$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: bdZM5iMr59J9kYEjE2hjXGittXvCbVAlyVfR3sptyCU= Subject key identifier: A5:C1:63:A6:AC:11:E1:B2:BF:07:4E:C8:20:9C:CF:BD:D0:C4:A1:98 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 028A Signing time: Thu 03 Jul 2025 02:09:35 +0000 Manifest this update: Thu 03 Jul 2025 02:09:35 +0000 Manifest next update: Thu 10 Jul 2025 02:09:35 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: ViLvpq7KLBayLCvEbM4EN8Dnuy2qX01f74nAq6T+xxI=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Jul 3 02:09:35 2025 GMT Not After : Jul 10 02:09:35 2025 GMT Subject: CN=6865e65f-79d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:40:ae:f9:bc:28:b5:2d:e3:69:19:86:a9: bc:0c:c1:0b:5f:4f:a3:c0:5f:e7:f0:06:fd:4d:a1: 17:a2:b3:45:42:2a:40:c0:6e:cf:7e:32:0f:58:f1: 5a:64:57:54:b7:e5:2c:f4:28:45:67:a3:31:89:50: bf:f9:18:da:ee:3f:0d:2e:90:dd:1d:01:11:31:b5: b0:d1:7f:88:1f:1f:c0:cc:1c:b9:0e:31:f0:de:6d: a7:fa:e8:56:16:1b:ff:81:3c:af:b0:50:60:c8:89: fb:f4:5b:67:a1:35:74:64:b6:a6:cb:c7:dd:b5:19: 90:6e:e9:8c:26:fb:9d:9a:49:74:c9:c6:10:48:5f: 80:09:33:43:08:4c:24:c5:30:c8:f9:b9:e1:1d:2d: 76:07:97:9c:ae:bd:c3:69:3b:b8:9b:c5:23:9d:34: 54:e1:46:38:02:33:e2:59:b5:52:6e:b3:d8:0d:f9: 3c:9a:f6:9b:94:22:7f:79:53:c1:dc:82:d0:f7:8c: ca:20:b0:19:2e:51:64:34:ed:f2:04:f6:1e:27:46: 6b:0a:24:0d:e3:0d:08:ea:60:13:45:57:b7:31:74: 79:1f:b4:99:6c:d2:d8:45:e1:73:84:48:0f:eb:17: 5d:97:78:ad:65:15:f6:e3:80:58:8e:c9:20:4e:46: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:63:A6:AC:11:E1:B2:BF:07:4E:C8:20:9C:CF:BD:D0:C4:A1:98 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:11:1d:41:40:06:af:73:c7:af:61:d2:7a:77:c4:7b:2d:0a: 99:6e:12:00:95:27:cb:65:b7:dc:2c:b3:cc:ca:8b:00:76:0a: 76:c2:df:7d:55:68:06:60:5a:7d:e0:43:ab:f9:81:c5:e7:ac: 7d:13:ee:06:0d:09:13:6b:dd:7e:48:12:85:26:e7:ee:f1:eb: 65:de:59:2e:d7:46:b7:b5:29:37:ed:e8:73:ac:ae:0f:7a:c0: 75:c7:8a:92:60:7f:f3:e5:db:86:a8:21:30:7b:d7:88:ea:05: 25:cd:03:a8:64:76:74:f7:f3:fb:00:f3:08:4b:d5:ac:57:14: 63:28:24:7c:5b:2b:a6:ec:ac:0a:c7:b6:83:df:fb:9b:5b:7b: 97:2a:8f:c8:2b:f2:70:05:9d:0e:8d:26:38:19:a1:c5:cd:49: a2:ed:d1:44:77:b5:1b:e9:78:13:c9:d4:86:2b:0a:ab:6a:e4: 22:3d:40:cc:4d:da:f7:b9:6f:b1:1c:6a:5c:27:36:cc:2d:38: f1:93:38:d1:a9:aa:b6:82:54:9c:24:83:fb:54:89:62:47:3e: 51:33:09:3a:dd:5f:ad:69:53:3e:62:81:79:29:7b:eb:68:d7: ff:42:15:6c:be:17:0f:41:f4:25:66:00:60:c7:a2:26:f1:4d: 64:60:74:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwNzAzMDIwOTM1WhcNMjUwNzEwMDIwOTM1WjAYMRYwFAYD VQQDEw02ODY1ZTY1Zi03OWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VhArvm8KLUt42kZhqm8DMELX0+jwF/n8Ab9TaEXorNFQipAwG7PfjIPWPFa ZFdUt+Us9ChFZ6MxiVC/+Rja7j8NLpDdHQERMbWw0X+IHx/AzBy5DjHw3m2n+uhW Fhv/gTyvsFBgyIn79FtnoTV0ZLamy8fdtRmQbumMJvudmkl0ycYQSF+ACTNDCEwk xTDI+bnhHS12B5ecrr3DaTu4m8UjnTRU4UY4AjPiWbVSbrPYDfk8mvablCJ/eVPB 3ILQ94zKILAZLlFkNO3yBPYeJ0ZrCiQN4w0I6mATRVe3MXR5H7SZbNLYReFzhEgP 6xddl3itZRX244BYjskgTkZ0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXBY6as EeGyvwdOyCCcz73QxKGYMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYER1BQAavc8evYdJ6d8R7LQqZbhIAlSfLZbfcLLPMyosAdgp2wt99 VWgGYFp94EOr+YHF56x9E+4GDQkTa91+SBKFJufu8etl3lku10a3tSk37ehzrK4P esB1x4qSYH/z5duGqCEwe9eI6gUlzQOoZHZ09/P7APMIS9WsVxRjKCR8Wyum7KwK x7aD3/ubW3uXKo/IK/JwBZ0OjSY4GaHFzUmi7dFEd7Ub6XgTydSGKwqrauQiPUDM Tdr3uW+xHGpcJzbMLTjxkzjRqaq2glScJIP7VIliRz5RMwk63V+taVM+YoF5KXvr aNf/QhVsvhcPQfQlZgBgx6Im8U1kYHSK -----END CERTIFICATE-----Generated at Thu Jul 3 11:02:52 2025 by rpki-client