$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json) Hash identifier: ifPyzBSlHIugOB6FuDKwE5pbSJOOi0v0+adSANCLRig= Subject key identifier: 3A:B6:23:99:AF:45:D1:A8:01:BA:A5:0D:17:49:0E:81:43:A5:0D:B7 Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft Manifest number: AF Signing time: Thu 03 Jul 2025 06:14:25 +0000 Manifest this update: Thu 03 Jul 2025 06:14:25 +0000 Manifest next update: Thu 10 Jul 2025 06:14:25 +0000 Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: 57Crpfa4tUvo0zjIKRRquNFOUol9sFkEGYn5Jby+fKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Validity Not Before: Jul 3 06:14:25 2025 GMT Not After : Jul 10 06:14:25 2025 GMT Subject: CN=68661fc1-3cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:af:49:b8:4c:e0:9b:ad:af:ee:8a:4d:c6: 60:7b:34:89:81:e7:b7:a9:33:49:4c:44:bb:d4:7b: ce:26:11:f0:ca:2f:25:72:a3:9f:c5:2f:9d:d4:50: 3a:6e:ba:db:49:9d:5c:5a:c0:49:d8:6b:ad:f3:eb: a6:83:fd:8f:92:2c:27:f9:63:05:9c:2a:44:e5:67: 97:52:45:5e:5e:4e:0b:be:4b:9d:bb:56:3c:1c:48: 7a:61:d9:32:09:d3:68:ce:4f:d0:20:97:ce:1f:d1: 55:74:85:cc:09:eb:90:0f:82:fc:9f:db:1e:54:31: 16:9e:f4:e6:b9:36:11:d4:7d:b7:89:e4:3f:e6:c2: 69:48:f5:90:a4:6d:d0:84:b9:35:40:e4:37:ed:02: 20:7c:8d:89:73:5f:73:76:43:84:7f:54:0e:c6:45: 1f:47:d6:20:a4:6b:d9:27:15:bd:d4:58:b5:d4:03: a2:b4:af:ca:6b:2d:52:8d:14:fc:7e:c1:d9:c0:0e: 8e:1b:25:4c:a1:c9:60:ef:6f:94:2f:87:7e:22:4f: 80:38:f3:37:f6:86:12:71:fc:46:68:5e:22:3d:25: 11:55:d4:3e:be:4e:fc:a8:af:2c:f3:98:ab:25:b3: e2:28:cb:8b:fd:8d:f9:53:e4:7c:c8:76:f8:6a:26: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B6:23:99:AF:45:D1:A8:01:BA:A5:0D:17:49:0E:81:43:A5:0D:B7 X509v3 Authority Key Identifier: keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5b:f5:1b:cb:e2:a6:8c:96:5e:7e:d5:fe:19:7d:42:f9:a4: 03:81:2d:32:5b:2d:4a:e9:e5:09:cf:ae:fb:82:0c:ba:47:80: 25:95:8f:ed:95:ba:d9:c2:d0:32:c7:1a:13:b3:43:cf:9d:dc: 45:78:96:f8:ef:d1:da:9b:d5:a4:0a:68:76:61:ab:af:ef:32: c2:d1:ba:4e:cd:5e:9d:21:67:ec:d6:28:0b:a6:bb:1f:02:de: b0:52:0a:6e:fc:08:a6:42:dd:f8:db:13:4a:a3:50:04:2b:47: 27:25:b6:e2:ca:d7:bb:82:d1:22:f2:61:f5:fc:1c:73:95:3d: 96:f4:87:5a:d0:e1:fa:87:c6:18:af:c4:2a:5f:28:75:9a:4d: f3:2f:43:58:d5:45:39:ad:db:68:1b:72:6f:45:c0:60:14:a6: 1f:91:04:5b:21:0d:7f:30:22:fe:ce:92:4b:93:78:59:aa:70: 33:8b:19:9e:df:8c:a7:83:c6:04:b7:ec:22:b6:3e:d9:42:fe: 5b:0e:b0:4b:9c:37:39:db:00:1e:e8:f3:23:3c:a4:7e:d1:7c: 88:1f:3b:df:df:e4:2b:3f:27:a5:0b:9f:c8:07:62:9f:c4:bf: 83:77:80:67:91:f9:f4:ae:74:e5:c2:74:06:bd:fe:f7:15:1b: 66:a7:91:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKDYyQ0E5QzEyNkUxNEZGQkJCQzNENjQwNzEwNUVCRTE1 MUI5OTYwNUIwHhcNMjUwNzAzMDYxNDI1WhcNMjUwNzEwMDYxNDI1WjAYMRYwFAYD VQQDEw02ODY2MWZjMS0zY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDKvSbhM4Jutr+6KTcZgezSJgee3qTNJTES71HvOJhHwyi8lcqOfxS+d1FA6 brrbSZ1cWsBJ2Gut8+umg/2Pkiwn+WMFnCpE5WeXUkVeXk4Lvkudu1Y8HEh6Ydky CdNozk/QIJfOH9FVdIXMCeuQD4L8n9seVDEWnvTmuTYR1H23ieQ/5sJpSPWQpG3Q hLk1QOQ37QIgfI2Jc19zdkOEf1QOxkUfR9YgpGvZJxW91Fi11AOitK/Kay1SjRT8 fsHZwA6OGyVMoclg72+UL4d+Ik+AOPM39oYScfxGaF4iPSURVdQ+vk78qK8s85ir JbPiKMuL/Y35U+R8yHb4aiYqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq2I5mv RdGoAbqlDRdJDoFDpQ23MB8GA1UdIwQYMBaAFGLKnBJuFP+7vD1kBxBevhUbmWBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80ODRGMjZFNjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83dThQV1FIRUY2LUZSdVpZ RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzcWNFbTRVXzd1OFBXUUhFRjYtRlJ1WllGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80ODRGMjZFNjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83 dThQV1FIRUY2LUZSdVpZRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2W/Uby+KmjJZeftX+GX1C+aQDgS0yWy1K6eUJz677ggy6R4AllY/t lbrZwtAyxxoTs0PPndxFeJb479Ham9WkCmh2Yauv7zLC0bpOzV6dIWfs1igLprsf At6wUgpu/AimQt342xNKo1AEK0cnJbbiyte7gtEi8mH1/BxzlT2W9Ida0OH6h8YY r8QqXyh1mk3zL0NY1UU5rdtoG3JvRcBgFKYfkQRbIQ1/MCL+zpJLk3hZqnAzixme 34yng8YEt+witj7ZQv5bDrBLnDc52wAe6PMjPKR+0XyIHzvf3+QrPyelC5/IB2Kf xL+Dd4Bnkfn0rnTlwnQGvf73FRtmp5FU -----END CERTIFICATE-----Generated at Thu Jul 3 11:22:50 2025 by rpki-client