$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json) Hash identifier: wuP9u/PysgDZ/NXhWx621ceNna8soGnWSEUgK6PEjz0= Subject key identifier: 1B:CC:18:F2:51:1C:86:A4:A6:89:0A:D1:6B:87:E7:5F:42:F4:15:1F Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft Manifest number: 6B Signing time: Sun 29 Jun 2025 06:01:17 +0000 Manifest this update: Sun 29 Jun 2025 06:01:16 +0000 Manifest next update: Sun 06 Jul 2025 06:01:16 +0000 Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: HbjI64Z4JohZGHAz+3LsxD93QpiW0iixkcvVDLmMjcs=) 2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Validity Not Before: Jun 29 06:01:16 2025 GMT Not After : Jul 6 06:01:16 2025 GMT Subject: CN=6860d6ad-ff9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:c0:5d:c3:f5:f1:9e:a1:53:05:b3:82:5b: 54:1a:fd:00:13:f9:e1:1b:55:c3:79:94:78:11:83: 83:52:21:0b:f9:5b:85:a1:b1:eb:94:b5:4d:49:1e: 4d:9c:4a:ad:89:1e:ed:c3:df:d3:cb:fb:f6:64:72: 7e:eb:1e:27:85:aa:ff:e4:ca:2d:93:cf:ee:fd:85: 59:dc:85:ee:ed:3a:7f:4f:7e:a4:98:f8:dd:ae:53: 26:34:9b:db:2d:dd:b5:85:19:a8:14:6f:d8:0c:74: 06:1a:b4:d9:23:e6:3d:fd:36:31:0b:c5:47:09:ca: 88:14:c2:d8:34:e8:49:d5:3a:d1:c8:87:e7:27:a6: 6e:63:06:37:ea:5f:0a:38:05:d6:a0:f7:fe:ee:6a: 51:0c:9c:0c:11:f7:15:a7:71:9f:f7:08:a3:17:5f: bf:f1:e3:61:27:97:44:a2:f9:e6:fc:aa:c2:0b:aa: 41:7f:bd:d4:33:ef:29:2c:86:ad:12:c5:af:5c:5b: a0:d2:1f:51:c6:bc:0f:3e:16:b5:cf:8b:a9:d1:ec: 9d:d3:9a:f1:c9:4e:b0:26:19:31:84:cf:33:a9:e5: af:49:a5:6b:49:e3:b8:38:2b:c6:eb:c9:0c:0c:4f: 9d:27:d6:a1:ec:03:6f:39:42:91:96:64:12:3b:71: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:18:F2:51:1C:86:A4:A6:89:0A:D1:6B:87:E7:5F:42:F4:15:1F X509v3 Authority Key Identifier: keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:18:41:8f:c8:58:c3:7a:d2:b4:a8:8e:c7:51:cd:7c:47:b3: 5f:aa:ba:14:8f:0c:28:b7:88:75:48:95:09:60:60:2c:65:26: 85:4b:39:f5:12:b1:db:3d:fb:7f:6b:2c:ad:dd:00:04:3b:67: b1:c4:35:ff:22:db:37:c4:07:d0:0f:7e:61:2f:18:4c:cb:3f: ac:c6:e0:31:23:5b:67:79:20:42:3d:19:ef:0e:fb:10:c6:5b: b1:02:cc:4e:d3:fb:15:73:c6:a4:63:e7:01:1b:4b:23:7e:60: 62:de:40:ff:9d:c9:88:44:e0:87:16:b2:5f:59:1e:ab:14:d5: 23:1d:9a:a6:50:f0:45:eb:27:3d:18:64:cd:d7:9d:77:aa:d8: db:1d:ef:7e:20:62:06:f1:db:8f:96:a9:86:b3:ff:bf:e9:b8: 85:d0:91:93:6e:dd:d0:b6:14:83:0d:fc:aa:cc:90:7c:8a:7b: fe:ed:cf:c8:36:f8:cc:b0:90:a1:96:7a:ef:e7:cc:48:e8:e0: b9:83:5e:ab:9e:9b:23:8e:8b:eb:4a:f9:60:17:6f:5a:fd:1d: 75:94:37:2e:30:20:22:e3:a4:75:6c:2e:e8:0d:1e:ff:8a:fa: 05:1f:5a:1c:d7:1a:63:e4:3b:03:f0:4d:d5:2d:8b:1f:64:38: 21:18:17:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0 MzI2RDlEMzAeFw0yNTA2MjkwNjAxMTZaFw0yNTA3MDYwNjAxMTZaMBgxFjAUBgNV BAMTDTY4NjBkNmFkLWZmOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs/MBdw/XxnqFTBbOCW1Qa/QAT+eEbVcN5lHgRg4NSIQv5W4WhseuUtU1JHk2c Sq2JHu3D39PL+/Zkcn7rHieFqv/kyi2Tz+79hVnche7tOn9PfqSY+N2uUyY0m9st 3bWFGagUb9gMdAYatNkj5j39NjELxUcJyogUwtg06EnVOtHIh+cnpm5jBjfqXwo4 Bdag9/7ualEMnAwR9xWncZ/3CKMXX7/x42Enl0Si+eb8qsILqkF/vdQz7ykshq0S xa9cW6DSH1HGvA8+FrXPi6nR7J3TmvHJTrAmGTGEzzOp5a9JpWtJ47g4K8bryQwM T50n1qHsA285QpGWZBI7cWptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG8wY8lEc hqSmiQrRa4fnX0L0FR8wHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkYQY/IWMN60rSojsdRzXxHs1+quhSPDCi3iHVIlQlgYCxlJoVLOfUS sds9+39rLK3dAAQ7Z7HENf8i2zfEB9APfmEvGEzLP6zG4DEjW2d5IEI9Ge8O+xDG W7ECzE7T+xVzxqRj5wEbSyN+YGLeQP+dyYhE4IcWsl9ZHqsU1SMdmqZQ8EXrJz0Y ZM3XnXeq2Nsd734gYgbx24+WqYaz/7/puIXQkZNu3dC2FIMN/KrMkHyKe/7tz8g2 +MywkKGWeu/nzEjo4LmDXquemyOOi+tK+WAXb1r9HXWUNy4wICLjpHVsLugNHv+K +gUfWhzXGmPkOwPwTdUtix9kOCEYF7M= -----END CERTIFICATE-----Generated at Mon Jun 30 03:22:34 2025 by rpki-client