$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: 35NiFUxP6GMnZ6TkHqfYQBCZjS2g99TE9qDo+RwLLP8= Subject key identifier: A6:AD:95:03:31:92:B0:AE:56:52:3B:F0:25:A9:5E:50:79:B0:0C:43 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0BFC Signing time: Sat 28 Jun 2025 18:29:50 +0000 Manifest this update: Sat 28 Jun 2025 18:29:49 +0000 Manifest next update: Sat 05 Jul 2025 18:29:49 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: fNtzYRQI5re4Br6uXVKhPvEO49Q4ArXgKTL6PzAO/dY=) 2: 65866C4815D111EABE986319C4F9AE02.roa (hash: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Jun 28 18:29:49 2025 GMT Not After : Jul 5 18:29:49 2025 GMT Subject: CN=6860349e-625f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:75:00:7c:08:0b:68:60:c4:3d:52:34:d7: c9:14:79:43:99:4a:03:d8:27:a6:e7:48:8b:17:95: 8a:7d:10:b0:e3:ab:a0:b2:e9:fa:ab:3a:af:1b:73: 10:3e:69:13:9c:ec:e6:45:67:cb:43:6b:09:fc:3c: f7:63:6f:f7:48:62:36:7d:f5:03:07:91:09:e3:88: 7b:80:98:14:9b:2d:18:e9:f1:19:82:76:9b:3a:f2: 33:cc:75:7d:cb:65:05:e8:0c:b4:f7:73:ba:e0:8f: fa:36:18:36:cd:bc:b4:29:61:1c:f3:f1:a0:c7:27: d0:4b:26:0b:53:b0:b6:4b:2e:a4:1c:0c:cb:e2:50: fe:09:59:37:e5:42:81:7e:e7:13:39:c8:8f:bb:c7: 4b:99:46:ab:9b:67:d1:6b:3d:ad:7f:fe:b0:71:69: be:2e:27:eb:a4:83:1b:cc:c9:b3:ad:68:e0:d7:52: be:da:36:19:ac:55:80:66:32:bb:35:ba:9e:9d:e0: 6a:29:c6:ca:43:a2:85:9c:74:d7:54:bc:3e:88:6e: 1c:c0:13:3a:28:8d:43:5c:1a:24:12:79:60:20:7c: 5c:10:8b:39:e5:8f:33:43:9b:45:07:06:82:14:4a: 88:04:9c:5d:7c:4a:18:4f:44:9e:97:d5:74:45:06: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:95:03:31:92:B0:AE:56:52:3B:F0:25:A9:5E:50:79:B0:0C:43 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:f1:5e:8c:d2:3e:25:82:9d:17:9a:04:44:3b:6a:94:0f:7d: bf:c1:c7:85:14:a8:a3:3b:62:59:4d:6e:81:05:8a:7b:3f:34: 61:df:da:17:07:ec:05:56:91:1b:e7:72:b7:89:f2:40:c2:cc: 8e:86:6a:4e:6d:28:00:02:dc:39:1b:70:4f:6f:ab:55:50:ab: 7e:c4:e7:94:87:a9:85:ac:ab:42:6a:a7:92:6d:65:8e:8b:99: 3f:7b:82:79:64:6e:0c:6e:58:06:c6:9d:42:e7:ed:40:e7:63: 50:6a:84:bf:31:0e:59:d4:47:fb:7a:95:3c:07:83:7b:82:74: 5f:21:4f:06:fa:39:79:b8:b0:2f:81:aa:d4:a2:e4:dc:28:c7: 99:1a:53:35:67:30:95:01:b9:ea:90:4f:f0:65:fd:98:60:48: 92:e5:21:68:90:6a:19:4a:f7:44:a3:22:c1:c3:8d:c0:13:6c: 42:4e:21:97:16:7d:3f:42:a6:66:8d:08:a6:07:87:9c:77:67: 93:19:93:27:b9:96:c7:de:a1:8c:37:82:7f:f4:be:92:80:bc: dd:92:59:ef:9b:33:82:43:68:e0:59:82:3a:d1:ab:c7:f7:c9: 0a:3c:1c:0e:0d:b6:5c:22:71:94:39:44:50:aa:3e:14:8d:3d: be:0b:e8:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUwNjI4MTgyOTQ5WhcNMjUwNzA1MTgyOTQ5WjAYMRYwFAYD VQQDEw02ODYwMzQ5ZS02MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzat1AHwIC2hgxD1SNNfJFHlDmUoD2Cem50iLF5WKfRCw46ugsun6qzqvG3MQ PmkTnOzmRWfLQ2sJ/Dz3Y2/3SGI2ffUDB5EJ44h7gJgUmy0Y6fEZgnabOvIzzHV9 y2UF6Ay093O64I/6Nhg2zby0KWEc8/GgxyfQSyYLU7C2Sy6kHAzL4lD+CVk35UKB fucTOciPu8dLmUarm2fRaz2tf/6wcWm+LifrpIMbzMmzrWjg11K+2jYZrFWAZjK7 NbqeneBqKcbKQ6KFnHTXVLw+iG4cwBM6KI1DXBokEnlgIHxcEIs55Y8zQ5tFBwaC FEqIBJxdfEoYT0Sel9V0RQbUPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKatlQMx krCuVlI78CWpXlB5sAxDMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS8V6M0j4lgp0XmgREO2qUD32/wceFFKijO2JZTW6BBYp7PzRh39oX B+wFVpEb53K3ifJAwsyOhmpObSgAAtw5G3BPb6tVUKt+xOeUh6mFrKtCaqeSbWWO i5k/e4J5ZG4MblgGxp1C5+1A52NQaoS/MQ5Z1Ef7epU8B4N7gnRfIU8G+jl5uLAv garUouTcKMeZGlM1ZzCVAbnqkE/wZf2YYEiS5SFokGoZSvdEoyLBw43AE2xCTiGX Fn0/QqZmjQimB4ecd2eTGZMnuZbH3qGMN4J/9L6SgLzdklnvmzOCQ2jgWYI60avH 98kKPBwODbZcInGUOURQqj4UjT2+C+hU -----END CERTIFICATE-----Generated at Sun Jun 29 20:42:38 2025 by rpki-client