$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json) Hash identifier: V4qXdIB8MJJkcXDpb1UgVUOQRh+yg1e3ZuuUKRz9dyg= Subject key identifier: 6D:E9:F7:A0:31:2C:4E:9C:AC:02:D4:89:B3:5A:C4:F0:71:83:D3:44 Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft Manifest number: 04DE Signing time: Thu 03 Jul 2025 00:06:14 +0000 Manifest this update: Thu 03 Jul 2025 00:06:14 +0000 Manifest next update: Thu 10 Jul 2025 00:06:14 +0000 Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: 1mH4Od51JWCJQPUl+iQYcq6owYcmhn3Xb2IhVrhsq6k=) 2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 8z4FQ3P4ffexi4IqxjF16x9Xr0QlwFMb8TffrA8dnxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Jul 3 00:06:14 2025 GMT Not After : Jul 10 00:06:14 2025 GMT Subject: CN=6865c976-1464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:bc:54:0b:f8:7b:ab:18:17:2d:2e:dd:cd: ae:7c:c5:4e:bb:e0:ce:74:a9:1f:ed:ea:74:ab:6d: 0b:0d:f6:48:e2:b8:ce:91:83:06:92:5d:f0:9e:e0: 3a:b8:c9:dc:39:24:31:2e:ba:7b:72:ef:29:7d:00: 1f:cc:af:12:8c:21:c3:ff:5b:5e:4c:04:bb:6a:35: ef:06:28:f9:7d:87:50:61:69:0f:56:5c:24:1c:55: da:91:bf:05:00:47:65:31:70:1b:52:b9:2c:84:57: 3d:d4:a9:b5:ef:bd:ff:a3:71:9d:a5:54:77:e5:ee: 31:b4:72:69:36:db:b5:39:af:87:8e:70:6a:8a:c6: 9e:2f:9c:87:0d:22:a3:f6:7a:10:82:15:1d:5f:8e: c8:21:d9:a7:0f:ef:04:22:ae:cc:9d:a2:2e:f1:96: 53:13:9b:d8:72:34:4b:02:fd:54:c8:fe:13:fe:a0: 15:32:e5:53:bb:db:ab:68:29:ee:4b:42:4d:47:13: 2a:3c:54:26:86:16:c3:50:df:d1:a1:3c:10:ba:39: ee:12:7a:31:f6:da:22:9b:eb:c1:89:16:be:8d:da: af:d2:be:e3:a1:bd:32:96:c4:2f:26:6b:23:99:a8: 59:36:89:ee:9f:8d:2f:62:2d:62:a0:8e:52:9d:f7: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:F7:A0:31:2C:4E:9C:AC:02:D4:89:B3:5A:C4:F0:71:83:D3:44 X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d9:f8:49:6d:c3:58:e0:47:e6:2e:42:79:0f:b6:77:7f:6b: 75:d3:2a:b0:29:15:78:51:52:36:b7:68:05:8d:92:0f:53:cb: c4:12:68:4f:22:87:f6:d1:70:8d:b2:7b:7b:15:a4:38:65:ce: 21:33:f3:51:d1:21:be:91:db:23:8c:07:80:e1:e9:b0:3d:d2: 1a:15:d9:12:9e:18:29:3a:5e:ba:00:9f:30:90:fb:8d:af:58: bc:78:36:f2:53:ba:a6:5e:10:48:dc:87:1d:79:cb:4a:9d:f3: a8:71:10:42:c0:11:b5:00:63:4f:d5:a7:2b:90:3a:5c:19:4e: f9:ab:f7:ce:3e:cc:ee:4e:eb:51:5b:3d:6d:7e:53:67:ab:8c: ba:1d:9d:ad:c3:69:f7:47:a0:7c:f0:67:c9:93:8a:0c:49:f5: 64:78:4e:7c:e0:db:24:6c:fd:92:e3:9f:73:8f:9e:55:4d:78: 3c:5a:15:3e:bb:ad:9e:7b:32:ba:b7:49:6e:41:8d:a1:09:ae: 05:39:e6:7f:e8:b6:a6:32:f9:a0:c3:fd:28:74:3b:70:af:9a: d1:68:83:3d:5d:d3:5b:a9:d4:bf:45:7f:21:de:cd:69:5e:9c: 5d:8e:52:fc:83:b5:ba:a3:f4:f2:d6:11:c0:e1:21:c7:14:b1: c9:43:00:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUwNzAzMDAwNjE0WhcNMjUwNzEwMDAwNjE0WjAYMRYwFAYD VQQDEw02ODY1Yzk3Ni0xNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxW8VAv4e6sYFy0u3c2ufMVOu+DOdKkf7ep0q20LDfZI4rjOkYMGkl3wnuA6 uMncOSQxLrp7cu8pfQAfzK8SjCHD/1teTAS7ajXvBij5fYdQYWkPVlwkHFXakb8F AEdlMXAbUrkshFc91Km1773/o3GdpVR35e4xtHJpNtu1Oa+HjnBqisaeL5yHDSKj 9noQghUdX47IIdmnD+8EIq7MnaIu8ZZTE5vYcjRLAv1UyP4T/qAVMuVTu9uraCnu S0JNRxMqPFQmhhbDUN/RoTwQujnuEnox9toim+vBiRa+jdqv0r7job0ylsQvJmsj mahZNonun40vYi1ioI5SnfdnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3p96Ax LE6crALUibNaxPBxg9NEMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk X1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt2fhJbcNY4EfmLkJ5D7Z3f2t10yqwKRV4UVI2t2gFjZIPU8vEEmhP Iof20XCNsnt7FaQ4Zc4hM/NR0SG+kdsjjAeA4emwPdIaFdkSnhgpOl66AJ8wkPuN r1i8eDbyU7qmXhBI3IcdectKnfOocRBCwBG1AGNP1acrkDpcGU75q/fOPszuTutR Wz1tflNnq4y6HZ2tw2n3R6B88GfJk4oMSfVkeE584NskbP2S459zj55VTXg8WhU+ u62eezK6t0luQY2hCa4FOeZ/6LamMvmgw/0odDtwr5rRaIM9XdNbqdS/RX8h3s1p XpxdjlL8g7W6o/Ty1hHA4SHHFLHJQwC+ -----END CERTIFICATE-----Generated at Thu Jul 3 21:00:12 2025 by rpki-client