$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: S+O1+aQLSin/Hex9yM5mV0IHDugcsA1UJhYtQNXt3sE= Subject key identifier: E9:4D:26:4A:7C:95:3E:6B:3A:B2:9C:F1:8A:BA:ED:8C:25:C8:C0:2C Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 08E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 08E1 Signing time: Sat 14 Jun 2025 20:13:01 +0000 Manifest this update: Sat 14 Jun 2025 20:13:01 +0000 Manifest next update: Sat 21 Jun 2025 20:13:01 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: DfYAvSfBRV6dQExvmeML3yBLIWH9r/LqQT13uEYGDNg=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Jun 14 20:13:01 2025 GMT Not After : Jun 21 20:13:01 2025 GMT Subject: CN=684dd7cd-a008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:8d:4e:50:0d:ed:44:0a:fa:5d:2d:74:b6: 1b:ef:48:8f:c1:b5:a8:b8:d0:21:fa:fd:42:de:96: a2:9f:b9:fc:f0:8d:5c:59:13:3e:ef:c4:db:e7:96: 21:35:82:b6:6e:84:59:6a:c8:98:dc:a3:fe:cc:f3: d3:8f:39:d7:8e:f8:5a:b2:6b:9f:a8:0b:ec:9a:40: 45:ab:9d:07:e6:ee:fa:a6:5c:82:77:1d:55:62:23: f3:e7:4c:57:0b:f6:ea:3a:b0:39:69:df:30:90:75: dd:4b:8b:30:03:0d:71:cb:9f:4d:44:3c:47:10:b8: 20:69:11:82:26:53:77:98:de:34:4c:ec:b7:2e:4f: cc:eb:ca:a5:11:8e:58:cc:a8:ef:e4:4f:b1:3d:7c: 5c:1e:eb:66:d6:d5:4a:14:84:af:c3:c4:63:3a:a9: a0:ba:cd:80:8f:b4:13:c6:0e:65:f0:d8:f7:cd:0f: 12:15:2a:24:44:84:91:02:71:ef:75:90:01:1f:fa: 01:64:a9:67:ae:2b:31:07:60:4d:29:ca:ad:fb:f5: 3a:80:bc:ee:e1:03:db:b9:a4:94:7d:5c:88:86:02: bb:64:44:3f:8f:c9:1d:c4:f4:d9:51:05:7f:e4:ab: ed:5a:7b:44:ac:fc:34:6e:eb:df:a1:4e:2e:f4:67: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:26:4A:7C:95:3E:6B:3A:B2:9C:F1:8A:BA:ED:8C:25:C8:C0:2C X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e2:ff:c2:a6:30:5d:15:93:dc:fe:e7:88:c4:81:b1:8a:84: 79:31:6c:cb:15:3f:cd:f0:9c:d3:1a:39:21:b8:13:74:57:a9: a7:c6:79:f9:fa:9d:85:0d:b5:72:5e:f2:c3:4b:ab:45:75:65: d8:b1:b0:d2:1a:af:70:a6:83:c9:4c:c2:19:f2:eb:8d:6d:de: 82:dc:e7:26:1d:a5:99:df:b8:62:c2:64:8c:5b:ef:f3:c8:52: c7:98:2d:6b:38:1e:f1:e8:7c:09:a5:0b:8a:3c:51:3c:77:6b: c9:18:ff:c8:d0:0a:05:b3:84:e5:72:97:3f:3f:75:6f:2f:5b: 57:82:25:92:95:b7:ec:69:54:ed:13:f0:7d:74:2f:f6:54:bf: 5b:1d:4e:40:f1:63:86:28:b8:74:80:3c:55:cb:ce:06:32:ab: 92:c5:d6:f1:e3:5c:75:b2:85:57:00:3d:fc:03:88:a6:d7:d2: c7:da:5d:f5:7d:22:2b:90:e6:cb:36:49:51:d9:c3:02:7c:4f: 9b:d0:63:4a:a8:be:7b:38:df:be:9e:1c:80:4c:23:15:cc:00: 15:59:78:28:a0:e5:88:54:84:5b:da:5e:f1:77:c2:8f:a2:52: 8b:06:38:07:4c:72:2f:df:0c:ec:e2:85:a1:e2:83:e5:5e:c7: 16:3d:ce:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUwNjE0MjAxMzAxWhcNMjUwNjIxMjAxMzAxWjAYMRYwFAYD VQQDEw02ODRkZDdjZC1hMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhaNTlAN7UQK+l0tdLYb70iPwbWouNAh+v1C3pain7n88I1cWRM+78Tb55Yh NYK2boRZasiY3KP+zPPTjznXjvhasmufqAvsmkBFq50H5u76plyCdx1VYiPz50xX C/bqOrA5ad8wkHXdS4swAw1xy59NRDxHELggaRGCJlN3mN40TOy3Lk/M68qlEY5Y zKjv5E+xPXxcHutm1tVKFISvw8RjOqmgus2Aj7QTxg5l8Nj3zQ8SFSokRISRAnHv dZABH/oBZKlnrisxB2BNKcqt+/U6gLzu4QPbuaSUfVyIhgK7ZEQ/j8kdxPTZUQV/ 5KvtWntErPw0buvfoU4u9GdOAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlNJkp8 lT5rOrKc8Yq67YwlyMAsMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb4v/CpjBdFZPc/ueIxIGxioR5MWzLFT/N8JzTGjkhuBN0V6mnxnn5 +p2FDbVyXvLDS6tFdWXYsbDSGq9wpoPJTMIZ8uuNbd6C3OcmHaWZ37hiwmSMW+/z yFLHmC1rOB7x6HwJpQuKPFE8d2vJGP/I0AoFs4Tlcpc/P3VvL1tXgiWSlbfsaVTt E/B9dC/2VL9bHU5A8WOGKLh0gDxVy84GMquSxdbx41x1soVXAD38A4im19LH2l31 fSIrkObLNklR2cMCfE+b0GNKqL57ON++nhyATCMVzAAVWXgooOWIVIRb2l7xd8KP olKLBjgHTHIv3wzs4oWh4oPlXscWPc49 -----END CERTIFICATE-----Generated at Mon Jun 16 16:20:50 2025 by rpki-client