$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft File: yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json) Hash identifier: AzwNPcuFtF2nmlCIVDXJHJwT6gZ5aiey7PLEfrUtvT8= Subject key identifier: 24:CC:F8:95:01:6F:0D:31:BF:A6:73:8F:BB:29:7C:C8:D9:07:6E:36 Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft Manifest number: 01C6 Signing time: Sun 29 Jun 2025 02:05:50 +0000 Manifest this update: Sun 29 Jun 2025 02:05:50 +0000 Manifest next update: Sun 06 Jul 2025 02:05:50 +0000 Files and hashes: 1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: wa5Q2LMas0naru/9fhoxv80yhFA3hwdoRnoQLLc/mfc=) 2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: /ERrUArKmo0KgEQ70S3Uf+U0E1QNCp3+3kkOG/O7FLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Validity Not Before: Jun 29 02:05:50 2025 GMT Not After : Jul 6 02:05:50 2025 GMT Subject: CN=68609f7e-a899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:39:66:78:4b:a5:be:86:b7:48:ec:9a:25: 2a:2b:04:8b:bd:b4:62:a5:f7:2d:3a:ca:ec:e6:94: e9:f9:46:28:89:fc:08:63:2f:25:c9:66:cd:24:ff: 4d:22:02:46:ec:7e:5a:00:30:ff:36:db:7f:1c:7c: 7b:28:ae:b2:a7:10:e1:55:e4:83:59:81:ad:05:ee: a7:05:b9:c2:99:e6:bd:a5:77:d5:f9:50:a1:97:a2: 5a:52:d4:3b:ff:1a:90:af:d3:4f:25:0e:66:04:68: f9:63:29:dd:fb:3d:bd:f0:ca:06:96:5d:8b:b5:86: 5b:ef:0d:76:3d:2f:51:07:89:25:73:99:a5:1a:25: 55:39:77:93:8a:72:f5:0a:ad:4c:e9:d5:62:b3:7b: ec:2e:b9:78:aa:ed:77:b2:f2:39:3c:75:62:2f:61: ae:fb:07:e0:cb:ee:0a:f0:cc:57:cb:52:ef:a7:ec: 9c:6e:3b:ea:35:0f:73:1d:45:16:36:34:90:6a:f5: d4:68:b8:d6:8a:8d:79:2c:db:84:21:2e:c4:ce:35: 40:15:e1:cb:f1:94:cc:c0:e9:54:72:95:8e:84:78: 15:9b:65:cf:38:b5:b3:93:c4:ad:e5:77:59:52:21: 19:0e:b7:f4:9a:ae:30:f5:14:2a:a7:47:cc:66:2c: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:F8:95:01:6F:0D:31:BF:A6:73:8F:BB:29:7C:C8:D9:07:6E:36 X509v3 Authority Key Identifier: keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:08:9c:29:95:0e:ce:89:c2:f6:ca:8b:73:58:70:c2:68:5f: d8:9d:5a:5c:55:02:a1:e1:e9:47:3c:53:ed:f7:d7:f2:12:dc: 36:fc:d7:f6:a0:bf:2e:b0:07:88:ce:2f:b2:5b:f9:10:8b:d3: be:75:51:4a:67:59:81:15:a4:37:71:ec:63:f2:0a:4f:fd:77: 08:b4:4e:27:77:f3:c5:8e:1f:1b:e7:4b:ec:79:b5:e3:f5:d8: 31:8b:58:a7:ce:16:7f:b1:18:99:ce:eb:4c:2c:cf:e4:f9:93: 03:82:a3:10:2a:ff:0e:b0:d2:91:a3:19:ce:88:09:0e:b0:60: 69:12:0a:7c:22:e1:f7:4f:d9:3b:60:04:83:69:00:c0:2b:1d: 77:1c:af:46:6f:71:c8:4e:51:6e:ed:c6:4f:c3:0b:b4:53:41: 01:55:17:ab:ed:91:b7:6a:6f:19:56:d1:76:ac:2f:3f:0b:e1: f5:5d:3e:5d:f6:08:2f:31:a3:10:eb:66:f1:44:46:8d:56:0c: a2:11:eb:da:b9:23:79:dd:0c:ad:5e:2c:12:0f:93:8b:5e:7c: 06:8e:f5:0f:71:fa:94:a6:07:43:72:9f:a7:0b:c9:11:64:fb: 63:70:59:20:1c:c6:fd:72:b9:66:e9:82:e8:6b:43:7e:c6:c8: a0:4a:12:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTMxMTAvBgNVBAUTKEM4RTA1OTFFN0U1MTdENDE5Q0ZDODYxNzFDRENBOUZE RTYyNkU4RjUwHhcNMjUwNjI5MDIwNTUwWhcNMjUwNzA2MDIwNTUwWjAYMRYwFAYD VQQDEw02ODYwOWY3ZS1hODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3285ZnhLpb6Gt0jsmiUqKwSLvbRipfctOsrs5pTp+UYoifwIYy8lyWbNJP9N IgJG7H5aADD/Ntt/HHx7KK6ypxDhVeSDWYGtBe6nBbnCmea9pXfV+VChl6JaUtQ7 /xqQr9NPJQ5mBGj5Yynd+z298MoGll2LtYZb7w12PS9RB4klc5mlGiVVOXeTinL1 Cq1M6dVis3vsLrl4qu13svI5PHViL2Gu+wfgy+4K8MxXy1Lvp+ycbjvqNQ9zHUUW NjSQavXUaLjWio15LNuEIS7EzjVAFeHL8ZTMwOlUcpWOhHgVm2XPOLWzk8St5XdZ UiEZDrf0mq4w9RQqp0fMZiwSWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTM+JUB bw0xv6Zzj7spfMjZB242MB8GA1UdIwQYMBaAFMjgWR5+UX1BnPyGFxzcqf3mJuj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFMy9BOTQ2MjRCNDk5 NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZVR2NfSVlYSE55cF9lWW02 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPQlpIbjVSZlVHY19JWVhITnlwX2VZbTZQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFMy9BOTQ2MjRCNDk5NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZV R2NfSVlYSE55cF9lWW02UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3CJwplQ7OicL2yotzWHDCaF/YnVpcVQKh4elHPFPt99fyEtw2/Nf2 oL8usAeIzi+yW/kQi9O+dVFKZ1mBFaQ3cexj8gpP/XcItE4nd/PFjh8b50vsebXj 9dgxi1inzhZ/sRiZzutMLM/k+ZMDgqMQKv8OsNKRoxnOiAkOsGBpEgp8IuH3T9k7 YASDaQDAKx13HK9Gb3HITlFu7cZPwwu0U0EBVRer7ZG3am8ZVtF2rC8/C+H1XT5d 9ggvMaMQ62bxREaNVgyiEevauSN53QytXiwSD5OLXnwGjvUPcfqUpgdDcp+nC8kR ZPtjcFkgHMb9crlm6YLoa0N+xsigShLK -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:42 2025 by rpki-client