f:79:74:a5:04:bf:14:66:8c:8a:5c:d0:89:a5:fa:ff:ab:ff: 44:3c:af:55:a4:8a:7d:25:b5:75:7c:96:a6:7e:cf:2f:93:85: e6:01:8b:45:66:98:ac:c1:99:3d:2d:9a:c2:f9:cb:ed:de:91: 27:9b:39:bc:35:57:6a:e2:f6:5c:32:f6:19:34:d3:c9:9b:7b: 5f:ee:3f:b8:b8:67:a1:8d:0b:62:19:6a:4b:39:1b:18:ad:51: 9e:2e:99:2f:9c:f8:7a:65:6d:4c:29:9d:33:fb:29:ac:fe:6b: ac:25:c7:a9:49:c6:31:2d:b4:e1:65:b1:93:66:57:27:94:11: d9:b0:51:e1:f6:c1:c9:d3:8a:d2:6f:8e:10:89:15:75:b6:ba: 7e:49:e4:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA2MTkwNjQzMzhaFw0yNTA2MjYwNjQzMzhaMBgxFjAUBgNV BAMTDTY4NTNiMTlhLWJhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuqsI+KwfyRoIlhi0gbhtmrQK8H57BUXgXm7omN5f7WLlt4J5fYbuM69YGNGhL fbnLLZ0Nj99wOlgYFrXxi/lxOcM1+c1eoRKszlRw/BDXUIPJr4fNcoDCpcL7b2jq CCNS2kNwq4o9sAzgZQoaJgfmIKGw0pd8n9nJKPVj8Iiqar00vSp+8N9GuV6SOuXN N9JJFE2lsek5Rc71yTrVvz3wbhepjAFT/tawT2QwYsuk7dWnaZRvOC/I/9GbCwGl hdarhgoEVnwINVqYemSLlwjFf+KOUrblSz7WYotXn5rzAo22v8IddAwhfCZ1Z6BY 3yTa3RRxXyBnB17/yERVzxrnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUslIUumLs hb3/CXla7DyoyxKsA8MwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMRrgqOlk9ETv1uxDBIfGUS7WfTK4ACa/hinP2dg0lW63l3bJJDuksdu 3RwK+XGAXMOm4Mk2JmZgeBBXO4YicrTi6Iz7/KKGhfIeWkwqWYTTlyzWvHwYJAIL Qxlu/6fddZzx2BBez/felKevPT95dKUEvxRmjIpc0Iml+v+r/0Q8r1Wkin0ltXV8 lqZ+zy+TheYBi0VmmKzBmT0tmsL5y+3ekSebObw1V2ri9lwy9hk008mbe1/uP7i4 Z6GNC2IZaks5GxitUZ4umS+c+HplbUwpnTP7Kaz+a6wlx6lJxjEttOFlsZNmVyeU EdmwUeH2wcnTitJvjhCJFXW2un5J5EE= -----END CERTIFICATE-----Generated at Fri Jun 20 21:27:01 2025 by rpki-client