$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: jOmneIx5SzTSR0bgbxL7jEejmRN2eD/7TYjjpEhxtxg= Subject key identifier: 9A:B5:79:65:79:C9:F0:92:70:72:E7:5F:28:80:F4:4D:64:ED:0A:5A Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 73 Signing time: Thu 03 Jul 2025 07:23:54 +0000 Manifest this update: Thu 03 Jul 2025 07:23:54 +0000 Manifest next update: Thu 10 Jul 2025 07:23:54 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: TUETeTGCimvhkaaePVmpRmZm+oxnozYobZ0+3cbzGZ4=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Jul 3 07:23:54 2025 GMT Not After : Jul 10 07:23:54 2025 GMT Subject: CN=6866300a-8134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:78:b0:2d:4b:d3:97:40:5a:33:8e:cb:20:e9: ff:0d:0f:88:a5:1f:a3:04:29:54:26:74:a4:2e:82: e3:19:cb:09:41:91:8b:67:b4:82:c4:5a:50:0d:72: 13:f8:8a:21:0c:35:d4:55:9c:82:fd:38:72:42:25: dc:7d:fb:68:8e:b1:d2:55:ef:be:25:cc:8c:f8:60: c7:6d:de:2b:bf:80:55:a9:be:e2:8e:30:b9:a7:64: 71:12:a7:b0:57:8c:ea:9c:cd:8f:df:a9:5a:9f:a4: 59:ae:cb:fe:3d:b9:b7:d9:05:38:d1:6e:4d:26:8f: 3a:ed:1a:50:b3:e1:18:94:30:c3:79:1f:05:e2:3b: db:64:a2:a2:89:4b:ca:a6:34:e2:fe:38:7f:71:ec: e8:7c:8f:51:ba:25:38:1c:de:2a:f2:ae:f2:24:87: 6f:4d:e7:b6:6f:11:7d:91:b9:9b:d6:91:71:f7:dd: 16:1e:7e:3e:55:23:03:66:82:41:00:82:7b:23:07: 65:29:c9:4a:ce:d8:c1:4f:f9:57:92:0d:b9:f1:13: 48:54:61:dd:b4:15:c8:83:a1:0e:80:24:d8:a4:1e: 49:ca:1f:0a:76:53:ae:3d:c9:eb:a3:f1:4e:71:36: 96:75:5c:ef:ce:e3:8d:53:c4:19:85:0a:e8:04:ca: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:79:65:79:C9:F0:92:70:72:E7:5F:28:80:F4:4D:64:ED:0A:5A X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:e0:14:5a:d8:c8:aa:47:4f:c4:1f:b3:cd:03:36:5a:85: d3:d9:96:6c:0d:2f:bf:62:68:57:ab:9f:9a:f6:6a:71:96:89: 02:6e:6a:ca:1b:9a:66:ae:d9:c1:c3:d7:53:de:24:bf:2d:86: bc:cc:ad:af:c0:41:2e:72:31:aa:9f:af:f5:43:05:b8:3d:af: 61:67:0e:00:75:bf:86:31:9a:c6:53:b7:09:a7:a3:d7:d8:85: d1:06:13:25:f6:3d:27:ca:f0:d4:be:48:36:3a:2a:d6:bf:16: 80:5b:e3:b5:7d:89:e8:c6:02:05:0a:d5:5e:b5:a9:11:d8:b6: 82:50:80:2a:20:a9:41:c8:bf:ca:93:00:09:a8:7e:d2:c5:88: b1:ea:ee:df:af:d7:86:d6:da:7f:50:1b:90:8a:e3:f5:a2:51: 6c:40:4d:4f:3a:c2:c9:14:5a:0b:ea:4d:d0:bd:06:6e:ef:3c: 99:8c:22:08:48:23:9d:47:3b:a0:2f:df:65:44:84:0f:96:ea: da:d7:ef:b6:0d:45:f4:05:1d:48:56:80:85:e7:dc:b9:04:06: 97:a0:f6:07:d1:55:96:d1:9e:47:63:cb:24:52:a0:6c:93:f6: c2:2c:89:08:a6:44:f9:03:15:19:88:d0:04:52:2b:36:56:65: aa:b0:01:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUwNzAzMDcyMzU0WhcNMjUwNzEwMDcyMzU0WjAYMRYwFAYD VQQDEw02ODY2MzAwYS04MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XiwLUvTl0BaM47LIOn/DQ+IpR+jBClUJnSkLoLjGcsJQZGLZ7SCxFpQDXIT +IohDDXUVZyC/ThyQiXcfftojrHSVe++JcyM+GDHbd4rv4BVqb7ijjC5p2RxEqew V4zqnM2P36lan6RZrsv+Pbm32QU40W5NJo867RpQs+EYlDDDeR8F4jvbZKKiiUvK pjTi/jh/cezofI9RuiU4HN4q8q7yJIdvTee2bxF9kbmb1pFx990WHn4+VSMDZoJB AIJ7IwdlKclKztjBT/lXkg258RNIVGHdtBXIg6EOgCTYpB5Jyh8KdlOuPcnro/FO cTaWdVzvzuONU8QZhQroBMqXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq1eWV5 yfCScHLnXyiA9E1k7QpaMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTFuAUWtjIqkdPxB+zzQM2WoXT2ZZsDS+/YmhXq5+a9mpxlokCbmrK G5pmrtnBw9dT3iS/LYa8zK2vwEEucjGqn6/1QwW4Pa9hZw4Adb+GMZrGU7cJp6PX 2IXRBhMl9j0nyvDUvkg2OirWvxaAW+O1fYnoxgIFCtVetakR2LaCUIAqIKlByL/K kwAJqH7SxYix6u7fr9eG1tp/UBuQiuP1olFsQE1POsLJFFoL6k3QvQZu7zyZjCII SCOdRzugL99lRIQPlura1++2DUX0BR1IVoCF59y5BAaXoPYH0VWW0Z5HY8skUqBs k/bCLIkIpkT5AxUZiNAEUis2VmWqsAHq -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:00 2025 by rpki-client