$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: YtnE3BBPohh24sUrdg3MpVtyZsdSa6FRy9WHb1iasNI= Subject key identifier: 5E:C1:6F:33:3D:9F:92:36:45:11:F0:BA:93:F8:29:CE:B4:94:FE:18 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 033F Signing time: Tue 01 Jul 2025 01:39:12 +0000 Manifest this update: Tue 01 Jul 2025 01:39:11 +0000 Manifest next update: Tue 08 Jul 2025 01:39:11 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Ie/HvjjncnS1p3zj3i/vUtAX+RMnGocww9sA083Fsbw=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Jul 1 01:39:11 2025 GMT Not After : Jul 8 01:39:11 2025 GMT Subject: CN=68633c3f-1a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:c8:d8:1a:08:c8:94:79:41:69:ec:f3:c9: 6f:82:d8:aa:e1:d8:34:7b:35:4e:da:9d:8d:a0:96: c5:65:a3:88:32:8c:33:31:68:d2:58:63:90:1a:4e: 57:63:4c:ab:36:2c:3b:3b:8b:a7:4d:24:ef:7a:51: df:c4:7b:83:d4:d0:c1:87:81:21:40:fa:11:57:56: 34:5b:82:b6:c8:37:1e:e3:3d:14:ec:f6:b4:5f:a7: 14:03:68:cb:ad:bc:dd:58:ff:86:df:a2:3e:a2:c9: db:77:b0:cc:c0:0b:df:b7:76:83:96:51:c7:bd:57: 13:ae:f6:87:43:52:b6:5c:86:61:ea:7c:4c:96:70: fb:01:52:d2:9c:ae:2a:54:d9:36:ad:b7:73:5d:50: 18:4b:03:4e:56:69:72:07:45:45:c1:ae:18:9c:33: 3d:32:73:5c:d0:11:73:1e:24:f2:a7:2b:01:bb:60: d3:49:bc:3e:2a:ba:d7:e2:c9:b5:46:7e:a8:ae:9c: 58:c0:aa:e3:67:50:d1:43:f8:94:26:2a:ec:86:7e: 1f:b6:eb:c1:b4:da:d9:dc:72:e8:02:51:d8:d4:3e: da:23:ed:c6:5f:5d:aa:f3:40:91:5e:b7:03:f1:66: 44:42:33:6c:55:44:b3:f0:f8:45:9c:d4:18:06:46: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:6F:33:3D:9F:92:36:45:11:F0:BA:93:F8:29:CE:B4:94:FE:18 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b2:9f:10:95:85:3e:ff:5b:51:5d:c7:61:15:f7:8f:6f:52: 3e:15:e0:ef:08:83:89:8a:df:3d:3b:89:15:c4:3f:e2:b4:d6: f1:4f:16:0f:d1:a0:24:c8:85:b9:63:ae:90:8f:61:f8:14:a5: c3:6b:9a:5b:28:d8:d5:2e:b7:de:fb:76:78:1e:a8:bf:01:f1: f0:c0:2a:76:c8:66:44:1d:7d:25:c3:52:d3:34:66:10:5c:d5: 61:cb:c2:cd:1b:96:29:ff:ba:b1:ea:b2:61:b8:89:8e:2b:37: bd:7e:c7:02:69:32:82:19:41:1b:3a:3a:b6:a6:05:12:45:47: 1c:4b:4c:c0:a2:69:d2:e5:29:67:66:9a:e4:0f:e2:6a:29:49: 65:79:90:df:1d:3f:ca:81:b8:1a:6a:de:fa:3d:6a:20:d1:cc: 0c:1f:ca:ad:01:81:dd:b2:d3:0e:1c:64:43:a6:4c:99:ce:19: a2:45:9d:0e:7c:5c:d5:83:26:83:1a:94:df:2c:8c:2c:74:f9: 3a:1f:37:fc:52:28:39:5a:a4:e5:b8:0e:aa:10:5c:c7:df:56: 7c:3f:10:62:74:0d:7c:75:7b:54:c9:6e:1a:67:d7:f1:15:1b: bc:e9:80:f6:ec:0a:29:bb:c5:70:86:c7:2d:09:21:a9:2a:5b: 11:1f:3a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwNzAxMDEzOTExWhcNMjUwNzA4MDEzOTExWjAYMRYwFAYD VQQDEw02ODYzM2MzZi0xYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76HI2BoIyJR5QWns88lvgtiq4dg0ezVO2p2NoJbFZaOIMowzMWjSWGOQGk5X Y0yrNiw7O4unTSTvelHfxHuD1NDBh4EhQPoRV1Y0W4K2yDce4z0U7Pa0X6cUA2jL rbzdWP+G36I+osnbd7DMwAvft3aDllHHvVcTrvaHQ1K2XIZh6nxMlnD7AVLSnK4q VNk2rbdzXVAYSwNOVmlyB0VFwa4YnDM9MnNc0BFzHiTypysBu2DTSbw+KrrX4sm1 Rn6orpxYwKrjZ1DRQ/iUJirshn4ftuvBtNrZ3HLoAlHY1D7aI+3GX12q80CRXrcD 8WZEQjNsVUSz8PhFnNQYBkZmQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7BbzM9 n5I2RRHwupP4Kc60lP4YMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSsp8QlYU+/1tRXcdhFfePb1I+FeDvCIOJit89O4kVxD/itNbxTxYP 0aAkyIW5Y66Qj2H4FKXDa5pbKNjVLrfe+3Z4Hqi/AfHwwCp2yGZEHX0lw1LTNGYQ XNVhy8LNG5Yp/7qx6rJhuImOKze9fscCaTKCGUEbOjq2pgUSRUccS0zAomnS5Sln ZprkD+JqKUlleZDfHT/Kgbgaat76PWog0cwMH8qtAYHdstMOHGRDpkyZzhmiRZ0O fFzVgyaDGpTfLIwsdPk6Hzf8Uig5WqTluA6qEFzH31Z8PxBidA18dXtUyW4aZ9fx FRu86YD27Aopu8VwhsctCSGpKlsRHzpv -----END CERTIFICATE-----Generated at Tue Jul 1 21:51:49 2025 by rpki-client