$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: HkTVakdcrYEpqvB0qkI18vJwz9Fqiibel1kpfsAzk54= Subject key identifier: 62:1A:95:7C:3B:CA:09:DC:38:82:7A:C3:00:2F:F1:BB:64:24:E6:6C Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0C6C Signing time: Thu 12 Jun 2025 18:09:54 +0000 Manifest this update: Thu 12 Jun 2025 18:09:54 +0000 Manifest next update: Thu 19 Jun 2025 18:09:54 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: M71LezdWi5Attw4mMAk7kmyE2ieTXdDPHa6umq4wbz4=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Jun 12 18:09:54 2025 GMT Not After : Jun 19 18:09:54 2025 GMT Subject: CN=684b17f2-f36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:bd:25:b8:dc:99:a1:12:f5:00:e3:fb:f3: 48:2d:bb:5f:83:5c:66:f3:62:48:ab:9b:f5:ef:f6: 91:34:47:fb:f0:bc:98:37:24:6b:c5:ee:33:1c:14: 32:98:ff:3b:3d:d2:6c:57:2a:65:07:12:7b:20:be: 5a:d5:d1:33:d6:76:71:9f:e0:c1:52:56:2a:7c:ce: ca:83:5e:cb:af:ea:86:f4:ea:e5:e6:70:7c:d8:da: 87:26:ef:d7:51:6d:a7:e6:f7:05:23:91:cf:68:c3: bb:76:25:30:91:87:df:cd:77:95:2a:c4:05:34:42: 3a:8c:46:96:48:eb:a5:a7:19:de:00:39:f1:bb:8a: 36:ff:b2:74:27:00:42:a3:b4:48:29:90:3e:d5:6c: 77:ae:a4:f1:ab:e9:ab:91:9f:af:b7:cc:5d:5e:9a: 73:0e:ff:cc:56:33:bf:02:1a:46:81:c5:fc:27:7d: d0:94:fc:7b:16:32:7e:e6:7a:3c:46:78:64:d1:3a: 7a:12:2c:da:2a:17:ab:aa:9e:07:b1:b3:e5:bb:8e: 5c:0b:dd:a8:a1:92:6b:ea:5e:71:bb:a2:5d:5a:cb: db:17:1e:f0:26:31:4f:4e:19:1a:46:66:3a:02:50: 3e:37:56:81:ed:2c:d2:57:0d:97:68:16:d1:fe:64: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:95:7C:3B:CA:09:DC:38:82:7A:C3:00:2F:F1:BB:64:24:E6:6C X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:a8:10:e2:3a:03:3c:08:cc:8a:43:5a:b9:20:4f:41:25: 20:3a:90:07:e8:79:9e:7a:3d:55:71:66:82:97:1e:28:7f:c6: f2:4b:3c:17:eb:af:4b:18:5d:3e:60:49:27:5e:04:0b:3a:60: 67:bb:5e:1c:3a:12:29:fe:76:44:03:9c:3a:02:45:55:e2:49: af:ae:5d:2d:60:7c:92:e4:2b:05:b3:ee:80:98:e1:f3:7d:65: 9c:e5:d0:5e:a5:d7:d5:1a:1e:f7:ed:dc:ed:6e:ec:02:d5:06: 6b:3c:73:9a:d4:a6:fd:8e:ac:11:43:6c:d8:fc:9a:b0:70:be: e1:67:87:4b:79:3e:38:8b:b8:e8:e1:e7:c8:6c:e4:52:95:0c: d6:dd:30:ce:83:34:e0:95:39:91:a0:29:63:74:c3:bd:3d:81: 05:91:c7:02:6c:f8:d1:4a:97:57:99:87:d8:b3:f8:b1:29:87: 22:0c:28:ee:cb:77:e1:13:39:bd:8b:35:c5:10:d2:5d:ed:ad: f4:8f:90:ab:bf:41:cc:a3:89:6d:06:f3:06:c0:19:34:19:9d: e7:f4:bf:4a:d6:67:3e:03:91:54:7c:e9:1d:13:30:a6:73:d4: 1a:f9:a0:29:58:c5:ed:c2:3d:e6:05:32:bf:8d:78:47:4f:59: 30:8d:46:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUwNjEyMTgwOTU0WhcNMjUwNjE5MTgwOTU0WjAYMRYwFAYD VQQDEw02ODRiMTdmMi1mMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLO9JbjcmaES9QDj+/NILbtfg1xm82JIq5v17/aRNEf78LyYNyRrxe4zHBQy mP87PdJsVyplBxJ7IL5a1dEz1nZxn+DBUlYqfM7Kg17Lr+qG9Orl5nB82NqHJu/X UW2n5vcFI5HPaMO7diUwkYffzXeVKsQFNEI6jEaWSOulpxneADnxu4o2/7J0JwBC o7RIKZA+1Wx3rqTxq+mrkZ+vt8xdXppzDv/MVjO/AhpGgcX8J33QlPx7FjJ+5no8 Rnhk0Tp6EizaKherqp4HsbPlu45cC92ooZJr6l5xu6JdWsvbFx7wJjFPThkaRmY6 AlA+N1aB7SzSVw2XaBbR/mRAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIalXw7 ygncOIJ6wwAv8btkJOZsMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASl6gQ4joDPAjMikNauSBPQSUgOpAH6Hmeej1VcWaClx4of8bySzwX 669LGF0+YEknXgQLOmBnu14cOhIp/nZEA5w6AkVV4kmvrl0tYHyS5CsFs+6AmOHz fWWc5dBepdfVGh737dztbuwC1QZrPHOa1Kb9jqwRQ2zY/JqwcL7hZ4dLeT44i7jo 4efIbORSlQzW3TDOgzTglTmRoCljdMO9PYEFkccCbPjRSpdXmYfYs/ixKYciDCju y3fhEzm9izXFENJd7a30j5Crv0HMo4ltBvMGwBk0GZ3n9L9K1mc+A5FUfOkdEzCm c9Qa+aApWMXtwj3mBTK/jXhHT1kwjUYE -----END CERTIFICATE-----Generated at Sat Jun 14 17:15:40 2025 by rpki-client