$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json) Hash identifier: Za7OGOJ6vFdZlc4y1xqtqFeuuwp7pRmuH5pxDisyV3U= Subject key identifier: 24:C6:BA:6E:EF:AE:7D:AC:BD:0E:0E:A2:DE:AB:5E:04:1C:83:E7:4F Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft Manifest number: 0319 Signing time: Sun 15 Jun 2025 00:53:46 +0000 Manifest this update: Sun 15 Jun 2025 00:53:45 +0000 Manifest next update: Sun 22 Jun 2025 00:53:45 +0000 Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: AU9Xyrviy5y9nbHK4ilHvP4LA1F2U4pVsNgskYcNkPY=) 2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: PuEOajLEUChOIrthB/05mvECIB7cIWFQzgLmdVBLTBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Jun 15 00:53:45 2025 GMT Not After : Jun 22 00:53:45 2025 GMT Subject: CN=684e199a-227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b4:80:b7:db:e1:d6:be:44:4d:e7:4f:ca:7c: cf:3a:6c:cf:5c:11:2b:af:62:26:32:8c:7b:3e:3d: 24:a1:38:22:23:56:c9:8c:24:82:62:a3:f9:85:c9: 8d:35:e9:c7:d4:03:06:5a:a6:a4:93:ec:c2:89:5f: 40:00:7f:65:07:59:ba:c2:2a:5d:12:76:4a:41:1f: 5c:c8:1e:93:96:3f:23:23:50:04:2e:6d:53:cf:d2: f7:1f:ec:58:f2:e1:fa:e2:cd:f7:c8:f1:df:7c:e3: f3:e9:c8:20:f5:05:ea:ef:fc:0f:c1:90:10:2f:57: d2:a4:e4:e1:1c:ca:c9:a3:a3:db:4c:58:f8:cd:1d: 63:9f:68:46:be:9c:20:27:91:14:e9:5a:6c:c2:26: 6f:d7:b5:ae:77:22:26:b0:45:fa:f7:88:86:7e:42: 7f:bd:1e:d7:d6:7d:a0:c0:ff:8c:19:35:14:43:54: af:41:6a:d2:63:e8:5f:24:ce:94:52:26:3b:11:df: ed:67:76:17:f4:eb:b6:77:7f:82:71:2b:af:9d:f7: 84:a7:97:e7:05:f9:7f:70:9a:57:8e:4d:11:6d:9b: 89:ed:42:1e:76:13:98:6b:77:c3:2e:3d:81:ca:0e: be:d8:bf:77:45:57:fd:02:38:ee:0c:1b:34:84:ca: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C6:BA:6E:EF:AE:7D:AC:BD:0E:0E:A2:DE:AB:5E:04:1C:83:E7:4F X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c5:26:c5:08:ff:4d:3b:e7:9a:de:03:33:4c:f6:5b:01:f9: 3b:28:ff:91:2d:0f:a3:d0:f5:43:1e:c2:73:c0:a0:96:f4:82: 4c:91:69:8a:4d:8c:0d:3d:79:dd:32:19:88:72:57:e4:3e:49: 61:0d:51:be:b3:4d:92:59:d2:c2:7a:0b:11:97:c7:23:87:ab: 41:a9:35:16:86:64:92:16:ef:3d:3a:73:86:39:40:5f:80:f5: bb:58:48:a1:d2:c8:9a:c8:b0:a1:d3:80:9f:60:56:ae:98:e1: 8c:04:6b:31:1e:f2:55:38:d3:93:eb:30:4f:f1:6a:e4:12:e1: d8:30:79:7f:14:40:5e:dd:14:01:86:f9:e9:24:ab:96:3f:32: 75:d9:a1:26:b4:a6:35:05:e1:22:1c:e9:a0:33:37:55:b8:b0: eb:e1:92:34:ab:0d:85:e8:b3:0e:9c:c7:85:7a:d5:0b:8f:36: c6:ed:7c:e9:a5:78:a6:5b:02:a9:5f:e9:56:ea:15:ae:ef:b1: 47:bc:4b:10:8f:c1:be:a0:f2:87:eb:51:8c:4b:e6:7b:e8:d7: ed:12:3b:e2:ee:f8:ac:14:a4:d6:8e:cf:e5:77:61:31:11:b2: 66:36:8c:1d:f8:2a:22:9a:a5:55:85:c2:12:d8:a5:e5:9b:88: c2:ac:f1:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjUwNjE1MDA1MzQ1WhcNMjUwNjIyMDA1MzQ1WjAYMRYwFAYD VQQDEw02ODRlMTk5YS0yMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LSAt9vh1r5ETedPynzPOmzPXBErr2ImMox7Pj0koTgiI1bJjCSCYqP5hcmN NenH1AMGWqakk+zCiV9AAH9lB1m6wipdEnZKQR9cyB6Tlj8jI1AELm1Tz9L3H+xY 8uH64s33yPHffOPz6cgg9QXq7/wPwZAQL1fSpOThHMrJo6PbTFj4zR1jn2hGvpwg J5EU6VpswiZv17WudyImsEX694iGfkJ/vR7X1n2gwP+MGTUUQ1SvQWrSY+hfJM6U UiY7Ed/tZ3YX9Ou2d3+CcSuvnfeEp5fnBfl/cJpXjk0RbZuJ7UIedhOYa3fDLj2B yg6+2L93RVf9AjjuDBs0hMpP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTGum7v rn2svQ4Oot6rXgQcg+dPMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzAxQS8wRjg1MDE0Q0QxMUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dD MnNjNGF1T1JSNlpHV1RxSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZxSbFCP9NO+ea3gMzTPZbAfk7KP+RLQ+j0PVDHsJzwKCW9IJMkWmK TYwNPXndMhmIclfkPklhDVG+s02SWdLCegsRl8cjh6tBqTUWhmSSFu89OnOGOUBf gPW7WEih0siayLCh04CfYFaumOGMBGsxHvJVONOT6zBP8WrkEuHYMHl/FEBe3RQB hvnpJKuWPzJ12aEmtKY1BeEiHOmgMzdVuLDr4ZI0qw2F6LMOnMeFetULjzbG7Xzp pXimWwKpX+lW6hWu77FHvEsQj8G+oPKH61GMS+Z76NftEjvi7visFKTWjs/ld2Ex EbJmNowd+CoimqVVhcIS2KXlm4jCrPH+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:28 2025 by rpki-client