$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: PsCTRqdVq1UWeCNDSZJe/dsiwABtX7IcJ2LjGdVfyvI= Subject key identifier: C9:56:04:D7:AD:97:76:FC:7E:C9:DB:25:0D:45:76:30:D4:EB:80:55 Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0AF6 Signing time: Sat 28 Jun 2025 19:04:47 +0000 Manifest this update: Sat 28 Jun 2025 19:04:47 +0000 Manifest next update: Sat 05 Jul 2025 19:04:47 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: xOYBHF0/L0akrvejFBQtwqq/eNZABjMxPLL9WQwqZ3s=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Jun 28 19:04:47 2025 GMT Not After : Jul 5 19:04:47 2025 GMT Subject: CN=68603ccf-cf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:93:1b:b1:07:7f:7e:c6:04:96:4e:96:ae: ed:ee:7f:37:29:0b:42:fe:50:b5:d7:ac:3d:47:bf: 6d:38:a0:22:f2:db:d7:e1:21:a2:8c:13:e8:f4:2e: 79:1a:2b:e6:1f:d4:e9:88:ab:e9:46:f5:5f:e7:f2: 2a:5a:7a:cc:6a:b7:c6:93:a7:da:46:08:f3:63:d1: 1a:f0:58:41:3f:1e:32:5e:cc:18:59:d9:89:69:28: b3:58:fd:01:73:6b:ae:16:a6:df:a9:fe:09:17:aa: 61:cd:6c:09:d6:c8:e0:d2:e5:f0:71:b4:49:51:75: be:06:8e:45:ec:64:20:02:f8:34:55:7c:d2:3c:5d: 65:4a:c2:e2:f9:b3:c3:4e:87:23:5b:27:dd:cc:f1: 5a:16:03:f1:de:2f:6d:b6:eb:25:39:ea:28:92:61: bb:27:71:e6:e3:7a:4d:2e:b2:df:62:c1:d6:c0:4d: c6:b1:6e:f8:81:23:11:ea:d1:cb:55:42:4b:bb:f9: 4c:58:90:93:00:ea:79:22:7e:23:d3:76:bb:ac:93: c4:0d:c5:43:d6:dc:80:f5:f6:ef:d2:1d:71:85:0f: 98:16:39:e2:66:9a:3f:ab:9d:a1:2d:7f:44:bb:f5: d4:3f:33:29:3e:e0:15:eb:45:70:7b:b2:71:cb:c3: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:56:04:D7:AD:97:76:FC:7E:C9:DB:25:0D:45:76:30:D4:EB:80:55 X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:41:8d:39:b0:df:2e:16:e9:df:fe:2c:bb:cc:0e:eb:b8: 21:51:3c:03:8a:45:6e:fd:87:33:5d:0e:4d:55:90:a6:46:89: 2a:30:4c:92:3e:3f:8d:30:94:de:8b:2a:ca:86:6a:ca:41:3a: 8b:da:ac:6a:9e:bb:61:07:f7:23:dd:24:05:c6:2e:e7:62:51: 8d:4b:66:8f:ee:9f:8f:73:0b:70:91:ac:07:cf:00:54:4b:a4: a4:83:d8:dc:80:89:e5:8f:8f:91:9c:3b:73:a8:77:5c:62:c8: db:d5:7b:02:fa:cd:e0:b0:fd:45:aa:cc:54:85:04:5e:09:2e: c0:d6:66:dc:de:9a:c5:ff:b8:c2:7f:72:51:c5:8c:56:aa:0f: 97:75:90:78:c3:37:90:5a:f0:bf:69:45:48:7b:b9:3b:59:74: 80:0a:b3:30:a0:a2:41:d8:c5:54:a1:71:f7:f9:e8:86:09:ab: 70:e0:d5:2a:62:16:34:4f:c9:77:5e:9c:ff:bd:9c:81:3f:90: ee:e6:ea:16:3e:bc:2a:fc:f1:ab:09:3c:29:c2:72:4f:ba:5d: 98:ac:d9:27:77:64:a2:f5:0e:0d:b3:43:4a:e9:40:da:9a:42: d4:62:63:b6:30:a2:e2:1b:69:18:f2:08:c7:d6:b1:5a:c2:42: 8d:97:5e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUwNjI4MTkwNDQ3WhcNMjUwNzA1MTkwNDQ3WjAYMRYwFAYD VQQDEw02ODYwM2NjZi1jZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuSTG7EHf37GBJZOlq7t7n83KQtC/lC116w9R79tOKAi8tvX4SGijBPo9C55 GivmH9TpiKvpRvVf5/IqWnrMarfGk6faRgjzY9Ea8FhBPx4yXswYWdmJaSizWP0B c2uuFqbfqf4JF6phzWwJ1sjg0uXwcbRJUXW+Bo5F7GQgAvg0VXzSPF1lSsLi+bPD TocjWyfdzPFaFgPx3i9ttuslOeookmG7J3Hm43pNLrLfYsHWwE3GsW74gSMR6tHL VUJLu/lMWJCTAOp5In4j03a7rJPEDcVD1tyA9fbv0h1xhQ+YFjniZpo/q52hLX9E u/XUPzMpPuAV60Vwe7Jxy8N4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlWBNet l3b8fsnbJQ1FdjDU64BVMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jkGNObDfLhbp3/4su8wO67ghUTwDikVu/YczXQ5NVZCmRokqMEyS Pj+NMJTeiyrKhmrKQTqL2qxqnrthB/cj3SQFxi7nYlGNS2aP7p+PcwtwkawHzwBU S6Skg9jcgInlj4+RnDtzqHdcYsjb1XsC+s3gsP1FqsxUhQReCS7A1mbc3prF/7jC f3JRxYxWqg+XdZB4wzeQWvC/aUVIe7k7WXSACrMwoKJB2MVUoXH3+eiGCatw4NUq YhY0T8l3Xpz/vZyBP5Du5uoWPrwq/PGrCTwpwnJPul2YrNknd2Si9Q4Ns0NK6UDa mkLUYmO2MKLiG2kY8gjH1rFawkKNl16O -----END CERTIFICATE-----Generated at Mon Jun 30 15:17:44 2025 by rpki-client