$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: zewfI3x4E4n/9JP7DjPrFkVwP74zUDyCsaDsJpQV8VM= Subject key identifier: 3D:FC:CD:5E:F0:80:C6:CB:04:67:69:8F:25:96:FB:E0:69:79:33:6A Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0C74 Signing time: Sat 28 Jun 2025 18:04:26 +0000 Manifest this update: Sat 28 Jun 2025 18:04:25 +0000 Manifest next update: Sat 05 Jul 2025 18:04:25 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: 28imXjGJUujii6v4hl+0w8TFGna3mH+hQ8bXlZGIMs8=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Jun 28 18:04:25 2025 GMT Not After : Jul 5 18:04:25 2025 GMT Subject: CN=68602eaa-cc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:28:02:12:36:fa:96:d8:bb:9e:a0:b8:5f: d4:47:e9:fe:21:e0:1f:2a:1c:70:86:fc:0a:00:71: e8:e0:8f:2b:df:2b:9d:ed:ff:a2:ef:6a:1c:4f:a0: 02:1c:1c:1f:4f:33:e2:c9:96:ad:32:26:92:b2:ed: 05:9a:eb:0a:ab:96:87:3a:b2:aa:5b:b8:c3:ec:6a: 4e:99:b3:35:6f:f2:d9:af:1b:69:e0:23:70:fa:f2: a8:f6:98:1b:86:2d:c2:7e:57:3d:a0:76:1c:49:47: 71:83:ea:61:b6:6f:b5:96:ec:7b:09:f3:35:ea:54: 5f:bd:94:27:8b:31:32:9a:fd:4d:0c:ba:1a:cf:d6: eb:cb:3c:7b:47:68:b7:7a:50:23:53:b6:53:1c:db: 51:8f:e2:e3:84:d6:2c:60:3a:bf:48:59:37:bd:28: 06:e1:a0:0c:09:87:13:7f:80:f4:1c:86:65:51:5f: 96:95:15:f1:ad:b2:d7:4c:10:2c:a4:6a:97:a0:e6: 38:3a:55:f5:44:bd:81:58:b3:d3:4f:2f:fb:5b:a5: 7a:f1:eb:45:30:3b:d7:c5:ef:ab:bf:b4:82:72:93: c2:04:35:d8:9b:d9:ba:bf:a3:b5:6e:e5:f9:10:88: 87:b7:c8:89:2e:f2:1f:62:4e:40:73:d5:33:08:e5: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FC:CD:5E:F0:80:C6:CB:04:67:69:8F:25:96:FB:E0:69:79:33:6A X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1c:98:82:74:3b:00:cc:a2:2f:61:2c:df:88:43:75:dd:b5: 33:a6:42:54:15:fd:cc:a5:25:2a:89:dc:42:0e:49:31:8c:a8: 95:c5:1e:bf:d8:bd:df:83:cf:a2:2f:1e:6e:59:16:c4:da:ae: dc:5f:da:ef:f1:53:87:75:06:02:fb:2a:05:3e:c4:ad:ad:18: f8:1b:6e:d2:61:f0:2b:ff:b2:d6:74:b2:03:93:2e:43:eb:ef: 0f:92:85:0b:f4:39:ae:43:ad:d0:3e:e7:2d:cb:4d:0c:7d:ea: b5:cb:87:c7:25:60:f2:ac:37:69:97:d6:66:db:7f:97:7c:33: 0b:6a:6e:05:4d:ba:f2:76:b6:bd:40:56:b7:95:0d:29:f9:9e: 1f:64:a7:77:8e:aa:69:c7:89:1f:bb:d4:52:c8:6a:c0:ee:6d: 3d:76:1b:f7:b4:ab:20:5c:52:dc:4b:0a:b6:86:68:6e:ab:99: da:f6:1d:2d:a6:f4:47:ce:d0:18:40:2c:61:ac:97:13:67:cf: 89:3b:dc:5c:02:01:d4:6b:27:01:17:29:c7:16:03:91:77:42: 11:c9:42:03:e5:f5:bf:64:70:10:1a:02:89:64:95:d3:26:c6: b9:b6:6d:0b:ce:e0:fb:41:0d:f2:15:96:14:58:12:26:08:60: 15:f5:ca:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUwNjI4MTgwNDI1WhcNMjUwNzA1MTgwNDI1WjAYMRYwFAYD VQQDEw02ODYwMmVhYS1jYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGQoAhI2+pbYu56guF/UR+n+IeAfKhxwhvwKAHHo4I8r3yud7f+i72ocT6AC HBwfTzPiyZatMiaSsu0FmusKq5aHOrKqW7jD7GpOmbM1b/LZrxtp4CNw+vKo9pgb hi3Cflc9oHYcSUdxg+phtm+1lux7CfM16lRfvZQnizEymv1NDLoaz9bryzx7R2i3 elAjU7ZTHNtRj+LjhNYsYDq/SFk3vSgG4aAMCYcTf4D0HIZlUV+WlRXxrbLXTBAs pGqXoOY4OlX1RL2BWLPTTy/7W6V68etFMDvXxe+rv7SCcpPCBDXYm9m6v6O1buX5 EIiHt8iJLvIfYk5Ac9UzCOVoYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD38zV7w gMbLBGdpjyWW++BpeTNqMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMHJiCdDsAzKIvYSzfiEN13bUzpkJUFf3MpSUqidxCDkkxjKiVxR6/ 2L3fg8+iLx5uWRbE2q7cX9rv8VOHdQYC+yoFPsStrRj4G27SYfAr/7LWdLIDky5D 6+8PkoUL9DmuQ63QPucty00Mfeq1y4fHJWDyrDdpl9Zm23+XfDMLam4FTbrydra9 QFa3lQ0p+Z4fZKd3jqppx4kfu9RSyGrA7m09dhv3tKsgXFLcSwq2hmhuq5na9h0t pvRHztAYQCxhrJcTZ8+JO9xcAgHUaycBFynHFgORd0IRyUID5fW/ZHAQGgKJZJXT Jsa5tm0LzuD7QQ3yFZYUWBImCGAV9cpA -----END CERTIFICATE-----Generated at Sun Jun 29 23:18:24 2025 by rpki-client