$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: snV0wkNWdvewubgZFZHhVJnCKXmS7qXlCPGe4wn1pwM= Subject key identifier: 8B:D1:00:6F:68:CA:1F:85:7C:38:DB:FE:AA:3F:76:DE:50:75:24:A6 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 0155 Signing time: Thu 19 Jun 2025 03:33:19 +0000 Manifest this update: Thu 19 Jun 2025 03:33:19 +0000 Manifest next update: Thu 26 Jun 2025 03:33:19 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: CLvEJ0Mb+Pjv/XtYckya1EnZNCkQrgFhQbfZ1zjD67U=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Jun 19 03:33:19 2025 GMT Not After : Jun 26 03:33:19 2025 GMT Subject: CN=685384ff-508c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:50:34:5b:f8:03:6c:49:f5:87:b1:d3:c1: 8b:32:0d:c8:1f:ce:5a:1c:1f:b2:de:20:28:0c:25: 5f:4e:e0:e3:61:29:c5:45:b5:ef:cc:fd:cc:b3:c3: 6a:46:71:2b:05:8d:05:52:b3:e4:37:bb:03:8e:99: 0e:d6:98:5f:bc:bf:1f:bb:6b:90:fe:1a:56:6c:a9: 70:3f:79:ef:8a:1b:be:71:40:a4:cb:7c:2d:e7:26: c0:4e:03:41:97:3a:48:b4:0e:d4:b7:9c:ad:8f:62: cd:91:06:93:65:41:d6:f7:41:fa:58:20:87:cb:b5: de:b3:bc:dc:d0:7a:14:b5:9d:91:b1:7d:16:9d:d4: 05:70:23:58:52:e9:14:0a:c2:6b:35:56:5e:57:ef: 2a:ff:58:f1:27:07:ed:b0:fb:85:64:a0:6e:1b:a8: 02:fb:ac:67:de:c0:e2:aa:3e:64:7a:e1:07:fd:5b: a3:1f:7e:47:22:ad:93:27:be:83:f2:18:ab:c5:11: 1c:dd:f5:36:aa:d4:41:eb:a1:3f:bc:36:f2:98:fb: ca:91:30:4e:df:6f:61:3b:46:a1:a4:a6:c9:b1:e8: db:c8:f6:4f:28:6c:4d:ba:97:7c:3a:69:62:22:72: 30:46:c6:12:d8:b2:2a:0a:7a:f8:38:f2:d6:45:9d: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:00:6F:68:CA:1F:85:7C:38:DB:FE:AA:3F:76:DE:50:75:24:A6 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0f:e8:10:39:f0:c0:e0:2e:5e:2a:54:cb:c3:66:20:63:48: 74:01:6c:cf:6b:b6:91:3d:ad:b1:e7:e2:38:2f:94:39:f6:f6: f8:a6:aa:7e:60:5a:a4:c6:26:0b:65:38:9f:75:12:e9:f3:57: 2c:6c:17:2d:7a:d7:51:8d:a0:d3:2b:21:cf:6f:ea:24:66:e6: f5:cb:99:26:f6:35:65:43:2f:52:f5:54:81:ac:ff:f9:89:b0: 00:43:e9:58:71:1c:b5:87:df:1b:90:7d:e0:5b:48:8c:d1:f0: c4:9b:c8:db:91:d3:6a:92:8a:00:8f:e8:61:3f:82:cc:09:b0: 6e:6b:35:3c:cf:58:e2:4a:dd:49:d2:74:a7:90:e4:e3:55:e6: a1:a9:9b:8d:77:26:3d:39:f3:39:4b:c6:4c:1f:24:b3:88:6c: 3f:04:69:70:b7:e5:91:29:ed:91:ae:6a:b3:b5:fe:eb:13:84: 1e:ea:39:27:87:53:e1:c4:0f:88:ee:de:4f:0c:fe:91:f7:0b: ee:2a:70:dc:6e:8d:f0:75:c6:e1:ee:15:36:96:42:a6:a4:9f: a1:d2:85:f7:1a:34:10:b5:77:fb:7e:90:18:25:68:1c:d1:37: 0d:1c:96:ba:e9:2a:f8:7d:f5:57:d5:4d:a8:05:39:64:ec:8e: 98:e9:df:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwNjE5MDMzMzE5WhcNMjUwNjI2MDMzMzE5WjAYMRYwFAYD VQQDEw02ODUzODRmZi01MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVNQNFv4A2xJ9Yex08GLMg3IH85aHB+y3iAoDCVfTuDjYSnFRbXvzP3Ms8Nq RnErBY0FUrPkN7sDjpkO1phfvL8fu2uQ/hpWbKlwP3nvihu+cUCky3wt5ybATgNB lzpItA7Ut5ytj2LNkQaTZUHW90H6WCCHy7Xes7zc0HoUtZ2RsX0WndQFcCNYUukU CsJrNVZeV+8q/1jxJwftsPuFZKBuG6gC+6xn3sDiqj5keuEH/VujH35HIq2TJ76D 8hirxREc3fU2qtRB66E/vDbymPvKkTBO329hO0ahpKbJsejbyPZPKGxNupd8Omli InIwRsYS2LIqCnr4OPLWRZ0DMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvRAG9o yh+FfDjb/qo/dt5QdSSmMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+D+gQOfDA4C5eKlTLw2YgY0h0AWzPa7aRPa2x5+I4L5Q59vb4pqp+ YFqkxiYLZTifdRLp81csbBctetdRjaDTKyHPb+okZub1y5km9jVlQy9S9VSBrP/5 ibAAQ+lYcRy1h98bkH3gW0iM0fDEm8jbkdNqkooAj+hhP4LMCbBuazU8z1jiSt1J 0nSnkOTjVeahqZuNdyY9OfM5S8ZMHySziGw/BGlwt+WRKe2Rrmqztf7rE4Qe6jkn h1PhxA+I7t5PDP6R9wvuKnDcbo3wdcbh7hU2lkKmpJ+h0oX3GjQQtXf7fpAYJWgc 0TcNHJa66Sr4ffVX1U2oBTlk7I6Y6d9v -----END CERTIFICATE-----Generated at Fri Jun 20 20:55:49 2025 by rpki-client