$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: APF94qT2Q6lXxGf59SFSHJUrNYDs0aZQS9iMV6qcLcg= Subject key identifier: 03:81:BE:C8:74:FC:39:76:6B:7E:B8:41:FC:7B:AF:11:0B:C8:4E:73 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A65 Signing time: Sat 14 Jun 2025 16:18:16 +0000 Manifest this update: Sat 14 Jun 2025 16:18:16 +0000 Manifest next update: Sat 21 Jun 2025 16:18:16 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: KnuU/edvLJq4x+t4QqMzt0GumK6OuOWeJZuUdAnQ+gk=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6767 (0x1a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Jun 14 16:18:16 2025 GMT Not After : Jun 21 16:18:16 2025 GMT Subject: CN=684da0c8-0b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:62:13:e2:2f:9b:dd:1f:18:86:42:cb:ad: df:02:3a:4e:7c:e3:99:5d:09:5c:50:84:03:92:ab: cb:78:63:29:45:60:1c:bc:17:46:69:16:32:0b:dd: 9f:d1:80:4c:76:d1:3d:b0:96:59:71:cf:ec:b8:4b: 4e:94:63:a0:24:35:5b:aa:39:69:ea:7a:ad:c9:46: 71:84:19:7d:60:11:5e:71:8f:42:3a:75:a3:cd:64: b1:35:b6:6e:c0:2d:25:a3:77:fd:cc:15:77:de:81: 49:ef:f8:a0:e0:63:22:a9:af:88:6f:80:72:d6:79: 3c:cb:f5:91:b9:0e:f9:bf:f9:be:cb:0e:56:03:2e: 89:e5:04:b9:80:f0:1a:4b:71:f8:b1:c1:76:93:60: 45:c9:0a:95:e0:61:b9:b9:7d:02:68:12:05:dd:be: 5c:bc:e3:77:34:b0:1f:36:b2:46:fb:42:6d:38:51: a4:39:22:45:bb:d0:3c:66:1f:fd:82:f3:6c:7f:e8: 1e:88:72:ee:ed:45:d5:4a:9c:33:59:c6:e5:a7:b6: b2:1d:99:64:10:ec:a3:a3:fa:d7:98:34:91:e1:85: f3:db:05:42:2f:e5:6f:84:c3:92:bd:48:7e:4f:7f: ca:5e:47:c1:2f:44:e3:f2:88:b5:a2:5a:f6:3c:60: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:BE:C8:74:FC:39:76:6B:7E:B8:41:FC:7B:AF:11:0B:C8:4E:73 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f5:2c:39:49:9f:19:2a:65:06:3d:c2:cd:d3:0a:a9:b7:bf: 18:7b:49:1f:05:6f:8a:e6:39:db:0f:16:ba:da:90:38:e5:54: 28:f6:9a:2a:db:93:ea:cc:fa:18:73:6b:ef:5c:80:c0:48:65: f4:0c:72:77:7f:f0:79:ca:fb:e1:2d:57:56:7b:6e:b8:ff:7e: b0:83:12:51:9e:74:3b:4f:25:50:d1:04:da:8f:de:64:1d:da: 23:94:63:d0:0a:71:19:46:b7:3d:15:29:cb:3f:93:e7:96:0b: ef:88:1b:44:a0:55:a7:b5:b1:4e:f5:3e:d3:31:7c:7f:eb:2a: e4:2d:9d:a6:ab:df:df:f3:93:87:09:40:5d:50:42:86:09:76: 24:2f:cb:9f:1f:50:41:07:81:50:e6:b6:91:4c:22:dd:72:6a: 2e:b6:e4:07:36:0f:bd:8a:c0:c7:81:43:78:44:e7:76:9e:18: 52:25:25:00:2b:b5:1a:df:ce:97:b5:c5:f6:f2:da:bb:ef:6a: e3:ba:93:9b:7a:45:1d:4f:2d:b9:ad:d4:b9:7b:9b:c7:49:c0: 9f:d1:6a:ac:ed:fe:65:fb:aa:c7:b4:3f:bd:b5:3e:2a:84:ba: a3:99:ca:37:05:8e:53:ed:43:ca:34:12:57:a3:52:2e:36:02: 8d:78:58:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwNjE0MTYxODE2WhcNMjUwNjIxMTYxODE2WjAYMRYwFAYD VQQDEw02ODRkYTBjOC0wYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJRiE+Ivm90fGIZCy63fAjpOfOOZXQlcUIQDkqvLeGMpRWAcvBdGaRYyC92f 0YBMdtE9sJZZcc/suEtOlGOgJDVbqjlp6nqtyUZxhBl9YBFecY9COnWjzWSxNbZu wC0lo3f9zBV33oFJ7/ig4GMiqa+Ib4By1nk8y/WRuQ75v/m+yw5WAy6J5QS5gPAa S3H4scF2k2BFyQqV4GG5uX0CaBIF3b5cvON3NLAfNrJG+0JtOFGkOSJFu9A8Zh/9 gvNsf+geiHLu7UXVSpwzWcblp7ayHZlkEOyjo/rXmDSR4YXz2wVCL+VvhMOSvUh+ T3/KXkfBL0Tj8oi1olr2PGB1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOBvsh0 /Dl2a364Qfx7rxELyE5zMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+9Sw5SZ8ZKmUGPcLN0wqpt78Ye0kfBW+K5jnbDxa62pA45VQo9poq 25PqzPoYc2vvXIDASGX0DHJ3f/B5yvvhLVdWe264/36wgxJRnnQ7TyVQ0QTaj95k HdojlGPQCnEZRrc9FSnLP5PnlgvviBtEoFWntbFO9T7TMXx/6yrkLZ2mq9/f85OH CUBdUEKGCXYkL8ufH1BBB4FQ5raRTCLdcmoutuQHNg+9isDHgUN4ROd2nhhSJSUA K7Ua386XtcX28tq772rjupObekUdTy25rdS5e5vHScCf0Wqs7f5l+6rHtD+9tT4q hLqjmco3BY5T7UPKNBJXo1IuNgKNeFh0 -----END CERTIFICATE-----Generated at Sun Jun 15 17:49:21 2025 by rpki-client