$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: z+mvwSf8fcdzQVWPrmO3tg7XmAf91DcXlEcK0CFU6NY= Subject key identifier: A1:94:01:8E:55:2E:C4:A3:BC:1A:34:09:0A:F9:27:1A:78:BA:0C:64 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FA2 Signing time: Sat 14 Jun 2025 17:27:29 +0000 Manifest this update: Sat 14 Jun 2025 17:27:29 +0000 Manifest next update: Sat 21 Jun 2025 17:27:29 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: k+ZY3d1Y+R1oDRdPQQZ6uIamufhM+Fjy52eIeuzHsvQ=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Jun 14 17:27:29 2025 GMT Not After : Jun 21 17:27:29 2025 GMT Subject: CN=684db101-e0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:23:5a:92:53:36:9b:aa:1e:0e:2b:ba:b2: a7:a7:3a:40:47:ed:ad:d2:64:96:83:f4:d8:db:da: c9:93:b7:09:a8:f1:00:34:1a:96:ea:48:a6:b5:0c: 4a:d5:d6:ff:07:fd:7c:b8:e9:e8:87:45:07:c0:82: 21:85:d8:c4:3c:ec:88:08:b2:2c:0b:ce:fa:10:0b: b9:b7:40:78:af:43:8f:e4:33:62:b1:67:fb:c7:58: a1:88:d3:81:88:11:01:43:f1:c5:08:f8:03:51:c1: f2:90:10:f6:cb:c5:08:c4:73:17:66:cd:bd:eb:6e: d2:b2:5e:62:dd:20:cb:6b:e2:e8:01:df:7e:23:c6: 91:c8:5a:a1:5c:1e:fa:ca:9c:61:83:a8:75:1b:a4: 32:3b:52:6b:07:57:20:40:43:06:9c:33:e9:a5:aa: d1:39:86:74:54:07:60:a1:42:3d:ec:86:12:39:88: f7:b0:16:9c:06:b6:25:2c:19:58:f2:c7:f7:0b:2c: 52:fc:0a:21:77:8e:c0:b0:a0:c6:da:fd:3b:d4:d9: bc:1f:f4:d9:d3:90:6f:62:24:73:38:bc:bc:bb:5f: e9:58:d0:38:8a:26:90:ef:16:cc:63:70:2f:86:83: ea:6d:5a:22:7f:b1:91:89:1e:01:b4:55:b2:1a:fc: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:01:8E:55:2E:C4:A3:BC:1A:34:09:0A:F9:27:1A:78:BA:0C:64 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:73:29:07:44:1a:91:13:a5:a7:f5:58:c4:1d:9b:91:22: 8a:6d:8e:b1:6d:74:da:0e:c7:db:cc:a2:ff:7e:28:ca:91:4c: b9:c3:ae:35:ff:09:0e:ca:b8:4d:e4:8d:e4:a7:82:98:40:bf: 31:a1:b5:1d:9e:52:ae:c4:8e:bc:9b:e3:9a:be:ab:b9:ae:52: 1f:6b:50:49:2e:6b:7e:37:84:c3:9c:33:d7:a3:4c:93:9b:f6: 2b:22:2a:cc:d9:ae:a3:68:d8:b0:2e:0a:11:d5:6a:76:4c:fb: 3a:27:e3:4b:0a:19:60:4f:59:2e:19:67:70:25:0a:d6:12:13: ac:9a:57:80:cd:c3:4f:e9:84:b7:70:9f:64:72:e3:d0:56:90: 14:f5:30:e3:3d:7a:f6:e7:4b:64:94:28:16:07:e0:eb:9a:00: d0:64:02:5a:1c:18:70:a4:73:95:9c:34:63:13:0e:8c:5e:a9: 73:b8:be:ac:e9:de:f0:56:0f:99:32:bd:d9:0b:37:f2:24:55: 4e:fa:b4:db:8b:8f:2f:1e:33:e7:4a:cd:71:71:92:96:df:5c: 0d:29:0c:8a:71:4f:bd:57:e0:1c:2b:c7:04:ba:02:0f:20:d0: 5c:18:7c:43:26:2f:bd:1b:29:cd:50:85:8d:f2:05:a2:8d:ca: 3f:32:61:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNjE0MTcyNzI5WhcNMjUwNjIxMTcyNzI5WjAYMRYwFAYD VQQDEw02ODRkYjEwMS1lMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U8jWpJTNpuqHg4rurKnpzpAR+2t0mSWg/TY29rJk7cJqPEANBqW6kimtQxK 1db/B/18uOnoh0UHwIIhhdjEPOyICLIsC876EAu5t0B4r0OP5DNisWf7x1ihiNOB iBEBQ/HFCPgDUcHykBD2y8UIxHMXZs29627Ssl5i3SDLa+LoAd9+I8aRyFqhXB76 ypxhg6h1G6QyO1JrB1cgQEMGnDPpparROYZ0VAdgoUI97IYSOYj3sBacBrYlLBlY 8sf3CyxS/Aohd47AsKDG2v071Nm8H/TZ05BvYiRzOLy8u1/pWNA4iiaQ7xbMY3Av hoPqbVoif7GRiR4BtFWyGvxnGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGUAY5V LsSjvBo0CQr5Jxp4ugxkMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPVnMpB0QakROlp/VYxB2bkSKKbY6xbXTaDsfbzKL/fijKkUy5w641 /wkOyrhN5I3kp4KYQL8xobUdnlKuxI68m+Oavqu5rlIfa1BJLmt+N4TDnDPXo0yT m/YrIirM2a6jaNiwLgoR1Wp2TPs6J+NLChlgT1kuGWdwJQrWEhOsmleAzcNP6YS3 cJ9kcuPQVpAU9TDjPXr250tklCgWB+DrmgDQZAJaHBhwpHOVnDRjEw6MXqlzuL6s 6d7wVg+ZMr3ZCzfyJFVO+rTbi48vHjPnSs1xcZKW31wNKQyKcU+9V+AcK8cEugIP INBcGHxDJi+9GynNUIWN8gWijco/MmF2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:20 2025 by rpki-client