$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: E2QkeFyWXjGXeqZZY8neXZiXSLOOm2Trawfclf4nwcI= Subject key identifier: 07:16:8B:DD:DA:3A:A6:06:04:2D:8B:A4:64:D6:31:6D:C1:5F:87:17 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 3490 Signing time: Mon 16 Jun 2025 15:06:54 +0000 Manifest this update: Mon 16 Jun 2025 15:06:53 +0000 Manifest next update: Mon 23 Jun 2025 15:06:53 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: XNqg4Otu1UJBfZlLvZif9adS1tUsx1DG7Mhxv0K7BOw=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Jun 16 15:06:53 2025 GMT Not After : Jun 23 15:06:53 2025 GMT Subject: CN=6850330e-bf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:0b:3d:24:ec:bb:54:e7:c7:ed:75:15:6c: bd:2d:fb:4e:58:04:73:be:ea:40:5b:8c:e2:db:75: e4:09:e7:50:05:81:73:f6:15:81:21:81:f0:57:e8: f9:d6:26:1a:3a:c7:9c:b1:62:a5:7d:b9:4e:67:c3: 31:81:ed:c9:64:54:d6:5a:c1:6c:c5:00:df:ef:0d: 30:d1:32:90:03:05:7e:3e:7c:ee:08:2e:f2:4d:00: f2:6c:70:76:4d:b9:9b:c3:f0:4a:e9:2b:cc:4e:57: 1d:2a:15:14:20:74:ae:57:41:13:09:06:6e:15:66: 5f:4b:8a:74:7c:a5:64:e8:f4:ce:09:b8:29:d3:d8: 60:38:52:be:d4:03:ab:4e:29:27:ae:dc:f9:18:1b: 9d:85:bf:31:47:fd:f1:5c:c5:49:5e:da:c0:49:36: 42:9b:60:aa:b1:b9:31:e5:6c:9d:6c:c7:39:80:d7: de:1a:55:46:b8:db:a5:47:86:e8:ae:85:70:03:ef: 40:78:a7:43:63:34:80:ec:e0:3f:52:a9:d8:fc:30: 33:84:77:0a:40:78:4a:00:5e:67:8b:28:49:56:7a: e3:e7:de:72:36:aa:6e:f7:1c:90:90:83:6e:40:ca: b5:9f:aa:d0:61:2c:36:10:f4:6d:82:d2:65:f9:47: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:8B:DD:DA:3A:A6:06:04:2D:8B:A4:64:D6:31:6D:C1:5F:87:17 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:73:f6:71:be:54:4f:ff:e9:86:30:e6:51:8e:5d:ab:5e:af: 1f:5b:48:ce:6f:de:a8:6c:04:f8:6d:61:43:77:66:f2:63:0f: e7:f8:d5:e8:2d:f6:0c:3f:76:24:d7:6f:a9:7f:84:fc:83:f2: 35:c3:0e:6b:0a:67:d0:24:1c:73:64:73:b4:f2:75:c1:1d:e6: c6:9e:35:26:3b:e3:97:99:3b:df:70:b4:06:90:54:c0:0c:a1: c5:e7:89:c4:02:4d:7c:d5:ad:45:a2:88:20:cb:4e:63:16:cb: 54:ba:7a:d9:94:68:a6:f6:3e:da:d0:58:12:c5:39:ac:0e:e8: aa:ab:ba:95:72:74:de:24:ec:d5:2e:ef:94:2f:91:5f:3e:55: 54:b6:35:9b:0b:33:e0:bf:0a:99:f7:06:1d:68:d6:c8:e6:a1: f0:66:1b:a9:6a:ef:96:5e:b1:81:0f:82:ca:78:02:ee:76:ec: 8f:7d:f9:98:b5:1f:6d:5e:6a:20:a2:76:e9:75:7a:2f:fb:3b: 5a:2e:9a:3b:08:40:47:63:d1:e0:bd:39:b7:40:13:6b:1c:99: 39:22:68:bc:16:fe:31:d2:41:f7:a9:71:90:d9:c6:df:30:d1: 5b:29:b9:df:79:50:1a:ab:19:9e:ed:d6:e7:20:6b:86:d6:a8: cd:af:f1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUwNjE2MTUwNjUzWhcNMjUwNjIzMTUwNjUzWjAYMRYwFAYD VQQDEw02ODUwMzMwZS1iZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10oLPSTsu1Tnx+11FWy9LftOWARzvupAW4zi23XkCedQBYFz9hWBIYHwV+j5 1iYaOsecsWKlfblOZ8Mxge3JZFTWWsFsxQDf7w0w0TKQAwV+PnzuCC7yTQDybHB2 Tbmbw/BK6SvMTlcdKhUUIHSuV0ETCQZuFWZfS4p0fKVk6PTOCbgp09hgOFK+1AOr Tiknrtz5GBudhb8xR/3xXMVJXtrASTZCm2Cqsbkx5WydbMc5gNfeGlVGuNulR4bo roVwA+9AeKdDYzSA7OA/UqnY/DAzhHcKQHhKAF5niyhJVnrj595yNqpu9xyQkINu QMq1n6rQYSw2EPRtgtJl+Ue0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcWi93a OqYGBC2LpGTWMW3BX4cXMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClc/ZxvlRP/+mGMOZRjl2rXq8fW0jOb96obAT4bWFDd2byYw/n+NXo LfYMP3Yk12+pf4T8g/I1ww5rCmfQJBxzZHO08nXBHebGnjUmO+OXmTvfcLQGkFTA DKHF54nEAk181a1Fooggy05jFstUunrZlGim9j7a0FgSxTmsDuiqq7qVcnTeJOzV Lu+UL5FfPlVUtjWbCzPgvwqZ9wYdaNbI5qHwZhupau+WXrGBD4LKeALuduyPffmY tR9tXmogonbpdXov+ztaLpo7CEBHY9HgvTm3QBNrHJk5Imi8Fv4x0kH3qXGQ2cbf MNFbKbnfeVAaqxme7dbnIGuG1qjNr/GZ -----END CERTIFICATE-----Generated at Wed Jun 18 12:46:43 2025 by rpki-client