$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: 61Q64eQVuCSMcM5kQthwh1uWPDNtJKIimB1cEzsVhM0= Subject key identifier: F6:DF:F1:15:4C:CB:9C:D3:D1:3C:7D:CF:39:B6:D1:96:FD:22:12:F1 Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 01AB Signing time: Fri 13 Jun 2025 02:19:29 +0000 Manifest this update: Fri 13 Jun 2025 02:19:28 +0000 Manifest next update: Fri 20 Jun 2025 02:19:28 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: fjTR80CFj0dtWuCp3Meots5rZOdK0JexRuX1Dl66fow=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Jun 13 02:19:28 2025 GMT Not After : Jun 20 02:19:28 2025 GMT Subject: CN=684b8ab1-01a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:26:1a:0c:ff:cc:45:bf:cb:0b:c8:3c:28: dc:23:b1:63:9a:b6:36:f2:93:68:56:e2:99:e4:94: a2:6e:ef:51:9f:87:19:c5:51:9c:03:db:09:c7:5d: 64:04:61:37:ea:f7:ba:fe:78:fd:37:b7:0b:9c:fa: 07:bf:80:15:45:3f:2b:97:f5:57:c2:c4:a9:df:f2: 10:6d:72:1d:56:e9:9c:7b:47:4c:aa:ee:51:bc:77: be:6a:a3:a0:2f:cd:e8:be:3c:22:47:4f:32:88:9e: b0:dc:9e:74:06:50:94:7e:e8:0d:5c:ad:24:2c:ff: 08:98:59:10:5f:24:5f:17:d7:3d:d5:8d:55:87:7f: e8:ab:0a:2a:fc:16:0d:4d:92:9e:ce:f5:65:da:f2: b4:39:43:15:c7:1f:4c:47:c0:3c:73:a6:96:8c:04: 35:45:a8:ce:fd:be:2c:08:30:86:f6:ea:68:9c:47: db:38:45:7a:c1:c1:79:9a:9c:e5:f7:28:c1:b0:e2: 51:79:d4:58:4d:ab:42:d5:d4:c8:5b:3c:22:b7:98: 01:ec:06:05:33:9f:b3:3b:2d:f4:66:3b:b3:4b:f3: 4e:5d:05:ad:0f:28:ab:5f:82:f8:58:2a:94:25:4a: 5d:34:2e:5b:72:c4:51:0b:92:40:1c:19:c9:3a:eb: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:F1:15:4C:CB:9C:D3:D1:3C:7D:CF:39:B6:D1:96:FD:22:12:F1 X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:98:2a:01:dd:29:a4:68:a6:9f:74:9a:fd:88:2a:26:55: 6b:ef:60:8d:35:42:3b:f5:50:7d:03:73:b9:ed:66:58:eb:80: 3f:f0:61:19:5a:9c:c3:b3:7e:b7:93:f3:29:f7:98:15:22:93: a3:cf:5a:62:49:cb:97:23:96:0e:c9:8b:ac:ab:79:7c:d1:ee: d4:3e:b7:b1:f3:24:ea:49:ca:20:55:0d:82:98:7f:b6:db:b4: 54:c6:54:55:c8:67:50:5b:aa:32:b4:f7:44:2c:7e:cc:4a:a1: dc:a5:51:d3:0e:c3:0a:30:ab:fd:3f:94:50:97:a6:43:49:a2: 4e:ba:2b:f2:fa:5a:17:cc:14:7f:e1:d1:87:54:e7:03:07:57: ee:36:87:a9:e9:af:72:56:8b:80:2e:18:23:43:52:82:17:08: d3:09:bd:03:cf:12:16:8e:9a:10:72:f3:27:7a:cb:f9:3d:b2: 8d:86:f8:00:5d:5a:cf:b1:e1:33:2d:33:45:6e:39:89:05:a0: 71:23:97:2a:89:c8:f2:a4:eb:94:00:d8:73:ba:3e:be:69:e1: 31:86:e0:2a:14:b0:36:36:b8:d2:3b:71:45:25:d6:04:2c:5f: 86:b9:a6:f3:11:0c:69:54:c0:f6:0c:b2:40:d3:c8:45:b7:04: 8c:9f:6e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUwNjEzMDIxOTI4WhcNMjUwNjIwMDIxOTI4WjAYMRYwFAYD VQQDEw02ODRiOGFiMS0wMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKcmGgz/zEW/ywvIPCjcI7FjmrY28pNoVuKZ5JSibu9Rn4cZxVGcA9sJx11k BGE36ve6/nj9N7cLnPoHv4AVRT8rl/VXwsSp3/IQbXIdVumce0dMqu5RvHe+aqOg L83ovjwiR08yiJ6w3J50BlCUfugNXK0kLP8ImFkQXyRfF9c91Y1Vh3/oqwoq/BYN TZKezvVl2vK0OUMVxx9MR8A8c6aWjAQ1RajO/b4sCDCG9uponEfbOEV6wcF5mpzl 9yjBsOJRedRYTatC1dTIWzwit5gB7AYFM5+zOy30ZjuzS/NOXQWtDyirX4L4WCqU JUpdNC5bcsRRC5JAHBnJOusCqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbf8RVM y5zT0Tx9zzm20Zb9IhLxMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBr5gqAd0ppGimn3Sa/YgqJlVr72CNNUI79VB9A3O57WZY64A/8GEZ WpzDs363k/Mp95gVIpOjz1piScuXI5YOyYusq3l80e7UPrex8yTqScogVQ2CmH+2 27RUxlRVyGdQW6oytPdELH7MSqHcpVHTDsMKMKv9P5RQl6ZDSaJOuivy+loXzBR/ 4dGHVOcDB1fuNoep6a9yVouALhgjQ1KCFwjTCb0DzxIWjpoQcvMnesv5PbKNhvgA XVrPseEzLTNFbjmJBaBxI5cqicjypOuUANhzuj6+aeExhuAqFLA2NrjSO3FFJdYE LF+GuabzEQxpVMD2DLJA08hFtwSMn24p -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:39 2025 by rpki-client