$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: 27nyCJK/OSgtdSdHFffInVTqLUwdkuRXa3sjHmEm55M= Subject key identifier: F9:40:43:F5:B8:97:33:CC:E3:80:2B:21:F5:55:79:79:9B:FF:9F:5D Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 13C1 Signing time: Thu 12 Jun 2025 18:54:18 +0000 Manifest this update: Thu 12 Jun 2025 18:54:17 +0000 Manifest next update: Thu 19 Jun 2025 18:54:17 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: XfG09+Bl8tzXOlfyDFiSSXdhZSaV+cc2DFeZx2g+eKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Jun 12 18:54:17 2025 GMT Not After : Jun 19 18:54:17 2025 GMT Subject: CN=684b2259-6f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9c:c4:8d:8b:ad:46:7e:d2:9d:ce:b5:f0:d1: 9e:f1:a1:63:80:33:18:3f:65:a7:71:41:6f:7e:18: 86:cf:7c:0c:03:19:2d:59:a3:38:c8:13:2c:24:de: ee:6e:75:9a:b2:c8:ba:fd:02:35:15:7d:9b:57:0d: ea:41:b8:ea:dc:0b:7d:51:b7:8a:36:42:28:86:be: cf:99:3d:bf:f3:32:5a:fb:73:26:50:18:60:d9:5e: c0:e1:86:8f:61:35:ff:51:a7:27:a5:de:c3:26:4c: 1d:7d:b6:d5:c3:9f:95:61:5e:5a:8a:e4:5e:22:98: 91:f1:a5:6d:d5:6f:fb:c5:e9:0d:9f:6c:fa:f2:0f: 15:e6:83:67:b6:e0:29:53:41:a4:a6:2f:d2:ff:e3: 10:84:02:09:0f:51:0b:1f:8f:26:df:0b:96:79:71: 7a:3a:a5:a0:34:0b:d3:99:0e:7d:55:7b:f1:8e:99: 2f:0e:18:e0:6a:33:bf:07:b8:25:6c:15:da:b2:64: 5d:b2:05:28:73:b2:d8:98:ee:ac:4a:57:ec:93:71: 49:e4:18:db:9b:6d:a5:f5:f0:a1:98:e1:24:d5:3f: a8:95:2f:1d:5b:2e:37:58:99:44:e0:d1:08:40:2f: c9:93:df:4c:af:38:c4:1c:f4:ec:ee:a7:dc:a5:d0: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:43:F5:B8:97:33:CC:E3:80:2B:21:F5:55:79:79:9B:FF:9F:5D X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:18:35:b7:bc:b0:3f:a9:71:18:75:f9:67:ee:f7:b5:2b: 8c:5e:28:12:02:36:7b:45:26:02:a3:ab:a7:7d:f7:45:36:cd: 5c:18:fc:89:69:98:04:dc:59:08:fa:77:52:11:61:87:c1:8d: c9:01:ef:d7:d3:a0:66:b1:5b:f1:32:c1:34:ef:29:3c:46:d2: c4:1b:c2:e4:c7:b4:a5:86:3b:56:84:63:51:e2:12:43:53:5b: c9:2a:7b:24:84:f9:85:ea:c8:ca:d1:79:45:f2:09:38:37:46: 91:52:98:f4:63:63:bc:00:03:3c:2a:22:90:8d:43:62:cb:e8: 96:8f:1b:24:b4:c2:3b:7b:62:82:ab:2a:51:f8:2d:76:d3:82: eb:23:b5:32:5a:af:dc:bf:b0:43:ca:3c:e0:a3:c8:57:7a:c1: 6e:e0:74:b6:95:b4:46:40:ca:6d:37:0e:ca:8f:9f:50:a7:c8: 67:62:15:27:3c:7f:cf:05:c3:34:a8:60:8f:d1:c2:be:a7:3a: 5c:b3:5e:45:35:75:9b:2f:20:14:48:33:50:07:5d:23:33:34: fd:ae:c3:d1:73:a4:49:3c:29:49:ab:f3:af:48:f4:83:f1:6e: 17:cd:a0:f9:51:82:cd:40:92:13:06:50:e8:8b:32:62:0d:fc: 57:f7:44:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwNjEyMTg1NDE3WhcNMjUwNjE5MTg1NDE3WjAYMRYwFAYD VQQDEw02ODRiMjI1OS02ZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+JzEjYutRn7Snc618NGe8aFjgDMYP2WncUFvfhiGz3wMAxktWaM4yBMsJN7u bnWassi6/QI1FX2bVw3qQbjq3At9UbeKNkIohr7PmT2/8zJa+3MmUBhg2V7A4YaP YTX/Uacnpd7DJkwdfbbVw5+VYV5aiuReIpiR8aVt1W/7xekNn2z68g8V5oNntuAp U0Gkpi/S/+MQhAIJD1ELH48m3wuWeXF6OqWgNAvTmQ59VXvxjpkvDhjgajO/B7gl bBXasmRdsgUoc7LYmO6sSlfsk3FJ5Bjbm22l9fChmOEk1T+olS8dWy43WJlE4NEI QC/Jk99MrzjEHPTs7qfcpdCCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlAQ/W4 lzPM44ArIfVVeXmb/59dMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRPxg1t7ywP6lxGHX5Z+73tSuMXigSAjZ7RSYCo6unffdFNs1cGPyJ aZgE3FkI+ndSEWGHwY3JAe/X06BmsVvxMsE07yk8RtLEG8Lkx7SlhjtWhGNR4hJD U1vJKnskhPmF6sjK0XlF8gk4N0aRUpj0Y2O8AAM8KiKQjUNiy+iWjxsktMI7e2KC qypR+C1204LrI7UyWq/cv7BDyjzgo8hXesFu4HS2lbRGQMptNw7Kj59Qp8hnYhUn PH/PBcM0qGCP0cK+pzpcs15FNXWbLyAUSDNQB10jMzT9rsPRc6RJPClJq/OvSPSD 8W4XzaD5UYLNQJITBlDoizJiDfxX90RG -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:28 2025 by rpki-client