$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: MWx9WrGDRnjI04PjnVDreGjLfZQnxuOczIaadhNTPvQ= Subject key identifier: 2C:E2:8C:41:BD:8E:A4:3C:04:B6:B7:D6:57:FC:CA:38:A2:50:45:F0 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 0133 Signing time: Tue 01 Jul 2025 04:59:44 +0000 Manifest this update: Tue 01 Jul 2025 04:59:43 +0000 Manifest next update: Tue 08 Jul 2025 04:59:43 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 40dR5FpB2CUoHaRK87P65G37nkSX3n7tLVTBnnuQ2lM=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Jul 1 04:59:43 2025 GMT Not After : Jul 8 04:59:43 2025 GMT Subject: CN=68636b40-6a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:fd:56:e0:9f:73:bb:b2:9d:be:69:40:e8: d3:ea:3d:a6:38:b0:0b:eb:6e:33:79:aa:d4:64:8e: a4:c6:2f:a6:56:01:ad:aa:f6:17:59:62:22:6b:c1: 64:83:a8:6c:14:31:5c:a6:52:29:9d:28:e0:41:41: 07:33:66:0f:cc:cd:8b:37:4f:49:9b:d5:4f:ea:a1: 77:dc:81:79:5b:62:0a:02:e4:42:6e:39:4b:b9:1f: 97:19:d9:14:ab:c0:d3:da:f2:5e:45:14:20:93:ed: 8e:05:4c:4d:20:a8:79:8d:ad:0d:48:2a:62:e1:da: d0:7c:71:cc:3d:c1:70:93:81:ef:77:b7:f4:6a:b4: 03:43:3f:4a:2e:ee:c4:5c:21:b6:06:52:ba:48:a5: 3d:15:aa:38:78:cb:d6:8c:ac:1f:6e:2e:6e:d9:9f: be:4c:ef:44:84:f2:bd:d2:0e:1a:eb:00:c2:18:28: f8:0b:cc:31:0c:ca:f4:82:a4:18:a3:87:ec:9c:00: d6:bb:84:91:98:e0:6d:1a:34:2d:5b:bb:32:74:cd: a4:aa:ff:ef:ef:49:db:3a:0b:8b:0c:52:1b:1e:c8: 22:b7:2e:47:8f:ff:60:24:2e:63:41:e4:e4:f6:fd: 11:ff:91:99:f1:bf:5e:c4:37:91:56:79:ce:7f:b4: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E2:8C:41:BD:8E:A4:3C:04:B6:B7:D6:57:FC:CA:38:A2:50:45:F0 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0f:c2:81:44:9e:e2:48:b9:0f:29:fc:a4:98:a7:c1:c7:f3: 1a:d2:a6:62:fa:8d:aa:9e:8a:04:82:c8:ca:e6:dd:24:10:cc: 37:0c:8b:a1:d9:5d:9a:b5:ab:e7:53:ab:ad:af:e5:9c:03:0d: 25:8d:e0:6d:cf:68:fb:e6:6b:63:65:35:10:84:a1:08:8d:67: 86:7c:64:27:b4:12:bc:9e:b2:87:4e:66:1b:53:81:9b:97:21: 14:c6:5c:84:c2:14:c5:da:cb:2c:d7:3f:33:0a:54:0a:64:3c: 5f:73:0e:12:cf:56:83:5e:e8:dd:15:a8:c5:99:0c:00:1f:ba: 25:4b:4f:5b:81:81:06:03:d6:63:3e:32:4d:16:bc:a1:39:bc: cc:a6:90:35:ba:8a:90:cd:bc:3c:82:11:01:10:f2:3f:80:1b: 8c:52:f4:76:5e:41:f0:c8:5e:71:45:8b:9d:5d:b3:7c:14:89: 41:b1:29:1b:f1:3f:c5:2b:99:23:82:5d:e7:fa:2a:d6:ac:4b: 84:2e:21:77:81:23:4d:7e:3d:d0:d1:78:b0:f7:e0:00:32:ef: 38:8e:d3:eb:4a:cc:99:a7:7e:b4:ef:fb:d1:78:4f:b1:55:be: 4e:bc:be:e2:f2:61:f5:2f:78:87:d4:58:18:d7:14:7c:b6:98: 1e:b5:04:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUwNzAxMDQ1OTQzWhcNMjUwNzA4MDQ1OTQzWjAYMRYwFAYD VQQDEw02ODYzNmI0MC02YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JP9VuCfc7uynb5pQOjT6j2mOLAL624zearUZI6kxi+mVgGtqvYXWWIia8Fk g6hsFDFcplIpnSjgQUEHM2YPzM2LN09Jm9VP6qF33IF5W2IKAuRCbjlLuR+XGdkU q8DT2vJeRRQgk+2OBUxNIKh5ja0NSCpi4drQfHHMPcFwk4Hvd7f0arQDQz9KLu7E XCG2BlK6SKU9Fao4eMvWjKwfbi5u2Z++TO9EhPK90g4a6wDCGCj4C8wxDMr0gqQY o4fsnADWu4SRmOBtGjQtW7sydM2kqv/v70nbOguLDFIbHsgity5Hj/9gJC5jQeTk 9v0R/5GZ8b9exDeRVnnOf7QuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzijEG9 jqQ8BLa31lf8yjiiUEXwMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2D8KBRJ7iSLkPKfykmKfBx/Ma0qZi+o2qnooEgsjK5t0kEMw3DIuh 2V2atavnU6utr+WcAw0ljeBtz2j75mtjZTUQhKEIjWeGfGQntBK8nrKHTmYbU4Gb lyEUxlyEwhTF2sss1z8zClQKZDxfcw4Sz1aDXujdFajFmQwAH7olS09bgYEGA9Zj PjJNFryhObzMppA1uoqQzbw8ghEBEPI/gBuMUvR2XkHwyF5xRYudXbN8FIlBsSkb 8T/FK5kjgl3n+irWrEuELiF3gSNNfj3Q0Xiw9+AAMu84jtPrSsyZp3607/vReE+x Vb5OvL7i8mH1L3iH1FgY1xR8tpgetQQD -----END CERTIFICATE-----Generated at Wed Jul 2 16:29:51 2025 by rpki-client