$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: eaLRL13o8to2sh1PpBlmCePifU0tZI8cUZA8XtHyK+M= Subject key identifier: 63:0C:60:D9:C9:7E:21:ED:F2:3D:D8:8F:B3:DE:54:4A:85:90:D5:AF Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 092F Signing time: Thu 12 Jun 2025 20:01:41 +0000 Manifest this update: Thu 12 Jun 2025 20:01:41 +0000 Manifest next update: Thu 19 Jun 2025 20:01:41 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: 336/sCtsM4e9UY3Dny8zcOwf9uxPcQUmmxTZ28f29f8=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: F/lUPKZHFm1sIOo7h73Lh8+bzw8LraoeACifeBa4ogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: Jun 12 20:01:41 2025 GMT Not After : Jun 19 20:01:41 2025 GMT Subject: CN=684b3225-2285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:61:ec:c3:56:a8:ed:f8:4f:2e:c4:16:32: 75:c8:97:aa:6f:7f:92:93:3f:25:b0:7e:7b:bc:a8: 5f:06:2f:2f:48:b9:bf:7c:01:19:44:3f:19:34:bc: 77:5f:52:6f:b1:f6:6a:78:e1:b1:2e:95:03:ff:e3: db:69:33:fe:18:e6:1a:b0:be:da:c2:f6:1a:b9:84: be:10:02:e8:59:21:f1:e4:5e:a4:9c:00:7d:2d:1f: 81:f3:fb:af:9c:38:1b:b2:7f:5c:ae:54:06:b2:cf: 91:e6:48:cb:3b:e2:34:8d:0b:51:ec:a5:e9:49:26: 47:61:21:d1:35:26:70:eb:25:bb:c0:7f:22:dc:cc: 5d:b0:51:78:58:04:f3:c8:22:c6:64:d6:b0:b6:17: 70:78:8e:0b:e1:06:84:9c:bf:e5:35:9f:90:61:a6: f1:80:49:51:d2:f2:04:0d:5a:55:08:cc:5e:20:ab: 22:52:e1:0d:09:29:7d:ed:bf:71:99:eb:72:80:a7: 7c:0d:91:13:70:d8:1b:31:bf:d8:1c:3e:13:19:88: 4e:16:26:bf:b9:15:8f:8b:0b:d0:8a:4d:f8:53:29: 1e:37:2f:ec:96:24:fc:32:ee:8e:42:ae:a0:df:23: 49:34:ee:d8:1a:71:d8:71:77:1b:a4:47:a2:0a:6b: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:60:D9:C9:7E:21:ED:F2:3D:D8:8F:B3:DE:54:4A:85:90:D5:AF X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:e8:5c:cc:97:4f:3d:c8:b5:a3:2b:0b:ab:17:96:0f:9f: 4f:12:3b:1d:0b:c0:76:3f:32:34:6d:0e:3d:3d:bc:ef:7c:70: 26:96:2e:d2:ba:ad:6d:33:5d:93:6e:e1:b8:7e:45:84:c4:89: 5b:f0:3b:0f:7d:1b:27:93:6a:87:8c:9d:d6:49:6f:45:86:d3: 18:0a:2e:a3:e9:0f:63:f7:1b:0c:5a:28:d7:ce:3d:63:b5:9f: 86:8b:6c:c9:21:3e:0b:85:6d:12:78:c0:63:37:c5:e1:1f:99: ea:c0:9a:9c:ae:83:fb:9b:3a:a5:d1:15:a6:8b:74:b6:dc:f0: 47:7f:ce:6d:9c:0d:25:04:b6:0a:9d:63:53:6e:4b:09:6f:80: f0:c4:b3:bf:79:e7:9a:85:83:bd:bc:c1:2d:f1:44:7b:5f:d8: 00:28:b8:f4:de:1c:1a:d1:22:3b:0b:e0:64:fa:9b:9a:8a:fa: d7:3e:c6:36:5b:17:a2:e9:a1:55:9b:06:59:57:8d:fe:ec:df: c0:3a:c6:ca:b2:14:40:84:08:36:95:7d:72:57:3e:82:65:e2: d8:28:1b:fb:33:6d:d0:06:00:fa:c3:09:d7:8f:50:f8:65:f8: 00:4e:6d:71:a2:c1:22:e2:bc:51:93:5e:78:27:10:a5:b8:25: be:37:dc:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjUwNjEyMjAwMTQxWhcNMjUwNjE5MjAwMTQxWjAYMRYwFAYD VQQDEw02ODRiMzIyNS0yMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtNh7MNWqO34Ty7EFjJ1yJeqb3+Skz8lsH57vKhfBi8vSLm/fAEZRD8ZNLx3 X1JvsfZqeOGxLpUD/+PbaTP+GOYasL7awvYauYS+EALoWSHx5F6knAB9LR+B8/uv nDgbsn9crlQGss+R5kjLO+I0jQtR7KXpSSZHYSHRNSZw6yW7wH8i3MxdsFF4WATz yCLGZNawthdweI4L4QaEnL/lNZ+QYabxgElR0vIEDVpVCMxeIKsiUuENCSl97b9x metygKd8DZETcNgbMb/YHD4TGYhOFia/uRWPiwvQik34UykeNy/sliT8Mu6OQq6g 3yNJNO7YGnHYcXcbpEeiCmuUVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMMYNnJ fiHt8j3Yj7PeVEqFkNWvMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMJuhczJdPPci1oysLqxeWD59PEjsdC8B2PzI0bQ49PbzvfHAmli7S uq1tM12TbuG4fkWExIlb8DsPfRsnk2qHjJ3WSW9FhtMYCi6j6Q9j9xsMWijXzj1j tZ+Gi2zJIT4LhW0SeMBjN8XhH5nqwJqcroP7mzql0RWmi3S23PBHf85tnA0lBLYK nWNTbksJb4DwxLO/eeeahYO9vMEt8UR7X9gAKLj03hwa0SI7C+Bk+puaivrXPsY2 Wxei6aFVmwZZV43+7N/AOsbKshRAhAg2lX1yVz6CZeLYKBv7M23QBgD6wwnXj1D4 ZfgATm1xosEi4rxRk154JxCluCW+N9zY -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:03 2025 by rpki-client