$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: MTSWW0A5TJ16y+y09TuPaGVZjxja1eMvOP0B9HrZT48= Subject key identifier: 5C:5C:EB:14:CD:C0:52:6E:56:43:CC:E0:6A:0A:B3:65:77:B2:60:F1 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 073C Signing time: Mon 30 Jun 2025 22:02:57 +0000 Manifest this update: Mon 30 Jun 2025 22:02:57 +0000 Manifest next update: Mon 07 Jul 2025 22:02:57 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: R+m6CUArW1QAmlcyhgntRn01clmX/WjqGVgAWwYwToQ=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Jun 30 22:02:57 2025 GMT Not After : Jul 7 22:02:57 2025 GMT Subject: CN=68630991-cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:80:5c:29:ed:38:e6:2d:2d:f4:99:35:30: bd:9f:e2:58:b5:2a:44:96:71:b2:c1:bd:7b:84:12: 5e:57:09:e6:ad:30:52:ae:8b:a0:99:dd:8c:d5:8b: 8d:e6:f5:83:21:a9:fe:13:91:00:26:92:34:df:38: 9e:a3:3c:54:dd:79:10:b3:84:77:89:f6:72:96:0f: ae:3d:4c:42:c0:4f:1f:8c:29:1c:bc:97:bc:c4:48: 57:72:25:ad:19:7d:f3:26:c1:64:a5:07:82:d9:44: 50:e2:d9:d7:3e:8c:aa:71:9c:80:5b:9d:cd:3d:bd: c7:d0:4e:ef:b7:72:b6:e5:ac:cb:9b:8a:15:52:80: e6:e9:53:22:f4:97:62:ef:23:5e:6d:75:5b:e3:93: 0b:81:14:52:df:8b:25:a1:39:84:f2:29:56:69:d9: fa:23:b5:d1:8f:c3:6a:74:76:14:bd:5b:3a:fd:ed: 1d:84:93:a1:48:aa:66:66:91:5e:8e:14:3f:8b:36: c1:5d:c4:2f:ed:00:65:69:66:d3:ec:37:83:28:53: f8:3d:e7:3f:b8:49:c7:2f:49:82:11:d5:17:65:19: e8:a2:a3:7f:3f:a7:1b:d1:2c:b5:a1:1a:2b:d3:69: 76:24:45:02:0a:b3:2e:9c:7b:21:a3:c5:c8:54:ec: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:EB:14:CD:C0:52:6E:56:43:CC:E0:6A:0A:B3:65:77:B2:60:F1 X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e2:26:98:b8:c2:20:9c:4d:4e:7a:fc:9b:b2:0d:13:2a:ee: c4:17:bb:0a:83:ce:0f:fe:d8:d7:8b:5f:2e:6f:19:9d:c4:7c: 58:dc:95:b6:83:8a:01:87:94:59:6c:c4:d6:59:96:f6:82:fb: 19:a8:f4:32:d7:60:f9:f1:88:53:13:d3:f8:92:96:53:80:b4: 46:7f:3c:69:1e:89:72:05:6f:1f:bc:de:1d:d8:6a:5e:e1:f4: 39:d7:35:89:bf:8b:51:36:01:6e:70:5b:c3:70:32:b4:ba:00: 08:2f:e0:6f:59:97:0d:ff:2d:d0:80:6b:f4:7b:92:79:ec:a0: 49:15:2b:9b:87:cc:56:44:95:3a:0b:de:c2:28:64:8f:5d:ca: 41:dd:3d:63:6a:53:45:38:b1:39:fa:d8:89:d4:6d:61:a4:d0: c1:b2:2e:c0:0c:10:f9:10:31:7b:1b:59:e3:20:57:98:08:00: 54:fd:02:58:33:4c:be:ae:f5:3e:be:f6:ef:a3:16:28:14:1b: f6:83:5e:32:cd:8a:36:a8:d7:b3:b0:b6:b8:b8:4a:8e:29:59: 7b:2d:40:27:69:94:52:d8:1c:a3:fb:77:6f:19:21:b9:6b:a9: 18:b4:48:14:e3:29:0e:c1:55:de:28:33:14:5f:d1:b9:ed:1e: 08:97:09:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUwNjMwMjIwMjU3WhcNMjUwNzA3MjIwMjU3WjAYMRYwFAYD VQQDEw02ODYzMDk5MS1jYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1uAXCntOOYtLfSZNTC9n+JYtSpElnGywb17hBJeVwnmrTBSrougmd2M1YuN 5vWDIan+E5EAJpI03zieozxU3XkQs4R3ifZylg+uPUxCwE8fjCkcvJe8xEhXciWt GX3zJsFkpQeC2URQ4tnXPoyqcZyAW53NPb3H0E7vt3K25azLm4oVUoDm6VMi9Jdi 7yNebXVb45MLgRRS34sloTmE8ilWadn6I7XRj8NqdHYUvVs6/e0dhJOhSKpmZpFe jhQ/izbBXcQv7QBlaWbT7DeDKFP4Pec/uEnHL0mCEdUXZRnooqN/P6cb0Sy1oRor 02l2JEUCCrMunHsho8XIVOy+nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxc6xTN wFJuVkPM4GoKs2V3smDxMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4iaYuMIgnE1Oevybsg0TKu7EF7sKg84P/tjXi18ubxmdxHxY3JW2 g4oBh5RZbMTWWZb2gvsZqPQy12D58YhTE9P4kpZTgLRGfzxpHolyBW8fvN4d2Gpe 4fQ51zWJv4tRNgFucFvDcDK0ugAIL+BvWZcN/y3QgGv0e5J57KBJFSubh8xWRJU6 C97CKGSPXcpB3T1jalNFOLE5+tiJ1G1hpNDBsi7ADBD5EDF7G1njIFeYCABU/QJY M0y+rvU+vvbvoxYoFBv2g14yzYo2qNezsLa4uEqOKVl7LUAnaZRS2Byj+3dvGSG5 a6kYtEgU4ykOwVXeKDMUX9G57R4Ilwn+ -----END CERTIFICATE-----Generated at Tue Jul 1 03:57:10 2025 by rpki-client