$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: j8isLX1B6Gbo12qypgOB5KxIXtdpCIgZJjx8NixIVUk= Subject key identifier: 8C:54:61:64:D5:3E:E5:A8:F2:6C:8D:E2:01:40:FC:CC:05:80:BF:25 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 77 Signing time: Thu 19 Jun 2025 06:11:19 +0000 Manifest this update: Thu 19 Jun 2025 06:11:19 +0000 Manifest next update: Thu 26 Jun 2025 06:11:19 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 4V7zRp10DSZXRyODe0Y32C0c3ncG22zxFDmJLAynhog=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Jun 19 06:11:19 2025 GMT Not After : Jun 26 06:11:19 2025 GMT Subject: CN=6853aa07-93a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:41:df:85:3f:f3:c1:c7:fd:3f:67:7c:09: c4:9c:85:4b:0e:47:2c:c7:5c:4a:44:65:30:60:48: f8:8d:7d:62:50:bf:2f:72:8b:8c:70:56:88:7f:81: 25:4d:c3:9a:03:87:29:97:a5:1f:56:7c:67:75:37: 23:d8:c6:21:ed:6d:ea:3e:09:fc:8f:6f:e7:c3:a5: 76:7a:7c:4a:37:7e:81:af:89:55:05:b5:45:5d:0b: a1:b0:56:44:84:14:81:75:d3:b4:65:ba:ae:f4:59: 07:3f:75:c2:42:94:5d:65:be:76:70:36:e2:6b:2f: a9:65:44:ec:cd:d7:ff:46:7c:f8:89:89:79:6c:8a: 35:56:4d:3b:49:c4:c0:55:4f:9b:63:80:e7:66:86: 14:5c:7c:c9:90:50:a4:7c:87:98:61:c3:81:9f:2c: c7:48:c6:f9:32:b5:f9:f9:d1:cf:a8:44:ca:94:cb: a3:d0:a4:6a:f0:e2:d9:72:8c:43:ea:cb:86:3f:bc: 4b:2a:61:67:a5:8d:6b:e9:c2:6d:af:8e:61:52:2f: 2c:bb:eb:fa:f1:36:1c:7d:0f:4b:cf:76:28:c8:4a: 16:2b:1c:c0:0c:ee:7d:39:28:2c:d0:92:f8:b9:e7: 9b:a5:a3:a5:9a:b8:15:00:4e:43:fc:bd:ae:fa:d2: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:54:61:64:D5:3E:E5:A8:F2:6C:8D:E2:01:40:FC:CC:05:80:BF:25 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c4:b4:7b:ed:36:ad:d3:cb:22:68:5a:ed:63:a1:ed:4f:25: 66:87:14:fb:c1:06:d8:c5:64:e7:91:c1:3c:d4:e4:0b:64:f8: d2:3e:8a:f3:33:0b:bb:08:50:dd:f5:2e:91:1c:e1:f5:76:8f: a2:29:e0:27:30:11:1e:fa:82:7d:25:15:b3:39:34:a8:55:8f: 21:bf:c6:f9:fb:5c:21:70:67:5e:0c:29:f5:30:31:89:09:16: 33:13:8e:83:3d:b8:7b:1b:a1:54:0a:72:0a:b8:22:d0:27:a1: 1a:5b:d4:88:a9:07:43:2b:b9:ff:a1:9d:51:e9:98:08:fe:84: 9f:63:b1:8a:83:11:52:d0:45:a7:af:43:30:65:11:39:89:e7: 1c:12:02:14:fa:a4:99:0c:4c:d1:00:24:81:de:d6:08:76:c3: 2f:3b:c6:f3:9c:b0:f7:d2:a7:02:13:c9:e4:19:dd:9a:2a:bd: 50:cd:42:db:93:4a:a7:92:bc:5d:8f:85:e4:7b:ab:47:d9:16: 7c:3c:30:ad:6e:41:8a:2d:de:94:c1:5a:11:47:b5:58:48:b8: a8:a1:42:2c:e6:cc:2e:36:cb:45:f0:1c:ed:eb:b4:7a:1e:53: 28:4b:a3:8e:41:cd:a7:3d:75:d7:99:3b:b0:bc:62:f3:95:0b: c7:a6:70:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNTA2MTkwNjExMTlaFw0yNTA2MjYwNjExMTlaMBgxFjAUBgNV BAMTDTY4NTNhYTA3LTkzYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0GEHfhT/zwcf9P2d8CcSchUsORyzHXEpEZTBgSPiNfWJQvy9yi4xwVoh/gSVN w5oDhymXpR9WfGd1NyPYxiHtbeo+CfyPb+fDpXZ6fEo3foGviVUFtUVdC6GwVkSE FIF107Rluq70WQc/dcJClF1lvnZwNuJrL6llROzN1/9GfPiJiXlsijVWTTtJxMBV T5tjgOdmhhRcfMmQUKR8h5hhw4GfLMdIxvkytfn50c+oRMqUy6PQpGrw4tlyjEPq y4Y/vEsqYWeljWvpwm2vjmFSLyy76/rxNhx9D0vPdijIShYrHMAM7n05KCzQkvi5 55ulo6WauBUATkP8va760lB7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjFRhZNU+ 5ajybI3iAUD8zAWAvyUwHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3EtHvtNq3TyyJoWu1joe1PJWaHFPvBBtjFZOeRwTzU5Atk+NI+ivMz C7sIUN31LpEc4fV2j6Ip4CcwER76gn0lFbM5NKhVjyG/xvn7XCFwZ14MKfUwMYkJ FjMTjoM9uHsboVQKcgq4ItAnoRpb1IipB0Mruf+hnVHpmAj+hJ9jsYqDEVLQRaev QzBlETmJ5xwSAhT6pJkMTNEAJIHe1gh2wy87xvOcsPfSpwITyeQZ3ZoqvVDNQtuT SqeSvF2PheR7q0fZFnw8MK1uQYot3pTBWhFHtVhIuKihQizmzC42y0XwHO3rtHoe UyhLo45Bzac9ddeZO7C8YvOVC8emcGA= -----END CERTIFICATE-----Generated at Thu Jun 19 18:43:36 2025 by rpki-client