$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: O9DwZlO1YAN7QCniKSOHlSsaOW6eVSi+NRAvFty/WA8= Subject key identifier: AC:F4:AC:36:87:3F:47:2B:DB:AF:C3:F5:E0:37:B8:73:4A:73:60:FD Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 0102 Signing time: Thu 03 Jul 2025 05:18:07 +0000 Manifest this update: Thu 03 Jul 2025 05:18:06 +0000 Manifest next update: Thu 10 Jul 2025 05:18:06 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: E3b0Pw7qjGHfjgfvYzHAHRhEJrSBXto+YGeXG7y8Fxs=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Jul 3 05:18:06 2025 GMT Not After : Jul 10 05:18:06 2025 GMT Subject: CN=6866128f-23a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:5b:d8:57:c8:79:2d:70:28:fb:54:57:79: 79:d4:0d:ee:6e:e0:b1:f7:3b:35:dc:e5:47:9e:6c: ef:8f:99:b1:79:81:fd:2a:0c:5c:24:d7:8d:9e:21: a1:8b:d5:6c:e1:8e:84:ce:45:c8:c8:b8:69:35:d3: 1d:2e:47:68:be:7a:a1:be:ef:10:c3:f7:c2:e6:2b: 06:9e:7f:2c:2d:20:87:c2:c8:84:18:e6:ac:51:f3: 4d:43:2f:ec:c4:62:7a:92:a3:fb:47:d4:a0:c0:ef: 72:46:cd:f4:f5:3e:b6:7a:5a:f7:4b:6f:74:f3:0a: 08:9b:93:6e:df:11:39:2c:d0:50:0a:c9:aa:92:8c: 74:b0:92:e7:f1:8b:d6:b5:be:75:66:f6:43:fa:60: 71:b1:de:b7:79:53:59:11:d9:7b:96:01:0c:bb:f6: 9e:39:8e:e3:e8:2c:a8:40:40:ba:ad:ef:fa:80:d2: 7e:fb:21:49:2d:ff:5c:4c:af:5a:38:d9:1f:20:ac: 3b:67:4b:ec:45:55:3a:48:e0:9a:1f:f4:c6:8d:f1: e5:1c:e0:5a:79:19:d6:86:ef:b3:5a:a2:0e:f1:fa: 99:69:70:58:94:5a:bc:46:cb:50:03:1e:3e:71:f2: 39:78:95:97:27:c6:59:b3:ca:1f:d6:30:b8:04:ab: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:AC:36:87:3F:47:2B:DB:AF:C3:F5:E0:37:B8:73:4A:73:60:FD X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e9:93:28:97:3a:2a:ac:bd:c8:4d:8a:32:3a:53:20:e5:d4: 13:e9:36:df:5c:28:57:11:8b:87:4d:b7:1f:90:1c:44:2d:fc: ad:a6:72:e7:66:a3:dc:1f:f9:cd:15:54:60:72:db:2e:0c:8d: ae:6b:d3:13:95:00:a4:61:db:45:34:25:77:64:ab:29:fd:0d: cb:99:80:05:e1:03:f1:2a:ab:33:06:4e:44:29:32:7e:09:ba: 97:d0:77:99:00:c4:5b:88:6a:a1:06:de:5f:c5:8d:86:20:a6: 81:10:90:57:32:80:65:e5:3a:52:50:6d:34:2a:22:a0:85:70: 51:95:3e:87:d2:9d:d8:df:a1:06:ef:d8:eb:ca:f6:86:bc:59: b2:52:8d:0e:03:fc:9b:d3:0b:fe:ae:05:9c:70:a7:f1:d1:00: 01:45:e8:37:35:6e:02:81:5e:48:6f:1f:db:7c:98:a4:68:fd: 36:11:76:9c:72:d8:fc:aa:ef:3b:aa:5a:76:d0:b1:e8:e3:f0: a0:5d:79:79:3a:55:17:0f:85:ed:54:48:ba:b0:ef:fe:49:30: 56:c9:34:be:39:7d:3a:60:42:d2:0c:9f:4d:c1:9e:b1:96:95: c2:22:a1:c6:37:6a:f1:9f:1a:49:ce:51:bb:42:af:68:17:de: 5a:60:85:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwNzAzMDUxODA2WhcNMjUwNzEwMDUxODA2WjAYMRYwFAYD VQQDEw02ODY2MTI4Zi0yM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc1b2FfIeS1wKPtUV3l51A3ubuCx9zs13OVHnmzvj5mxeYH9KgxcJNeNniGh i9Vs4Y6EzkXIyLhpNdMdLkdovnqhvu8Qw/fC5isGnn8sLSCHwsiEGOasUfNNQy/s xGJ6kqP7R9SgwO9yRs309T62elr3S2908woIm5Nu3xE5LNBQCsmqkox0sJLn8YvW tb51ZvZD+mBxsd63eVNZEdl7lgEMu/aeOY7j6CyoQEC6re/6gNJ++yFJLf9cTK9a ONkfIKw7Z0vsRVU6SOCaH/TGjfHlHOBaeRnWhu+zWqIO8fqZaXBYlFq8RstQAx4+ cfI5eJWXJ8ZZs8of1jC4BKtwNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz0rDaH P0cr26/D9eA3uHNKc2D9MB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE6ZMolzoqrL3ITYoyOlMg5dQT6TbfXChXEYuHTbcfkBxELfytpnLn ZqPcH/nNFVRgctsuDI2ua9MTlQCkYdtFNCV3ZKsp/Q3LmYAF4QPxKqszBk5EKTJ+ CbqX0HeZAMRbiGqhBt5fxY2GIKaBEJBXMoBl5TpSUG00KiKghXBRlT6H0p3Y36EG 79jryvaGvFmyUo0OA/yb0wv+rgWccKfx0QABReg3NW4CgV5Ibx/bfJikaP02EXac ctj8qu87qlp20LHo4/CgXXl5OlUXD4XtVEi6sO/+STBWyTS+OX06YELSDJ9NwZ6x lpXCIqHGN2rxnxpJzlG7Qq9oF95aYIWz -----END CERTIFICATE-----Generated at Thu Jul 3 10:50:07 2025 by rpki-client