$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: +SKnKN+U4DgyHRJssqwnGSKSCQ7qzwA7GaPXabRj1Lc= Subject key identifier: 7F:20:1C:6F:D6:38:18:90:0B:6C:93:BD:46:AE:7D:9B:E4:7C:F5:84 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 07C7 Signing time: Sat 28 Jun 2025 20:48:07 +0000 Manifest this update: Sat 28 Jun 2025 20:48:07 +0000 Manifest next update: Sat 05 Jul 2025 20:48:07 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: prnAHO0+CoF0MhEmLoUIGfzAUtoN6DALkAdkg8aCbSc=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Jun 28 20:48:07 2025 GMT Not After : Jul 5 20:48:07 2025 GMT Subject: CN=68605507-f056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:5d:e1:0b:b5:eb:d7:aa:3d:fb:a3:fe:f0: 91:2a:31:09:ac:b3:ea:c4:2d:19:59:be:d2:b2:3c: 65:67:d5:42:8e:c1:9e:4d:2a:07:36:6b:03:65:45: 21:6b:64:0f:12:d0:9e:35:c0:3d:18:76:57:a7:2a: 09:80:e0:c1:42:30:67:40:d5:5d:fc:50:d7:2c:2e: f7:68:70:ad:66:a6:59:b8:0f:14:10:6c:7a:0c:01: 17:42:04:6d:dc:65:ab:1c:03:51:6a:25:48:11:36: 3b:e3:46:96:9b:bf:d4:8d:25:04:ff:06:c1:37:4c: 7c:91:c5:3a:b2:f8:48:d1:df:8d:ec:48:5e:33:dd: 83:22:67:19:b0:8d:f6:6a:bb:f6:27:fb:c3:d9:c0: e5:75:9e:52:6c:3b:d2:61:fe:d2:de:9b:4a:f0:5d: 6a:91:03:1c:b8:d5:d7:ef:a0:f7:ab:7e:cd:a8:cd: c8:c7:c1:40:b0:9c:c6:28:0c:fa:27:c4:b2:90:48: dc:b7:76:5e:35:35:d9:0e:e7:d1:99:e2:24:b6:34: 35:89:52:1d:c6:98:d7:0f:47:b6:6b:84:11:bb:cc: 12:34:e6:68:a3:b7:d5:f0:7c:1c:8d:24:90:17:81: 17:7c:02:90:6f:e9:98:7c:5c:30:c3:0d:c4:81:05: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:20:1C:6F:D6:38:18:90:0B:6C:93:BD:46:AE:7D:9B:E4:7C:F5:84 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:54:6f:f2:19:d8:59:ae:e1:af:12:2c:07:6e:f7:68:6d:20: a7:05:ed:f0:1f:43:cc:72:a6:7b:33:52:2f:1c:46:51:5d:06: eb:f5:2a:5d:6f:93:4b:ae:b1:98:33:a5:25:93:91:15:85:a0: 77:6e:53:d0:08:71:32:db:b8:0a:06:d3:11:39:13:1d:cf:6a: 2c:d4:c3:0c:7a:56:b6:1b:a1:63:63:8c:cf:26:95:2c:cc:d8: 99:6a:73:53:16:2b:51:58:6a:6e:fc:e1:fd:03:fd:49:58:a3: b6:e8:ee:9d:57:f4:c1:2b:aa:7e:ff:a6:a1:85:a8:b8:a2:eb: 16:6d:fb:f0:42:6d:22:98:3d:99:06:3c:3f:8f:fe:3f:74:1d: ab:85:d8:f1:f5:a4:6a:42:c8:70:92:d3:e2:b3:fa:aa:d1:cc: 07:44:7c:a2:7b:2b:e7:b5:2d:1d:ad:89:25:a8:26:87:49:a1: 61:83:2f:9f:03:e4:75:9c:48:8b:a8:e6:4f:84:89:ae:2e:68: 35:35:be:c7:75:ed:b7:be:0f:50:ac:87:25:4b:4c:25:43:65: 5f:3e:49:f4:7e:8d:a4:21:e3:8c:68:ff:c4:58:1a:96:87:3b: 41:2a:ba:00:b6:f3:3f:43:b8:7e:99:33:44:05:6d:ad:c4:cd: 84:16:f5:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUwNjI4MjA0ODA3WhcNMjUwNzA1MjA0ODA3WjAYMRYwFAYD VQQDEw02ODYwNTUwNy1mMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOxd4Qu169eqPfuj/vCRKjEJrLPqxC0ZWb7SsjxlZ9VCjsGeTSoHNmsDZUUh a2QPEtCeNcA9GHZXpyoJgODBQjBnQNVd/FDXLC73aHCtZqZZuA8UEGx6DAEXQgRt 3GWrHANRaiVIETY740aWm7/UjSUE/wbBN0x8kcU6svhI0d+N7EheM92DImcZsI32 arv2J/vD2cDldZ5SbDvSYf7S3ptK8F1qkQMcuNXX76D3q37NqM3Ix8FAsJzGKAz6 J8SykEjct3ZeNTXZDufRmeIktjQ1iVIdxpjXD0e2a4QRu8wSNOZoo7fV8HwcjSSQ F4EXfAKQb+mYfFwwww3EgQWsBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8gHG/W OBiQC2yTvUaufZvkfPWEMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqVG/yGdhZruGvEiwHbvdobSCnBe3wH0PMcqZ7M1IvHEZRXQbr9Spd b5NLrrGYM6Ulk5EVhaB3blPQCHEy27gKBtMRORMdz2os1MMMela2G6FjY4zPJpUs zNiZanNTFitRWGpu/OH9A/1JWKO26O6dV/TBK6p+/6ahhai4ousWbfvwQm0imD2Z Bjw/j/4/dB2rhdjx9aRqQshwktPis/qq0cwHRHyieyvntS0drYklqCaHSaFhgy+f A+R1nEiLqOZPhImuLmg1Nb7Hde23vg9QrIclS0wlQ2VfPkn0fo2kIeOMaP/EWBqW hztBKroAtvM/Q7h+mTNEBW2txM2EFvUd -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:26 2025 by rpki-client