$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: TXGlBUxLHAJ2i/c3XiuPGG05tzbjhZewbQl1FLhLMN4= Subject key identifier: A3:87:A8:E8:12:8F:D4:1C:6D:1A:D4:7D:FF:AD:A1:1B:E1:50:80:E2 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0BF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0BDD Signing time: Wed 02 Jul 2025 19:07:59 +0000 Manifest this update: Wed 02 Jul 2025 19:07:59 +0000 Manifest next update: Wed 09 Jul 2025 19:07:59 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: UycsMmLAIid0gWI+4sR0FDjmmZTOrS7v/SnZzZ/jhSA=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Jul 2 19:07:59 2025 GMT Not After : Jul 9 19:07:59 2025 GMT Subject: CN=6865838f-bf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:97:86:69:77:19:56:2a:48:d9:d4:e3:c5: da:d5:9d:85:6a:bf:e1:10:af:35:78:43:f2:d8:46: dd:0c:73:9e:4a:75:bc:b1:b7:2d:a0:bc:ef:af:1e: a4:3e:35:1a:54:69:e7:93:6f:a9:8e:21:46:15:97: 4f:3b:f1:06:8d:af:56:22:03:32:c4:46:5c:15:da: fc:e5:69:8b:65:42:5f:cd:8f:a9:48:f3:ac:ea:d1: 2d:77:0f:2a:25:b1:c8:43:9d:01:14:88:52:67:6d: 26:9c:8e:1f:fb:4b:80:6a:53:f5:f1:cd:0e:ee:bd: 63:28:ee:98:76:e6:cd:d7:27:14:15:f7:dc:b0:44: 81:7d:cc:72:71:81:db:01:ff:f7:01:07:95:fc:3a: 1e:26:cd:ce:a5:32:5e:13:d9:a9:8c:32:d5:f0:75: 84:c9:47:13:bf:c6:cf:77:cc:7e:4f:02:57:ad:c3: 5b:aa:ff:54:38:fa:d3:8a:1a:57:d2:68:c7:b8:5c: 30:d4:88:45:7e:33:21:e9:f1:8a:13:c7:16:a7:83: 3f:67:f7:60:71:79:19:36:28:4b:35:cf:3a:d0:7d: d6:2e:2f:77:13:79:49:ea:5e:6c:52:05:75:3f:7f: 51:1a:97:34:9e:45:0d:4d:88:27:4c:33:48:33:b5: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:A8:E8:12:8F:D4:1C:6D:1A:D4:7D:FF:AD:A1:1B:E1:50:80:E2 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fa:66:a0:66:aa:44:79:c2:1c:ce:e5:cb:1b:f7:6f:15:f3: 70:d4:7f:d0:09:e9:b3:84:8c:b4:1e:3c:26:3d:f6:b1:b6:de: a5:27:aa:38:d2:e2:62:52:a1:78:31:76:29:88:ce:56:43:70: 7b:ff:b0:c1:af:a2:a5:fb:3e:84:32:a8:7b:6c:07:1c:2f:ac: cc:77:c5:eb:a0:40:af:b3:a0:a2:02:85:ff:ae:17:8d:e7:cc: ee:2c:a4:d4:fa:63:6c:e0:c8:ee:93:1f:19:22:4e:0b:2b:38: c3:6d:bf:e0:30:63:c9:ff:e3:af:fb:5d:51:5e:8a:8e:81:dc: 10:5b:a7:d2:11:4c:fd:4c:10:0a:e8:28:56:27:3b:c3:0f:5d: 5c:f8:1a:37:1b:13:04:55:89:a4:f4:50:24:c1:6f:10:5e:96: cd:cd:e6:99:eb:08:19:13:5a:e6:9d:91:28:4f:6e:c0:3e:5f: 57:14:0f:d6:7e:fa:81:6e:fa:43:1e:cf:29:37:70:8c:2f:e9: 95:ef:68:4b:f2:87:87:3e:5e:4a:7e:21:29:63:ac:c8:82:7e: 6a:af:13:db:a3:2e:0e:4d:e5:46:0e:b4:8c:22:f4:b8:af:0b: da:b4:d8:7b:6c:f3:27:ad:a3:a1:7c:ef:3f:74:91:b4:19:cd: 26:0f:4f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUwNzAyMTkwNzU5WhcNMjUwNzA5MTkwNzU5WjAYMRYwFAYD VQQDEw02ODY1ODM4Zi1iZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JiXhml3GVYqSNnU48Xa1Z2Far/hEK81eEPy2EbdDHOeSnW8sbctoLzvrx6k PjUaVGnnk2+pjiFGFZdPO/EGja9WIgMyxEZcFdr85WmLZUJfzY+pSPOs6tEtdw8q JbHIQ50BFIhSZ20mnI4f+0uAalP18c0O7r1jKO6YdubN1ycUFffcsESBfcxycYHb Af/3AQeV/DoeJs3OpTJeE9mpjDLV8HWEyUcTv8bPd8x+TwJXrcNbqv9UOPrTihpX 0mjHuFww1IhFfjMh6fGKE8cWp4M/Z/dgcXkZNihLNc860H3WLi93E3lJ6l5sUgV1 P39RGpc0nkUNTYgnTDNIM7XFHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOHqOgS j9QcbRrUff+toRvhUIDiMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv+magZqpEecIczuXLG/dvFfNw1H/QCemzhIy0HjwmPfaxtt6lJ6o4 0uJiUqF4MXYpiM5WQ3B7/7DBr6Kl+z6EMqh7bAccL6zMd8XroECvs6CiAoX/rheN 58zuLKTU+mNs4Mjukx8ZIk4LKzjDbb/gMGPJ/+Ov+11RXoqOgdwQW6fSEUz9TBAK 6ChWJzvDD11c+Bo3GxMEVYmk9FAkwW8QXpbNzeaZ6wgZE1rmnZEoT27APl9XFA/W fvqBbvpDHs8pN3CML+mV72hL8oeHPl5KfiEpY6zIgn5qrxPboy4OTeVGDrSMIvS4 rwvatNh7bPMnraOhfO8/dJG0Gc0mD0+b -----END CERTIFICATE-----Generated at Wed Jul 2 23:23:17 2025 by rpki-client