$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: yLRzLE/J573VjvKiNpg7le/aqmimtAwHqDwzhEO8/EQ= Subject key identifier: 06:33:9A:7A:5A:7D:81:A6:B2:8C:58:0C:01:EB:22:C4:CF:47:C8:EC Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: 95 Signing time: Sun 15 Jun 2025 05:30:16 +0000 Manifest this update: Sun 15 Jun 2025 05:30:15 +0000 Manifest next update: Sun 22 Jun 2025 05:30:15 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: 9Or3Z88VYKQdwsgxM5ZYcZ9aBnQSF9+WemARztkkuTE=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Jun 15 05:30:15 2025 GMT Not After : Jun 22 05:30:15 2025 GMT Subject: CN=684e5a68-f56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:f6:07:e2:c0:75:8e:6d:33:ae:72:cc:05: b7:bd:07:2f:88:ac:40:c5:c0:5f:6c:ef:82:a9:53: 1d:2d:2c:e7:3b:e3:90:d9:e1:c6:4d:c0:69:cb:e4: 2e:ca:34:92:41:f3:e7:bc:95:4f:54:6d:10:eb:3e: 8e:7c:55:13:9a:1f:c6:31:9c:00:d6:e6:6b:23:f0: 86:2b:8c:43:a1:f8:b5:c9:96:35:e7:8b:6a:10:e4: 68:c3:6c:cc:5e:c2:e3:3c:2e:4a:c7:e6:8b:1b:57: 61:8f:90:9d:40:7a:e7:2b:11:f2:9f:4f:4c:9d:d3: a4:87:41:a8:98:f7:05:ff:be:eb:cb:ca:81:33:54: cb:64:6b:1c:f8:b6:b7:a0:e7:2f:d0:4d:20:0a:38: 14:73:b9:63:f8:5d:4b:a9:59:18:cf:10:6d:21:74: 09:ef:c9:68:16:12:f5:ea:f3:07:54:52:73:ec:54: 40:5f:0e:24:58:7e:27:df:d6:d3:59:13:bc:03:e1: c3:68:ec:37:3a:bc:d9:81:67:0b:00:11:aa:44:39: a3:f6:45:ce:da:69:36:cc:42:d5:a4:12:fd:e3:8a: f4:5f:77:5e:9d:c2:55:3a:3c:20:00:7f:82:d8:b2: 05:ea:32:2d:e5:29:1b:a1:7e:6a:2a:3d:06:c0:32: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:33:9A:7A:5A:7D:81:A6:B2:8C:58:0C:01:EB:22:C4:CF:47:C8:EC X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:69:a2:bb:fd:ed:fb:a6:08:f3:f7:ae:0d:e7:6e:74:9a:1a: b2:36:3f:b9:d6:7c:10:48:29:8a:f7:2f:d9:dc:a7:1a:2d:7e: 07:78:70:7c:d0:6a:eb:d9:83:53:22:16:76:2a:8a:8c:0a:87: a1:bb:81:03:4b:5a:fe:99:2b:8e:39:a0:97:b6:22:53:e8:ea: 89:57:17:46:dd:88:c4:d1:bb:36:93:72:34:36:8c:a2:23:20: a4:ec:11:d0:07:6f:6c:3f:c0:c6:cc:72:70:77:08:75:a9:0d: 8c:77:b4:01:89:57:68:92:5b:17:ab:39:76:93:1d:d6:01:d6: 7f:f7:7f:41:dd:27:57:d2:5e:a7:71:69:03:3f:0a:9b:6f:dd: af:dd:69:67:cb:5f:7a:b4:44:ca:ed:e5:67:b9:f2:79:4d:73: 18:47:60:32:6c:c5:88:ba:f7:e5:75:95:83:37:b6:03:67:99: 10:cd:94:65:d2:fa:eb:ca:60:37:1f:83:88:ab:18:d3:da:07: cd:12:56:ac:b4:6b:4a:4d:56:7a:21:11:ec:1d:e7:1e:5d:9f: fa:af:d9:c6:6c:43:d6:f5:85:66:b0:89:39:ec:f6:36:ce:4c: 43:58:f3:45:31:cf:50:8c:45:b0:6e:cd:b8:ce:7a:54:2b:39: 22:c5:09:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCRDkxMTAvBgNVBAUTKDYzQkEyODFENTZGQTRGRTZFNTM1QjEyNUUxNkRGODAx RDEyRjgwOTkwHhcNMjUwNjE1MDUzMDE1WhcNMjUwNjIyMDUzMDE1WjAYMRYwFAYD VQQDEw02ODRlNWE2OC1mNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47r2B+LAdY5tM65yzAW3vQcviKxAxcBfbO+CqVMdLSznO+OQ2eHGTcBpy+Qu yjSSQfPnvJVPVG0Q6z6OfFUTmh/GMZwA1uZrI/CGK4xDofi1yZY154tqEORow2zM XsLjPC5Kx+aLG1dhj5CdQHrnKxHyn09MndOkh0GomPcF/77ry8qBM1TLZGsc+La3 oOcv0E0gCjgUc7lj+F1LqVkYzxBtIXQJ78loFhL16vMHVFJz7FRAXw4kWH4n39bT WRO8A+HDaOw3OrzZgWcLABGqRDmj9kXO2mk2zELVpBL944r0X3dencJVOjwgAH+C 2LIF6jIt5SkboX5qKj0GwDJYyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYzmnpa fYGmsoxYDAHrIsTPR8jsMB8GA1UdIwQYMBaAFGO6KB1W+k/m5TWxJeFt+AHRL4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0JEOS9FMDQ2QjBCNjY4 MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQtYmxOYkVsNFczNEFkRXZn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0JEOS9FMDQ2QjBCNjY4MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQt YmxOYkVsNFczNEFkRXZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFaaK7/e37pgjz964N5250mhqyNj+51nwQSCmK9y/Z3KcaLX4HeHB8 0Grr2YNTIhZ2KoqMCoehu4EDS1r+mSuOOaCXtiJT6OqJVxdG3YjE0bs2k3I0Noyi IyCk7BHQB29sP8DGzHJwdwh1qQ2Md7QBiVdoklsXqzl2kx3WAdZ/939B3SdX0l6n cWkDPwqbb92v3Wlny196tETK7eVnufJ5TXMYR2AybMWIuvfldZWDN7YDZ5kQzZRl 0vrrymA3H4OIqxjT2gfNElastGtKTVZ6IRHsHeceXZ/6r9nGbEPW9YVmsIk57PY2 zkxDWPNFMc9QjEWwbs24znpUKzkixQlC -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:24 2025 by rpki-client