$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: 5i8+dWkiTUEZcSKXEgyltYS5W8iyFxqyW8j+7EBIJJw= Subject key identifier: 06:EA:35:D9:6D:5D:7D:34:57:73:10:1F:32:87:13:F9:26:70:75:2F Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 01B4 Signing time: Sun 29 Jun 2025 02:15:09 +0000 Manifest this update: Sun 29 Jun 2025 02:15:08 +0000 Manifest next update: Sun 06 Jul 2025 02:15:08 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: /lMwLpooWA4xPXfa9c9LzuTzg5CqGXp8ca/U+wr1v1s=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Jun 29 02:15:08 2025 GMT Not After : Jul 6 02:15:08 2025 GMT Subject: CN=6860a1ad-21b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:47:b7:f5:8b:a1:ac:24:f4:5a:8a:63:48:01: d7:54:f5:0a:13:80:ed:87:ee:f6:4e:6a:2b:aa:ac: 03:9b:c6:7a:ce:2c:54:49:e9:77:db:0a:f0:57:99: 70:59:a4:66:98:be:27:f1:39:6a:7a:38:9f:f7:86: b4:19:a6:de:7b:f6:d5:e9:0d:ab:f7:a3:8d:bd:55: 8d:dd:f0:d9:71:1a:73:d8:e1:a3:9a:b9:ed:fe:58: 27:b4:e1:6c:f9:a9:95:93:0b:fc:52:56:bb:1d:5f: b1:35:b9:d0:b9:a3:15:79:e1:11:fd:cb:f7:c5:a9: 40:57:c8:b5:8b:22:18:45:28:b2:05:f7:cc:2b:2b: 10:b8:aa:e1:02:fa:93:1e:a5:cc:aa:47:f9:d6:29: 7e:1c:9a:98:8c:e1:3b:08:78:0f:1c:ca:8d:89:01: d1:3e:59:83:d6:02:ad:b3:50:73:0d:7c:90:8a:22: 27:a1:6f:fd:03:95:fc:9e:a6:19:7e:07:e0:e5:ee: 89:c5:08:4c:92:9d:32:ee:53:5a:4b:04:7a:56:10: 22:7f:52:1b:dc:2f:22:dc:12:e1:5f:30:35:f6:66: 63:3e:3f:24:25:58:8b:34:a4:88:01:ac:d8:24:8a: bb:4b:1c:8a:f3:76:10:d6:de:79:c8:c0:c5:81:b2: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:35:D9:6D:5D:7D:34:57:73:10:1F:32:87:13:F9:26:70:75:2F X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:37:2c:c7:d9:10:2e:c8:4c:c2:8e:92:ac:f9:6d:2d:aa:4c: 1b:91:4e:b5:0d:63:8e:07:45:cd:92:6b:3b:0f:d6:9c:5e:5a: 1e:27:fb:12:c3:ca:c4:b0:9c:d5:06:3c:99:f2:c6:74:8f:72: 71:af:05:6e:a9:94:fa:ff:b4:79:29:d3:bc:e7:3b:31:5b:2d: b8:e9:79:4a:af:8a:4c:dd:f4:b7:01:4e:df:f2:3e:2b:e5:3f: 35:23:5f:9f:c0:be:a0:ed:23:8b:31:62:25:1f:04:6f:26:4d: 35:e5:ff:58:5d:44:6d:ff:4c:47:ac:95:39:c8:aa:16:b1:5a: 6a:c3:58:28:b4:f3:18:df:73:59:07:69:e8:12:5b:0c:bb:31: 14:00:ac:33:5c:98:5c:59:9d:42:50:b4:a4:2f:1e:3b:dc:74: 9e:af:30:03:95:49:1f:01:b2:eb:67:69:27:08:19:e5:cb:27: cf:c3:7d:df:55:72:b5:5c:d3:30:d6:52:f0:41:a6:3d:0f:57: 54:d9:3a:02:29:16:33:0e:a9:4c:d0:25:39:e4:13:19:14:dd: 0b:91:67:25:9e:02:4a:0b:44:e5:77:43:e4:35:53:25:25:f4: ec:15:b6:6e:d3:0e:2d:49:ea:98:3f:e0:ec:0e:6d:da:50:be: 43:f5:e9:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUwNjI5MDIxNTA4WhcNMjUwNzA2MDIxNTA4WjAYMRYwFAYD VQQDEw02ODYwYTFhZC0yMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70e39YuhrCT0WopjSAHXVPUKE4Dth+72TmorqqwDm8Z6zixUSel32wrwV5lw WaRmmL4n8Tlqejif94a0Gabee/bV6Q2r96ONvVWN3fDZcRpz2OGjmrnt/lgntOFs +amVkwv8Ula7HV+xNbnQuaMVeeER/cv3xalAV8i1iyIYRSiyBffMKysQuKrhAvqT HqXMqkf51il+HJqYjOE7CHgPHMqNiQHRPlmD1gKts1BzDXyQiiInoW/9A5X8nqYZ fgfg5e6JxQhMkp0y7lNaSwR6VhAif1Ib3C8i3BLhXzA19mZjPj8kJViLNKSIAazY JIq7SxyK83YQ1t55yMDFgbJzaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbqNdlt XX00V3MQHzKHE/kmcHUvMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5NyzH2RAuyEzCjpKs+W0tqkwbkU61DWOOB0XNkms7D9acXloeJ/sS w8rEsJzVBjyZ8sZ0j3JxrwVuqZT6/7R5KdO85zsxWy246XlKr4pM3fS3AU7f8j4r 5T81I1+fwL6g7SOLMWIlHwRvJk015f9YXURt/0xHrJU5yKoWsVpqw1gotPMY33NZ B2noElsMuzEUAKwzXJhcWZ1CULSkLx473HSerzADlUkfAbLrZ2knCBnlyyfPw33f VXK1XNMw1lLwQaY9D1dU2ToCKRYzDqlM0CU55BMZFN0LkWclngJKC0Tld0PkNVMl JfTsFbZu0w4tSeqYP+DsDm3aUL5D9emM -----END CERTIFICATE-----Generated at Sun Jun 29 12:40:16 2025 by rpki-client