$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: olgFD2YKsrJN492X35oVQbo+q94WhCvs3+U+8HhGDV8= Subject key identifier: B6:3B:12:48:12:8B:CB:44:C6:20:CA:B8:33:8F:61:D6:99:4A:DE:D0 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 012E Signing time: Thu 03 Jul 2025 04:40:01 +0000 Manifest this update: Thu 03 Jul 2025 04:40:00 +0000 Manifest next update: Thu 10 Jul 2025 04:40:00 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: 7mHlVwMD4CyhNiy8UKmbMhmnZ1X8t5QTZo7fzKn7d8E=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: WhOLdJmONFcVyaVlMrHX886HXRKh0RLcsl55SUDqRa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Jul 3 04:40:00 2025 GMT Not After : Jul 10 04:40:00 2025 GMT Subject: CN=686609a0-780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:be:aa:74:3d:c9:94:96:36:fd:b0:16:12: d8:e5:99:25:de:53:99:fd:d4:c8:13:99:95:33:b9: 89:43:aa:2a:0b:c5:a7:ac:26:48:bd:91:ed:f5:e6: c5:a5:57:4d:b2:e7:03:97:e3:0b:90:3a:50:0b:6e: a7:88:ce:c5:d7:d0:4a:0f:56:17:ca:20:0d:26:f6: 15:29:fe:59:e3:7a:75:9f:f1:66:57:8f:a5:52:66: 24:d8:29:35:ad:a7:9c:f3:4b:45:e1:01:1a:30:b8: 8d:e6:13:98:8d:57:f9:e7:05:d7:37:2b:ab:f3:c8: 5b:75:c8:37:04:16:ee:d4:c4:d4:bb:99:fa:06:70: 66:29:2d:8f:a0:02:d8:eb:79:e0:66:c6:10:8c:ef: 85:30:cd:db:1f:49:5a:a2:b8:6e:89:6e:d3:fa:00: c3:66:5d:d2:8d:fb:f7:eb:4a:82:82:e6:e6:b3:40: 4f:11:32:9f:14:0d:bc:38:df:11:bc:55:45:c1:fc: 40:34:58:85:ef:28:5b:a2:5c:79:8b:c4:6d:4c:de: 52:f1:05:82:15:73:91:b2:17:c0:e1:c8:ba:5d:95: 9f:1e:33:9b:32:2a:b4:d3:86:a6:cf:4a:79:12:29: 48:58:89:54:d4:91:91:e0:ee:0a:e1:a6:88:e4:b1: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3B:12:48:12:8B:CB:44:C6:20:CA:B8:33:8F:61:D6:99:4A:DE:D0 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2e:73:86:6f:1b:22:81:24:c4:78:ec:3d:a2:f6:a1:6e:d0: fb:95:f6:fd:d7:af:a6:f6:7c:6c:77:82:4a:03:5c:ef:73:22: 81:4e:ac:cc:06:29:f3:4a:19:9b:99:87:2d:53:22:1c:00:02: 9f:83:fc:53:59:bf:d4:b7:bc:57:5f:31:67:84:15:3e:a2:c1: fa:3e:51:48:ea:4f:94:53:27:01:29:8c:7d:5a:60:13:65:e7: 93:8a:07:66:f1:ae:c9:6c:aa:24:5f:fa:73:b2:45:c6:0b:d2: 69:9c:c7:cc:28:a6:2e:41:5a:f7:b1:8d:b8:88:8d:ce:03:fe: 3d:29:35:ab:cc:66:75:97:ab:5c:ab:d7:cd:53:06:51:e8:bb: 29:5d:9d:5c:37:9c:38:c2:90:a4:46:8d:03:43:02:17:99:c9: 12:64:ec:0d:1f:a1:63:54:e0:11:3d:78:18:4d:e7:27:3c:1a: b4:e5:a5:b1:42:1d:3b:8a:54:99:ab:89:be:b8:20:26:d0:94: 62:bd:fc:7d:15:64:e2:ae:ba:03:fc:95:ca:fd:23:fe:53:9b: 2c:c4:fb:a4:ee:b9:18:12:a7:a4:78:0d:be:df:63:d0:75:08: 42:21:d4:bc:ab:7e:ff:e1:53:89:61:30:20:95:85:ac:ef:6f: 8e:fc:7a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUwNzAzMDQ0MDAwWhcNMjUwNzEwMDQ0MDAwWjAYMRYwFAYD VQQDEw02ODY2MDlhMC03ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwO+qnQ9yZSWNv2wFhLY5Zkl3lOZ/dTIE5mVM7mJQ6oqC8WnrCZIvZHt9ebF pVdNsucDl+MLkDpQC26niM7F19BKD1YXyiANJvYVKf5Z43p1n/FmV4+lUmYk2Ck1 raec80tF4QEaMLiN5hOYjVf55wXXNyur88hbdcg3BBbu1MTUu5n6BnBmKS2PoALY 63ngZsYQjO+FMM3bH0laorhuiW7T+gDDZl3Sjfv360qCgubms0BPETKfFA28ON8R vFVFwfxANFiF7yhbolx5i8RtTN5S8QWCFXORshfA4ci6XZWfHjObMiq004amz0p5 EilIWIlU1JGR4O4K4aaI5LGlWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY7EkgS i8tExiDKuDOPYdaZSt7QMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBALnOGbxsigSTEeOw9ovahbtD7lfb916+m9nxsd4JKA1zvcyKBTqzM BinzShmbmYctUyIcAAKfg/xTWb/Ut7xXXzFnhBU+osH6PlFI6k+UUycBKYx9WmAT ZeeTigdm8a7JbKokX/pzskXGC9JpnMfMKKYuQVr3sY24iI3OA/49KTWrzGZ1l6tc q9fNUwZR6LspXZ1cN5w4wpCkRo0DQwIXmckSZOwNH6FjVOARPXgYTecnPBq05aWx Qh07ilSZq4m+uCAm0JRivfx9FWTirroD/JXK/SP+U5ssxPuk7rkYEqekeA2+32PQ dQhCIdS8q37/4VOJYTAglYWs72+O/HpX -----END CERTIFICATE-----Generated at Thu Jul 3 18:01:05 2025 by rpki-client