$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: zEECiiBq4NF6BCR9Ya+qHm42Xsv2qdKCiwYvlb72tmY= Subject key identifier: B3:62:18:04:62:20:CA:43:6B:CD:F9:CF:4F:63:6E:5E:DE:E7:04:03 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 066F Signing time: Sat 14 Jun 2025 22:07:59 +0000 Manifest this update: Sat 14 Jun 2025 22:07:59 +0000 Manifest next update: Sat 21 Jun 2025 22:07:59 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: CQCGaTI1OdhI/0iNTwRkdxUyc1fBpfOBsIg3o2iU4Gs=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: macE2NFUWcDcrdQSGzCQPdT+j1HMD3PGg+S93KaJKT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Jun 14 22:07:59 2025 GMT Not After : Jun 21 22:07:59 2025 GMT Subject: CN=684df2bf-01d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:cf:64:a3:a0:49:fd:b6:00:20:1d:91:10: 8b:55:b6:13:a2:87:c9:38:8a:f1:18:6e:d5:49:3a: 1a:74:0a:40:9c:84:87:6c:1c:6a:e5:79:b8:39:2f: 2c:d6:43:ca:6d:c4:cd:63:02:d7:69:67:e5:57:98: 04:65:df:1e:20:3c:de:2c:a2:0d:9e:6d:c2:01:30: 54:27:ca:85:9e:3f:85:aa:d9:b4:43:42:41:c3:be: e6:80:3b:cd:61:36:e7:bc:a6:81:11:a2:60:d9:2a: 20:5e:44:88:03:72:cf:c5:f3:39:90:1a:ad:59:df: 53:22:50:a3:3e:80:0f:6d:92:0e:16:7e:f6:57:b8: ad:47:34:04:81:f0:e1:9c:b3:e0:20:5a:39:d7:b5: 8f:47:5d:f2:34:19:d9:d4:20:27:a3:26:84:16:3f: 0e:dc:24:5e:36:47:d4:46:99:b6:b3:1c:37:2b:bf: a5:fe:80:20:4f:37:5e:b4:18:80:d7:cd:60:dc:d7: ea:0c:fc:08:89:00:87:89:60:bf:87:ac:ea:8f:69: 93:70:ee:c1:28:f5:bd:2e:3f:16:f5:d1:a9:f5:ab: 17:17:aa:2b:ee:7a:ea:e8:89:55:92:2f:dc:48:00: ba:83:c8:4e:5a:23:a1:f3:e8:ac:77:6b:70:cd:51: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:62:18:04:62:20:CA:43:6B:CD:F9:CF:4F:63:6E:5E:DE:E7:04:03 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6a:a8:29:03:35:7e:f5:be:ed:1c:7e:55:1e:54:aa:8a:60: dd:20:82:39:88:3f:39:95:32:90:6f:e2:0f:02:22:a0:dd:65: 76:45:39:d3:48:cd:25:21:1c:b5:90:d1:87:ba:26:23:69:67: 51:56:43:4e:c4:30:ad:3c:27:49:6e:04:30:26:77:3b:c4:19: 46:33:56:c6:aa:e0:5e:c2:de:74:65:f1:1e:37:43:d3:9a:07: d2:34:d6:a9:7c:03:af:d6:e4:41:dd:1b:29:b1:21:dd:0d:88: 65:8e:42:77:42:ac:ac:a7:37:a5:99:9d:18:49:95:00:72:36: bf:26:3a:8c:e9:e8:7c:80:c3:20:96:18:e8:ba:1d:c2:7e:dd: 32:f6:0c:14:4a:82:6a:9c:ba:3b:61:c6:f0:42:d5:f8:6d:a5: a7:32:0c:3e:c6:09:49:67:99:ff:c0:84:60:9c:16:11:46:2d: 6d:95:52:1a:f9:f8:d1:bb:f0:95:07:73:22:ca:db:7c:67:fb: e7:11:72:6a:f6:c2:15:05:6b:30:cc:8a:9d:77:1b:f8:62:03: a7:32:ad:23:64:7e:06:c5:03:f1:ac:98:c0:b6:5b:1e:f8:4a: 51:00:c0:5d:ad:2a:7d:92:46:66:0b:1c:3b:84:ea:21:19:34: ad:cf:90:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwNjE0MjIwNzU5WhcNMjUwNjIxMjIwNzU5WjAYMRYwFAYD VQQDEw02ODRkZjJiZi0wMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPvPZKOgSf22ACAdkRCLVbYToofJOIrxGG7VSToadApAnISHbBxq5Xm4OS8s 1kPKbcTNYwLXaWflV5gEZd8eIDzeLKINnm3CATBUJ8qFnj+Fqtm0Q0JBw77mgDvN YTbnvKaBEaJg2SogXkSIA3LPxfM5kBqtWd9TIlCjPoAPbZIOFn72V7itRzQEgfDh nLPgIFo517WPR13yNBnZ1CAnoyaEFj8O3CReNkfURpm2sxw3K7+l/oAgTzdetBiA 181g3NfqDPwIiQCHiWC/h6zqj2mTcO7BKPW9Lj8W9dGp9asXF6or7nrq6IlVki/c SAC6g8hOWiOh8+isd2twzVF6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNiGARi IMpDa835z09jbl7e5wQDMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtaqgpAzV+9b7tHH5VHlSqimDdIII5iD85lTKQb+IPAiKg3WV2RTnT SM0lIRy1kNGHuiYjaWdRVkNOxDCtPCdJbgQwJnc7xBlGM1bGquBewt50ZfEeN0PT mgfSNNapfAOv1uRB3RspsSHdDYhljkJ3QqyspzelmZ0YSZUAcja/JjqM6eh8gMMg lhjouh3Cft0y9gwUSoJqnLo7YcbwQtX4baWnMgw+xglJZ5n/wIRgnBYRRi1tlVIa +fjRu/CVB3Miytt8Z/vnEXJq9sIVBWswzIqddxv4YgOnMq0jZH4GxQPxrJjAtlse +EpRAMBdrSp9kkZmCxw7hOohGTStz5CV -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:39 2025 by rpki-client