$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: wqXGIyULzvXQJ2qNBk6Y6fRErn96cLoROYXHgnUxxMM= Subject key identifier: 9C:68:EA:75:0B:AD:95:AC:48:8A:6B:EE:79:25:CF:8A:50:0E:25:D4 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: FF Signing time: Tue 01 Jul 2025 05:42:13 +0000 Manifest this update: Tue 01 Jul 2025 05:42:13 +0000 Manifest next update: Tue 08 Jul 2025 05:42:13 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: YPKAIx0mU2ndll2UzmUkAuj9yT64H7+5YtxwhZMiDIA=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Jul 1 05:42:13 2025 GMT Not After : Jul 8 05:42:13 2025 GMT Subject: CN=68637535-4c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:dc:d7:87:0d:72:d1:71:ac:14:fa:cb:37: 72:51:15:44:13:8e:a6:ca:2f:f3:02:a7:cd:8f:32: 19:5e:93:1c:c9:e4:3c:9a:8a:1e:cd:ee:97:b6:8e: 70:71:e4:d6:38:24:cd:8d:9f:98:96:eb:95:65:50: ea:2a:04:57:71:c2:13:1d:01:0e:f0:a1:5b:ee:e2: df:95:8c:1f:14:88:c0:bf:42:2c:6d:e5:16:58:c5: 04:b7:dc:db:ff:ee:29:3e:c3:4b:bb:5a:86:49:e7: f1:ed:9c:d4:95:29:1b:a9:c5:96:7c:15:3b:9f:92: ac:5e:ff:3a:35:67:27:38:95:f6:1b:11:1b:e3:da: 72:6d:7f:fd:25:e5:39:f4:fc:4b:a1:6a:bf:4d:3d: c5:c3:4d:37:b4:f5:64:6c:1a:a8:aa:0f:7f:75:58: 37:ab:79:90:16:1e:79:60:4c:fa:a9:89:c0:18:de: 49:ec:f9:87:e1:6b:55:ce:95:a8:2e:51:94:8a:49: c0:07:60:51:40:f6:32:d9:84:a7:35:e7:3e:4f:c5: 00:68:de:7a:ff:13:50:1b:61:c7:1d:53:36:40:5c: 86:8d:43:e5:d9:2a:4f:33:56:67:a0:49:77:5d:de: 61:d6:a3:4e:6c:0a:02:a5:c8:c2:c1:56:a0:85:db: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:EA:75:0B:AD:95:AC:48:8A:6B:EE:79:25:CF:8A:50:0E:25:D4 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a2:c4:ab:91:17:83:fc:2a:1b:8f:4d:9d:e7:3c:68:12:88: 79:ce:80:91:47:c3:4d:f4:34:1f:96:3d:c5:e8:7d:9d:57:65: e4:7b:1d:55:cd:d0:5f:4a:f9:1a:ea:e2:7b:d9:2f:62:bc:0d: 6b:b7:de:81:ff:2a:86:0c:da:c9:88:a6:b3:86:10:9d:9e:ea: d7:c9:03:98:dd:47:73:d2:62:50:7d:e1:66:a5:ec:ae:3c:6f: a1:ad:5d:8d:33:ba:00:e0:7b:ae:4e:4f:aa:52:71:27:a3:c4: a4:93:1d:cd:e6:66:c8:32:06:71:cf:9c:8d:15:79:00:1c:08: aa:7c:f0:0a:84:ab:5a:7a:35:26:b0:51:0a:fa:14:58:df:0f: a1:4b:53:e8:83:7b:2f:28:31:af:a1:4c:39:c8:0f:08:29:51: c2:11:8b:0f:4b:a6:f2:84:6a:ae:75:6f:7e:38:60:f3:d7:4d: 92:7c:8d:b5:61:78:ad:b6:ad:12:bc:bc:20:6b:f4:3e:c5:4e: 68:c4:9b:79:19:c9:e8:ad:77:2f:55:ba:79:ec:c4:5a:09:cc: 54:56:6e:d2:11:63:20:0d:07:92:d6:ff:cc:4a:d9:0a:1b:59: 2b:cf:1e:21:49:71:0b:7c:1f:7e:c8:69:e6:9b:d5:eb:68:2e: fc:81:ac:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUwNzAxMDU0MjEzWhcNMjUwNzA4MDU0MjEzWjAYMRYwFAYD VQQDEw02ODYzNzUzNS00YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIzc14cNctFxrBT6yzdyURVEE46myi/zAqfNjzIZXpMcyeQ8mooeze6Xto5w ceTWOCTNjZ+YluuVZVDqKgRXccITHQEO8KFb7uLflYwfFIjAv0IsbeUWWMUEt9zb /+4pPsNLu1qGSefx7ZzUlSkbqcWWfBU7n5KsXv86NWcnOJX2GxEb49pybX/9JeU5 9PxLoWq/TT3Fw003tPVkbBqoqg9/dVg3q3mQFh55YEz6qYnAGN5J7PmH4WtVzpWo LlGUiknAB2BRQPYy2YSnNec+T8UAaN56/xNQG2HHHVM2QFyGjUPl2SpPM1ZnoEl3 Xd5h1qNObAoCpcjCwVaghdsMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxo6nUL rZWsSIpr7nklz4pQDiXUMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAosSrkReD/Cobj02d5zxoEoh5zoCRR8NN9DQflj3F6H2dV2Xkex1V zdBfSvka6uJ72S9ivA1rt96B/yqGDNrJiKazhhCdnurXyQOY3Udz0mJQfeFmpeyu PG+hrV2NM7oA4HuuTk+qUnEno8Skkx3N5mbIMgZxz5yNFXkAHAiqfPAKhKtaejUm sFEK+hRY3w+hS1Pog3svKDGvoUw5yA8IKVHCEYsPS6byhGqudW9+OGDz102SfI21 YXittq0SvLwga/Q+xU5oxJt5GcnorXcvVbp57MRaCcxUVm7SEWMgDQeS1v/MStkK G1krzx4hSXELfB9+yGnmm9XraC78gayl -----END CERTIFICATE-----Generated at Wed Jul 2 14:18:39 2025 by rpki-client