$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: FLmKcRSMXZd3c1GJc7olLXHq95btSxcSJlkwRJ/DpIk= Subject key identifier: F9:8A:17:62:18:5C:FE:AE:37:89:78:72:A7:3B:27:F5:D9:12:52:43 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 260B Signing time: Fri 04 Jul 2025 15:55:15 +0000 Manifest this update: Fri 04 Jul 2025 15:55:15 +0000 Manifest next update: Fri 11 Jul 2025 15:55:15 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: /7uzmNCPwwx6EF3bjkQVoX+yfzTJguxcaRC4vqbf7WA=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9762 (0x2622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Jul 4 15:55:15 2025 GMT Not After : Jul 11 15:55:15 2025 GMT Subject: CN=6867f963-323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:b0:2e:9c:24:30:d2:29:1f:e4:0f:1b:b8: a5:61:38:e4:34:98:7b:0a:93:ac:a1:53:55:0d:2f: 76:ad:d4:8c:0d:0d:6f:39:2b:88:c8:3a:68:3d:9e: 6a:0f:40:20:a1:a4:d0:34:5f:6a:55:04:ec:23:8e: 50:ea:eb:e9:e0:5d:98:00:a0:8b:40:f8:e6:f7:f1: 26:f3:a2:f8:60:41:5d:79:93:1c:ec:b2:81:e5:7e: e1:ab:9e:98:f9:cc:9c:c5:28:37:23:89:27:f6:a8: f6:49:51:d2:67:d9:a6:f6:1b:14:bc:c9:6b:3e:c0: 6a:4f:ff:99:26:93:58:f3:f0:c8:d2:9c:e1:83:75: 49:19:3e:40:4a:3e:41:10:37:4e:20:8e:25:9c:85: ae:88:44:ec:cf:f6:e5:02:1f:39:b2:c5:e8:2b:79: b5:fd:ea:b2:af:90:17:51:c0:72:f8:99:5f:9e:0f: b7:67:ac:ae:ae:6f:28:c4:46:9e:90:c3:b9:65:74: 46:f9:41:79:53:c8:e8:64:0b:51:c1:9b:21:70:50: 80:9c:cc:c6:55:00:8b:65:ec:aa:b2:f7:57:02:22: cb:37:4a:78:f6:47:25:a6:f6:a2:5f:d2:f0:8f:16: 2a:f1:81:2f:12:1f:c3:35:0a:b1:d5:a5:07:59:95: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8A:17:62:18:5C:FE:AE:37:89:78:72:A7:3B:27:F5:D9:12:52:43 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f9:8b:f3:8f:9e:d5:0a:36:20:ea:c9:72:6e:f7:9b:c0:48: 8b:17:3b:fe:9a:43:e6:2d:1f:09:7a:a3:c7:26:09:b7:e0:8a: f1:34:6b:5a:9c:08:04:cc:32:8d:30:67:64:d0:77:73:aa:77: 9f:3d:f2:a2:88:6f:07:e8:34:b2:9f:3a:05:5a:27:36:88:79: 06:60:ed:bc:9b:a3:27:ef:85:a2:cf:1f:f4:d2:bc:79:28:44: 93:92:6f:8c:24:0e:0d:5d:8b:6a:6a:39:51:47:1e:50:7b:f2: d7:29:b9:c4:e8:36:7d:f7:2a:f7:3a:10:51:4d:eb:12:6c:00: 60:57:83:37:02:f6:b0:37:35:71:56:af:5c:eb:f5:90:6f:ff: 7e:a6:06:15:59:82:40:af:47:04:5a:da:24:03:54:ef:dd:6e: 93:b8:3e:5b:36:25:5d:67:e4:17:fe:83:93:b7:87:2a:e9:72: aa:82:c3:c6:a1:a5:8e:1b:2e:80:3b:2d:29:00:5c:bb:f4:45: 1d:bd:f2:0d:fb:0d:58:82:27:11:9b:d7:9b:a4:a4:55:f4:3b: 0f:45:3c:dc:f5:36:e8:f7:96:40:1d:39:e1:dd:cd:ac:0d:0d: 68:b4:ac:b2:bd:48:38:71:b8:30:be:f3:cb:90:d5:93:9c:0e: c5:37:a5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUwNzA0MTU1NTE1WhcNMjUwNzExMTU1NTE1WjAYMRYwFAYD VQQDEw02ODY3Zjk2My0zMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvWwLpwkMNIpH+QPG7ilYTjkNJh7CpOsoVNVDS92rdSMDQ1vOSuIyDpoPZ5q D0AgoaTQNF9qVQTsI45Q6uvp4F2YAKCLQPjm9/Em86L4YEFdeZMc7LKB5X7hq56Y +cycxSg3I4kn9qj2SVHSZ9mm9hsUvMlrPsBqT/+ZJpNY8/DI0pzhg3VJGT5ASj5B EDdOII4lnIWuiETsz/blAh85ssXoK3m1/eqyr5AXUcBy+Jlfng+3Z6yurm8oxEae kMO5ZXRG+UF5U8joZAtRwZshcFCAnMzGVQCLZeyqsvdXAiLLN0p49kclpvaiX9Lw jxYq8YEvEh/DNQqx1aUHWZXAXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmKF2IY XP6uN4l4cqc7J/XZElJDMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3+Yvzj57VCjYg6slybvebwEiLFzv+mkPmLR8JeqPHJgm34IrxNGta nAgEzDKNMGdk0HdzqnefPfKiiG8H6DSynzoFWic2iHkGYO28m6Mn74Wizx/00rx5 KESTkm+MJA4NXYtqajlRRx5Qe/LXKbnE6DZ99yr3OhBRTesSbABgV4M3AvawNzVx Vq9c6/WQb/9+pgYVWYJAr0cEWtokA1Tv3W6TuD5bNiVdZ+QX/oOTt4cq6XKqgsPG oaWOGy6AOy0pAFy79EUdvfIN+w1YgicRm9ebpKRV9DsPRTzc9Tbo95ZAHTnh3c2s DQ1otKyyvUg4cbgwvvPLkNWTnA7FN6Xg -----END CERTIFICATE-----Generated at Sat Jul 5 10:48:09 2025 by rpki-client