$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: RO1YY9a1YV2AT7VzJ3osn/Jk9euGk58TSiN5U5GHYJU= Subject key identifier: D0:79:63:D4:26:C2:F0:6B:41:3F:3D:9B:48:20:0F:5E:83:99:A1:85 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 6F Signing time: Thu 03 Jul 2025 07:11:00 +0000 Manifest this update: Thu 03 Jul 2025 07:10:59 +0000 Manifest next update: Thu 10 Jul 2025 07:10:59 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: MLK1bEu8EzPa6UGaeVOktYNcRh03zW4Ez43ybvOfL+c=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 3 07:10:59 2025 GMT Not After : Jul 10 07:10:59 2025 GMT Subject: CN=68662d04-b81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:f5:97:57:f6:a8:68:25:70:2a:9a:63:b6: 6d:98:aa:35:c4:22:8f:e8:ce:96:db:e6:15:9e:8a: 63:6b:4b:6d:b5:4a:ba:b3:44:40:9d:e3:e7:6b:f5: d3:62:76:90:d5:02:1d:92:ef:93:71:3d:1e:8f:f6: 51:ea:54:1b:25:01:b7:6a:da:63:93:07:22:dc:94: 65:98:8a:f1:3c:a2:45:e9:8c:68:f4:7b:eb:a7:a3: 55:18:e9:ad:79:35:1d:51:83:b2:ce:95:ec:8a:d9: 20:98:34:30:71:fa:9f:b8:83:88:e9:0b:c6:ec:15: e1:d3:df:71:b0:06:7f:35:51:ff:35:00:31:81:7d: 86:87:1a:18:7e:c7:04:e6:7f:0c:be:da:58:1d:99: e7:c2:b5:de:a5:50:c4:3d:c6:f3:36:10:40:ae:7c: b1:c9:f7:38:b2:ec:8b:df:94:dd:e4:76:23:a2:8a: 7e:1f:55:bd:d5:e2:84:d5:ae:8f:a8:8b:cf:cc:54: 51:88:1a:d9:d8:17:95:1b:a3:7f:db:86:bd:4e:ec: 9b:9c:64:7d:ed:4a:d2:f2:f1:e0:01:ac:cc:bd:cc: 66:3d:11:60:27:59:ff:05:88:d3:86:4f:a0:d2:31: bc:49:db:8f:84:38:5c:e5:7a:ad:17:fc:f5:ff:ae: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:63:D4:26:C2:F0:6B:41:3F:3D:9B:48:20:0F:5E:83:99:A1:85 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:10:97:e5:02:98:37:ec:fc:03:93:43:fb:ff:72:45:ca: 86:dc:30:32:32:e1:f3:f5:28:62:65:39:55:5d:0e:af:83:8c: d6:64:e4:21:d0:eb:42:99:b7:4d:b1:5e:84:38:76:39:fb:d5: cc:02:23:19:ea:de:4f:7e:5d:fc:eb:f2:2b:5c:54:cd:8b:6a: ec:f3:31:2b:79:bd:d0:01:79:55:1e:f0:3e:e8:5c:c4:8f:4a: 4c:3d:c5:b6:e2:22:61:62:b5:e1:15:60:36:c8:98:5d:72:ce: ea:d9:d0:74:c0:42:22:35:bb:e4:2b:ad:9d:11:b0:c8:25:43: 2b:d7:64:46:56:6f:d6:4b:40:14:5d:e6:cd:2b:08:a9:b7:d9: b2:93:24:ec:b9:22:08:0f:b9:bb:e6:c7:1c:28:e7:b5:d1:67: d2:06:e9:8b:aa:76:1f:e9:e7:6d:fa:25:34:35:75:30:35:04: e1:1a:b6:b0:95:9b:d4:20:29:31:e4:7c:ca:64:e9:4a:59:3c: ec:ba:2c:94:1f:5c:96:bb:2d:f2:44:f7:71:95:45:87:21:a4: 24:8b:4c:c5:06:98:65:c4:79:de:42:6b:38:75:df:a9:73:35: de:93:83:b4:3a:6d:37:d4:16:15:83:a5:8f:87:c9:b8:7f:80: c7:5d:e5:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA3MDMwNzEwNTlaFw0yNTA3MTAwNzEwNTlaMBgxFjAUBgNV BAMTDTY4NjYyZDA0LWI4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqmPWXV/aoaCVwKppjtm2YqjXEIo/ozpbb5hWeimNrS221SrqzRECd4+dr9dNi dpDVAh2S75NxPR6P9lHqVBslAbdq2mOTByLclGWYivE8okXpjGj0e+uno1UY6a15 NR1Rg7LOleyK2SCYNDBx+p+4g4jpC8bsFeHT33GwBn81Uf81ADGBfYaHGhh+xwTm fwy+2lgdmefCtd6lUMQ9xvM2EECufLHJ9ziy7IvflN3kdiOiin4fVb3V4oTVro+o i8/MVFGIGtnYF5Ubo3/bhr1O7JucZH3tStLy8eABrMy9zGY9EWAnWf8FiNOGT6DS MbxJ24+EOFzleq0X/PX/rj49AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0Hlj1CbC 8GtBPz2bSCAPXoOZoYUwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABpEEJflApg37PwDk0P7/3JFyobcMDIy4fP1KGJlOVVdDq+DjNZk5CHQ 60KZt02xXoQ4djn71cwCIxnq3k9+Xfzr8itcVM2LauzzMSt5vdABeVUe8D7oXMSP Skw9xbbiImFiteEVYDbImF1yzurZ0HTAQiI1u+QrrZ0RsMglQyvXZEZWb9ZLQBRd 5s0rCKm32bKTJOy5IggPubvmxxwo57XRZ9IG6Yuqdh/p5236JTQ1dTA1BOEatrCV m9QgKTHkfMpk6UpZPOy6LJQfXJa7LfJE93GVRYchpCSLTMUGmGXEed5Cazh136lz Nd6Tg7Q6bTfUFhWDpY+Hybh/gMdd5Rk= -----END CERTIFICATE-----Generated at Thu Jul 3 21:03:38 2025 by rpki-client