$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: hBHz7tr9i6485Tm0TS6N9FP98gQUWZdqfCcfKr5yJnA= Subject key identifier: A7:26:D5:20:BB:19:57:29:92:CD:DE:A2:2C:67:E3:C9:B1:0F:93:03 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 03A8 Signing time: Sun 29 Jun 2025 00:19:54 +0000 Manifest this update: Sun 29 Jun 2025 00:19:53 +0000 Manifest next update: Sun 06 Jul 2025 00:19:53 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: YbP3UhxPEsDJYLTeF8TOdD6GKl9h4fVIZjVxSJFi5ao=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ctAElc1BM1zI8owbq6eyFwFyuzNUp7IAey45t5f8jpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Jun 29 00:19:53 2025 GMT Not After : Jul 6 00:19:53 2025 GMT Subject: CN=686086aa-71f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:12:fd:0e:b0:bf:45:a2:26:2e:d3:8c:4a: 8b:bf:5d:10:ee:5d:8d:55:c6:22:67:78:ae:9f:bb: 0e:51:2e:98:9c:52:81:cb:c1:d2:1b:84:69:46:8c: 21:de:1a:4f:d5:c4:77:3d:04:97:18:86:2f:38:16: 07:c2:95:32:17:f3:f4:24:1f:f1:bd:5a:86:30:b8: d8:c0:24:e6:f0:76:f3:2b:64:a5:bf:86:c8:c9:f3: ad:fd:dd:d0:99:14:92:75:f4:e2:1e:68:2a:76:3f: 82:59:a8:99:51:09:36:97:3a:6b:6a:b6:01:f1:1b: 54:cc:c8:a0:2b:98:1e:5b:64:7a:32:99:d1:b5:75: 6a:28:61:51:55:ef:a1:51:1b:17:cd:35:d4:19:ba: 17:4b:77:29:86:d8:a8:6d:4e:11:2d:08:80:b3:f6: 88:39:e6:26:02:43:fd:38:ab:ef:96:88:b2:df:87: 87:82:a7:dc:8d:63:8e:ba:b5:0a:3c:a3:ca:28:db: 3f:16:19:93:ee:b4:85:be:91:d8:b6:0f:e4:70:51: 31:5c:46:df:e5:54:26:5f:f5:22:c5:f3:4e:32:da: d9:47:ca:51:24:fd:98:4a:a2:c1:8b:56:32:a9:58: c8:c6:b2:42:f3:6f:9d:4c:87:8f:9c:d0:9b:e4:06: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:D5:20:BB:19:57:29:92:CD:DE:A2:2C:67:E3:C9:B1:0F:93:03 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bd:09:ff:b8:ff:20:6f:b1:a4:b1:14:b3:e4:2a:ab:0c:86: 13:ae:0f:a0:66:7b:7c:4a:5a:04:f8:8e:b2:cb:d2:eb:2a:b0: 90:2a:af:b6:b3:f8:db:c1:d9:6f:eb:da:97:88:a5:64:08:03: c2:ad:97:91:e9:37:a8:95:22:56:9f:f6:32:cb:0d:97:86:47: a8:c1:2a:96:9c:a9:c4:cf:78:e4:74:cf:53:2f:c2:0a:a5:98: 93:c8:fb:51:9c:c4:76:31:80:41:33:a7:d2:9f:07:6a:a0:f9: 0e:55:a2:de:9a:48:20:7e:07:08:e6:00:96:3c:52:92:45:8a: 6a:34:58:fa:80:1d:22:8a:27:6b:d6:49:d5:03:94:cd:5f:9c: a6:cf:2f:40:32:e2:94:2e:21:3d:2b:59:a9:b5:0d:40:53:ce: 5a:45:d4:16:db:f4:94:ee:61:8d:83:6e:05:f3:95:7f:53:96: 81:0c:88:0c:5a:7b:de:b6:23:e4:de:1a:38:d6:80:49:dc:74: 96:57:1e:8b:88:75:d2:6c:98:87:54:38:84:b9:c4:6a:ce:f6: f8:31:51:5e:f2:d3:63:5e:52:8e:58:06:79:f6:8e:f4:35:3c: 35:d7:be:eb:c5:44:7d:3f:98:cb:c2:56:22:d5:ab:ab:e2:e9: 89:3a:b5:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUwNjI5MDAxOTUzWhcNMjUwNzA2MDAxOTUzWjAYMRYwFAYD VQQDEw02ODYwODZhYS03MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUcS/Q6wv0WiJi7TjEqLv10Q7l2NVcYiZ3iun7sOUS6YnFKBy8HSG4RpRowh 3hpP1cR3PQSXGIYvOBYHwpUyF/P0JB/xvVqGMLjYwCTm8HbzK2Slv4bIyfOt/d3Q mRSSdfTiHmgqdj+CWaiZUQk2lzprarYB8RtUzMigK5geW2R6MpnRtXVqKGFRVe+h URsXzTXUGboXS3cphtiobU4RLQiAs/aIOeYmAkP9OKvvloiy34eHgqfcjWOOurUK PKPKKNs/FhmT7rSFvpHYtg/kcFExXEbf5VQmX/UixfNOMtrZR8pRJP2YSqLBi1Yy qVjIxrJC82+dTIePnNCb5Aaj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcm1SC7 GVcpks3eoixn48mxD5MDMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBvQn/uP8gb7GksRSz5CqrDIYTrg+gZnt8SloE+I6yy9LrKrCQKq+2 s/jbwdlv69qXiKVkCAPCrZeR6TeolSJWn/Yyyw2XhkeowSqWnKnEz3jkdM9TL8IK pZiTyPtRnMR2MYBBM6fSnwdqoPkOVaLemkggfgcI5gCWPFKSRYpqNFj6gB0iiidr 1knVA5TNX5ymzy9AMuKULiE9K1mptQ1AU85aRdQW2/SU7mGNg24F85V/U5aBDIgM WnvetiPk3ho41oBJ3HSWVx6LiHXSbJiHVDiEucRqzvb4MVFe8tNjXlKOWAZ59o70 NTw1177rxUR9P5jLwlYi1aur4umJOrX5 -----END CERTIFICATE-----Generated at Sun Jun 29 17:01:17 2025 by rpki-client