$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft File: sYTDX2rtv7hd2kET8nUuDInKOpA.mft (raw, json) Hash identifier: Qdy2octRV0Ga7d9ukDQ5bZak+tEtjg48fhXxCbLs1m4= Subject key identifier: F6:82:98:D4:F7:C0:3C:DA:44:1F:5E:A4:02:49:AA:E9:19:65:C7:27 Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft Manifest number: 0AF1 Signing time: Thu 12 Jun 2025 19:11:07 +0000 Manifest this update: Thu 12 Jun 2025 19:11:06 +0000 Manifest next update: Thu 19 Jun 2025 19:11:06 +0000 Files and hashes: 1: sYTDX2rtv7hd2kET8nUuDInKOpA.crl (hash: SjjIWIcwqPHZTboCptOpIPxzNgv6kcu/p7VTunyuY1w=) 2: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (hash: +JzejbKc1NZP24NoPrMtMcVkZZ9hm7s276rW0zhe0b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Validity Not Before: Jun 12 19:11:06 2025 GMT Not After : Jun 19 19:11:06 2025 GMT Subject: CN=684b264b-b1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:d8:e1:69:c7:9a:21:ad:68:27:47:1e:bf: 56:6c:a7:65:79:c4:39:86:d2:0c:22:ba:1e:88:ac: 77:d1:e1:ed:ec:e7:d5:47:e4:7e:43:e4:1c:d6:a3: 21:7f:ae:14:c6:f6:58:8a:85:f9:6f:09:19:2d:67: e7:15:ec:13:5d:ca:5e:a9:a2:20:43:73:ba:c8:f8: c8:70:86:15:f0:55:b8:5c:fe:de:a2:73:27:07:25: d7:e0:44:b0:8b:e2:e8:ff:cd:98:cf:a4:e9:08:d6: d2:04:f0:f6:a4:a0:a1:17:0a:ff:b7:ae:5f:37:4c: 2f:54:be:0f:fe:df:c4:f6:d6:ed:e3:49:6c:56:51: 0c:08:b6:7e:12:8a:16:af:06:00:4f:5d:9a:ad:2f: c0:5e:f1:e1:f9:7b:d9:8a:fe:14:1e:a6:ed:58:a6: 1a:35:18:99:a7:c8:9c:2c:a5:7a:15:1a:b2:59:09: 87:12:a7:96:2e:8f:69:e5:4c:87:03:23:fa:75:2c: 0c:cc:4e:11:ee:7d:1a:a7:7f:89:24:67:40:d5:a0: a1:9e:71:6d:2a:8f:13:64:60:2d:d4:8f:89:8b:07: 30:6a:8a:86:78:e2:1e:2d:fb:2d:c2:4b:1d:a3:8f: 73:79:6f:ea:45:17:a4:7e:39:dd:dd:30:3f:a4:fd: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:82:98:D4:F7:C0:3C:DA:44:1F:5E:A4:02:49:AA:E9:19:65:C7:27 X509v3 Authority Key Identifier: keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:be:7a:52:bc:fe:17:47:f2:4a:69:c1:d8:76:1f:db:37:08: 33:3e:92:e0:06:03:ae:07:5e:b4:e4:33:db:bf:5a:ae:c9:e1: 91:12:d0:3c:d0:0a:ee:ab:b6:80:dc:4e:04:42:aa:c6:77:b0: 94:6f:f3:1d:57:90:5a:98:d6:46:ca:b7:90:ce:db:7f:23:00: 2a:e4:d2:e5:ff:b0:dd:f9:5a:d5:76:ca:66:e9:2c:d9:1e:7a: 7d:71:a6:ce:66:67:f8:25:91:b7:ec:f6:bf:f8:18:17:3e:f0: 2d:dd:fe:73:f6:4c:23:e2:47:d2:f2:0d:29:7e:d1:cb:55:de: fb:7d:93:07:0c:7b:2d:19:67:81:4f:b0:b4:55:d8:f1:d5:1b: 11:32:ac:79:53:b4:b5:a0:78:fc:70:91:07:a2:a6:bf:9d:9a: 94:77:00:a2:86:fc:72:03:d4:b2:74:eb:69:23:fa:08:90:10: a2:c8:1c:7b:40:0f:35:d0:37:f3:cc:21:0a:2e:a9:c8:2c:3a: 1e:6c:32:df:90:21:84:29:18:35:43:1a:61:e5:30:40:dd:c0: 4f:d3:9a:6f:43:50:5f:35:1c:9e:dd:a6:95:0c:14:ff:20:1f: 05:f0:fe:67:9f:a0:2b:ef:05:3d:b4:49:e5:3b:85:9c:6d:11: 51:a6:b2:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4RjQxMTAvBgNVBAUTKEIxODRDMzVGNkFFREJGQjg1RERBNDExM0YyNzUyRTBD ODlDQTNBOTAwHhcNMjUwNjEyMTkxMTA2WhcNMjUwNjE5MTkxMTA2WjAYMRYwFAYD VQQDEw02ODRiMjY0Yi1iMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNnY4WnHmiGtaCdHHr9WbKdlecQ5htIMIroeiKx30eHt7OfVR+R+Q+Qc1qMh f64UxvZYioX5bwkZLWfnFewTXcpeqaIgQ3O6yPjIcIYV8FW4XP7eonMnByXX4ESw i+Lo/82Yz6TpCNbSBPD2pKChFwr/t65fN0wvVL4P/t/E9tbt40lsVlEMCLZ+EooW rwYAT12arS/AXvHh+XvZiv4UHqbtWKYaNRiZp8icLKV6FRqyWQmHEqeWLo9p5UyH AyP6dSwMzE4R7n0ap3+JJGdA1aChnnFtKo8TZGAt1I+JiwcwaoqGeOIeLfstwksd o49zeW/qRRekfjnd3TA/pP0vmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaCmNT3 wDzaRB9epAJJqukZZccnMB8GA1UdIwQYMBaAFLGEw19q7b+4XdpBE/J1LgyJyjqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODhGNC8wN0FFNzdDQzQ4 Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3aGQya0VUOG5VdURJbktP cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZVERYMnJ0djdoZDJrRVQ4blV1REluS09wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODhGNC8wN0FFNzdDQzQ4Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3 aGQya0VUOG5VdURJbktPcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLvnpSvP4XR/JKacHYdh/bNwgzPpLgBgOuB1605DPbv1quyeGREtA8 0Aruq7aA3E4EQqrGd7CUb/MdV5BamNZGyreQztt/IwAq5NLl/7Dd+VrVdspm6SzZ Hnp9cabOZmf4JZG37Pa/+BgXPvAt3f5z9kwj4kfS8g0pftHLVd77fZMHDHstGWeB T7C0Vdjx1RsRMqx5U7S1oHj8cJEHoqa/nZqUdwCihvxyA9SydOtpI/oIkBCiyBx7 QA810DfzzCEKLqnILDoebDLfkCGEKRg1Qxph5TBA3cBP05pvQ1BfNRye3aaVDBT/ IB8F8P5nn6Ar7wU9tEnlO4WcbRFRprK+ -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:55 2025 by rpki-client