$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: bavw3Dki+LrAp28H75vvu8e7i+yRgKApCpyTXsrrQZE= Subject key identifier: D0:5B:A1:32:ED:5F:99:61:E6:B1:0F:9A:36:3A:51:53:74:ED:50:29 Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 0182 Signing time: Sun 29 Jun 2025 02:44:15 +0000 Manifest this update: Sun 29 Jun 2025 02:44:14 +0000 Manifest next update: Sun 06 Jul 2025 02:44:14 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: FB0vlflmRotLDw+AA50EfKJwKm2w33hjHj1yMXftC8o=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: dHhZT58EPueclWY/wjCtwq28vLwEg1BiZyhs8/2Uyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: Jun 29 02:44:14 2025 GMT Not After : Jul 6 02:44:14 2025 GMT Subject: CN=6860a87e-871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:1c:0c:1a:b8:53:36:90:f7:b2:0c:4b:dc: b8:fc:d6:7f:12:04:32:a8:1e:00:87:24:02:6d:7b: b7:42:94:0a:33:28:61:93:91:2a:ef:e9:06:23:bc: 8f:63:b0:11:de:c9:13:ef:ca:9b:96:dc:86:e9:28: 69:24:47:a2:d6:ed:90:c6:9a:2a:30:1f:e8:69:87: fe:a4:62:bc:8e:5a:d9:3c:37:9c:0e:d7:45:75:f7: 80:5a:9f:05:28:a7:f5:8d:d8:b9:6b:2a:26:d4:3d: 1e:b5:ce:53:47:2b:e3:db:d2:d2:49:72:1f:1f:ec: 8c:10:b6:5e:bc:4c:60:0c:d0:0a:9d:dd:16:33:23: 95:b7:ea:23:9a:db:72:e4:f9:f9:b5:77:9a:f3:fa: ab:d3:9a:0d:5d:fe:0e:86:a9:84:64:7f:29:ea:30: 71:e1:65:e7:18:6a:d5:4b:02:11:1a:45:62:01:d1: 5a:16:1e:69:5c:a3:5f:62:80:d9:b6:14:44:22:f3: da:92:5c:7c:99:12:c0:e4:e9:60:60:c1:60:ea:d2: 52:f7:4a:87:ed:5f:0d:ee:ce:03:b9:d1:ec:09:06: 5d:86:80:e6:6f:e6:c3:8d:72:e0:9f:13:6d:5f:85: 85:7e:ad:0a:9c:c3:c6:9e:63:3b:65:73:46:60:49: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5B:A1:32:ED:5F:99:61:E6:B1:0F:9A:36:3A:51:53:74:ED:50:29 X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b3:38:4b:85:05:26:22:d8:ea:86:23:65:c4:61:12:72:e1: 6e:2a:fc:e6:5c:f1:f9:75:71:cc:71:f1:16:72:0e:43:13:8b: 6c:c3:76:1b:1e:6f:7c:36:16:a7:26:c0:85:e1:45:dd:01:d3: 31:9c:0c:70:0e:05:34:48:8d:93:7f:3d:7a:34:71:79:74:68: 3b:be:5e:93:32:4b:f9:08:eb:e3:62:d7:ed:99:90:25:d1:58: 29:47:7a:f9:f5:19:1b:32:d7:97:d8:65:3c:4f:43:73:27:8b: f8:a7:7d:5e:bd:0b:e0:b0:10:16:a7:11:9a:75:d6:95:bd:b6: c3:28:c5:85:38:6f:5c:50:e0:36:79:1b:5e:af:d6:3f:20:54: d7:88:df:4f:fe:c0:61:ff:80:c1:f9:7d:a7:af:82:bc:d2:be: fb:49:75:0f:aa:54:34:d1:4c:2c:12:8a:88:57:dc:f6:3c:ea: 19:c2:71:b7:cb:ea:89:68:81:20:9d:ea:c5:df:99:b8:c3:7a: 04:9b:3b:a3:83:d6:29:9c:c6:bb:01:e6:b7:f6:05:b2:03:ce: 05:2c:eb:a0:4d:cd:e0:f9:49:a4:48:4a:dc:d2:a7:30:70:a0: 1b:71:fd:f4:86:78:53:c0:96:8f:e4:02:31:03:9b:95:3f:ea: 11:f8:90:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjUwNjI5MDI0NDE0WhcNMjUwNzA2MDI0NDE0WjAYMRYwFAYD VQQDEw02ODYwYTg3ZS04NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnMcDBq4UzaQ97IMS9y4/NZ/EgQyqB4AhyQCbXu3QpQKMyhhk5Eq7+kGI7yP Y7AR3skT78qbltyG6ShpJEei1u2QxpoqMB/oaYf+pGK8jlrZPDecDtdFdfeAWp8F KKf1jdi5ayom1D0etc5TRyvj29LSSXIfH+yMELZevExgDNAKnd0WMyOVt+ojmtty 5Pn5tXea8/qr05oNXf4OhqmEZH8p6jBx4WXnGGrVSwIRGkViAdFaFh5pXKNfYoDZ thREIvPaklx8mRLA5OlgYMFg6tJS90qH7V8N7s4DudHsCQZdhoDmb+bDjXLgnxNt X4WFfq0KnMPGnmM7ZXNGYEn9BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBboTLt X5lh5rEPmjY6UVN07VApMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwszhLhQUmItjqhiNlxGEScuFuKvzmXPH5dXHMcfEWcg5DE4tsw3Yb Hm98NhanJsCF4UXdAdMxnAxwDgU0SI2Tfz16NHF5dGg7vl6TMkv5COvjYtftmZAl 0VgpR3r59RkbMteX2GU8T0NzJ4v4p31evQvgsBAWpxGaddaVvbbDKMWFOG9cUOA2 eRter9Y/IFTXiN9P/sBh/4DB+X2nr4K80r77SXUPqlQ00UwsEoqIV9z2POoZwnG3 y+qJaIEgnerF35m4w3oEmzujg9YpnMa7Aea39gWyA84FLOugTc3g+UmkSErc0qcw cKAbcf30hnhTwJaP5AIxA5uVP+oR+JC6 -----END CERTIFICATE-----Generated at Sun Jun 29 13:37:36 2025 by rpki-client