$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: F821k0PHbUnUCY1TG80IOWK8euXKpOne30Kjz8lptV0= Subject key identifier: 5A:62:F9:13:C6:F5:EA:32:09:9C:90:CC:C8:85:34:68:66:64:71:D3 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 54 Signing time: Thu 03 Jul 2025 07:30:36 +0000 Manifest this update: Thu 03 Jul 2025 07:30:35 +0000 Manifest next update: Thu 10 Jul 2025 07:30:35 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: KVHSfUvR5RNrfhiVO8yq7wpkNvMeIyka9ms3uCC4ICM=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: u8mLTgdlzLOcst0PW7RFWtPWXwp8xBwUEW3SQOngh5k=) 3: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (hash: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Jul 3 07:30:35 2025 GMT Not After : Jul 10 07:30:35 2025 GMT Subject: CN=6866319b-b93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:db:5a:77:47:9c:17:94:59:ea:20:85:32: 42:27:22:1c:12:46:4f:16:d1:29:a0:3b:e7:c7:d7: 9a:08:66:d1:35:5d:75:41:29:d9:7f:ca:ba:af:59: 20:6f:d5:cc:3a:5c:12:97:98:25:15:1f:ac:57:d8: 92:30:e7:4b:95:29:ae:0c:92:70:3c:2b:b0:b4:ad: 4a:07:7f:0a:d7:67:e3:7c:32:e5:70:2a:a1:8d:30: dd:12:5b:8c:62:d2:f4:7d:1b:87:96:12:83:a2:9c: ad:cb:54:dc:61:e7:9c:4d:d3:2c:07:8e:89:cc:bd: f6:c0:09:60:8f:8a:2f:7e:b6:45:24:e5:be:d0:6b: af:a9:9e:bb:03:69:1b:ca:c2:9a:0f:59:66:3a:de: 72:8f:c2:92:15:36:ff:fc:76:e4:05:6e:e0:ca:21: 8a:ee:81:fd:c0:4c:f3:19:d3:ab:ba:65:bd:ff:0f: 1e:9f:40:1b:eb:04:1b:22:c0:55:31:ee:32:32:7a: df:e8:03:b8:91:cd:80:30:98:2f:a1:79:a1:12:dc: 2c:25:f6:e2:c1:95:3b:f0:43:d6:62:8b:5f:3f:ba: 24:34:36:e9:a4:17:d9:d9:a4:a6:b4:48:ca:d4:32: 0c:5b:ba:f2:bc:4b:19:de:25:a5:f9:63:8f:ea:25: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:62:F9:13:C6:F5:EA:32:09:9C:90:CC:C8:85:34:68:66:64:71:D3 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:b7:ae:cf:47:2d:53:06:9d:4d:65:02:3c:82:ec:46:4c: 50:99:16:cb:c7:88:40:82:84:8d:10:16:b6:9f:c0:d8:6d:02: 90:c0:71:1a:cb:b7:ed:94:a9:06:6b:16:97:2a:8c:bb:f7:5b: 63:dd:b2:7d:d5:fc:d9:39:8f:20:27:0b:7a:ec:d2:76:37:8b: a0:fc:56:9e:a1:86:88:c8:86:43:1c:aa:8f:e1:9f:92:55:d4: f3:ae:6e:28:25:f1:f5:ba:a1:c0:9d:e6:1d:85:7c:67:a9:f7: c1:e9:de:75:65:41:7c:9a:8f:d2:ef:67:8a:97:5d:4b:2e:b1: ca:66:18:e5:85:e2:63:28:5a:e6:e8:eb:62:b0:1c:7b:fb:db: c0:f9:83:1c:be:22:ad:39:6b:24:e6:3b:ba:4e:cf:85:16:7d: 36:b0:25:54:09:ed:ef:03:55:09:0a:2e:15:e2:b7:64:8d:8f: 9d:d3:78:70:a0:c4:0b:99:ad:e7:0c:17:ff:12:4e:0e:bf:58: 8f:10:a9:60:bf:8b:43:1b:93:a2:76:6a:1b:d9:1a:71:8a:65: 6a:7b:41:2c:a0:cf:f3:e9:9e:69:d5:3a:f8:e8:55:14:89:c7: 23:be:87:f2:5d:ce:e1:26:c9:47:a2:20:b2:a4:77:d6:f5:87: f6:36:c1:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA3MDMwNzMwMzVaFw0yNTA3MTAwNzMwMzVaMBgxFjAUBgNV BAMTDTY4NjYzMTliLWI5M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtdNtad0ecF5RZ6iCFMkInIhwSRk8W0SmgO+fH15oIZtE1XXVBKdl/yrqvWSBv 1cw6XBKXmCUVH6xX2JIw50uVKa4MknA8K7C0rUoHfwrXZ+N8MuVwKqGNMN0SW4xi 0vR9G4eWEoOinK3LVNxh55xN0ywHjonMvfbACWCPii9+tkUk5b7Qa6+pnrsDaRvK wpoPWWY63nKPwpIVNv/8duQFbuDKIYrugf3ATPMZ06u6Zb3/Dx6fQBvrBBsiwFUx 7jIyet/oA7iRzYAwmC+heaES3Cwl9uLBlTvwQ9Zii18/uiQ0NumkF9nZpKa0SMrU MgxbuvK8SxneJaX5Y4/qJQsVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmL5E8b1 6jIJnJDMyIU0aGZkcdMwHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFIt67PRy1TBp1NZQI8guxGTFCZFsvHiECChI0QFrafwNhtApDAcRrL t+2UqQZrFpcqjLv3W2Pdsn3V/Nk5jyAnC3rs0nY3i6D8Vp6hhojIhkMcqo/hn5JV 1POubigl8fW6ocCd5h2FfGep98Hp3nVlQXyaj9LvZ4qXXUsuscpmGOWF4mMoWubo 62KwHHv728D5gxy+Iq05ayTmO7pOz4UWfTawJVQJ7e8DVQkKLhXit2SNj53TeHCg xAuZrecMF/8STg6/WI8QqWC/i0Mbk6J2ahvZGnGKZWp7QSygz/PpnmnVOvjoVRSJ xyO+h/JdzuEmyUeiILKkd9b1h/Y2wTM= -----END CERTIFICATE-----Generated at Fri Jul 4 18:41:52 2025 by rpki-client