$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: lif+14zWQFDHJ/50335upulFh2y9A0qtptHYMoZ+BnI= Subject key identifier: C1:FB:C4:E1:43:99:78:06:CC:D5:9F:6C:99:33:29:0B:B2:26:E6:73 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 7E Signing time: Thu 03 Jul 2025 06:57:30 +0000 Manifest this update: Thu 03 Jul 2025 06:57:29 +0000 Manifest next update: Thu 10 Jul 2025 06:57:29 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 9skeC5xsZCdbUDp4wDglzb/XGhjnd/eaWsOTRCsCW6I=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Jul 3 06:57:29 2025 GMT Not After : Jul 10 06:57:29 2025 GMT Subject: CN=686629da-dcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:d9:39:06:dc:a2:fe:0b:3c:cc:67:bc:22: e4:bf:8e:c8:bf:da:50:e3:f2:6b:57:48:4d:41:55: 0a:94:0e:19:cf:23:6d:d6:5c:68:fa:3e:78:e3:26: bb:59:55:22:35:1b:2a:3f:ee:73:08:c4:4d:df:16: ab:d9:cc:a9:80:35:55:e4:da:22:3c:99:ee:16:31: a7:3a:8a:0a:fc:27:4f:fc:f9:1e:a1:af:9c:4d:46: 0b:e5:e8:2e:5d:d5:14:d9:82:16:43:9e:df:49:4e: 27:ee:c5:ad:58:7f:65:55:72:59:76:2c:1a:fa:fe: 69:c3:56:5b:84:5b:0f:cd:0a:c4:53:1e:0a:6f:ab: 3f:df:49:6a:69:0a:e2:b1:d4:81:30:ff:c4:c3:98: b1:59:5b:c1:fd:a2:af:d2:e1:a7:e8:a2:78:55:bd: 8d:bd:34:c9:9b:41:f4:51:a4:32:02:8a:ea:8d:21: 2b:76:df:90:7a:f3:43:fb:c6:29:19:10:c3:48:c1: 82:bc:23:00:7b:b0:75:41:38:5e:56:d7:37:39:e9: 82:2a:d8:89:ff:1f:4c:4e:ac:a3:cb:3c:84:08:b2: ec:18:71:bf:da:5a:ec:db:df:e3:6c:4c:ce:44:e0: f3:30:c6:de:0b:4f:bd:ef:3a:cf:ae:0c:69:88:d4: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FB:C4:E1:43:99:78:06:CC:D5:9F:6C:99:33:29:0B:B2:26:E6:73 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b7:3d:5d:c0:8f:48:a7:e0:a3:5d:ad:2e:2b:81:c2:5e:ae: e8:00:b4:36:e9:f7:a4:13:40:d7:88:2f:45:c2:93:79:ec:81: 49:44:f9:6a:62:32:1e:04:1f:d5:75:68:06:af:47:8d:18:7d: 92:53:f1:a3:8f:2b:1d:c3:67:2c:89:eb:2c:44:89:71:32:f6: ca:f0:ea:30:a2:c7:51:89:d8:4f:d6:ab:53:f6:43:1b:9e:b3: ea:ca:e7:3a:51:28:e3:00:2a:2d:cd:e3:6e:ab:be:3e:ae:97: 8e:6c:5d:db:46:69:b2:2a:68:84:c0:58:02:a5:7a:e7:ae:bc: 58:9f:42:3e:a2:4c:5f:72:19:c9:c7:5e:29:f7:c7:b0:87:58: 39:94:77:1d:cb:15:30:0d:be:d6:4e:94:b5:83:f3:87:b7:e5: f5:fa:87:5b:f8:87:71:34:45:22:a4:f7:b7:a2:57:ec:91:14: 0d:92:76:25:2d:f3:07:ee:63:d2:d4:6c:c5:00:5e:c5:07:f9: 78:39:0d:d9:4a:f9:64:99:53:7e:7d:89:d5:c9:6c:37:e5:54: 30:b2:b2:f8:3c:a4:77:0a:72:e4:cb:ff:a9:57:76:cf:74:3e: 36:59:80:eb:63:03:7d:1f:7c:f5:70:73:c4:24:fa:32:01:2d: ed:d9:2e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUwNzAzMDY1NzI5WhcNMjUwNzEwMDY1NzI5WjAYMRYwFAYD VQQDEw02ODY2MjlkYS1kY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA277ZOQbcov4LPMxnvCLkv47Iv9pQ4/JrV0hNQVUKlA4ZzyNt1lxo+j544ya7 WVUiNRsqP+5zCMRN3xar2cypgDVV5NoiPJnuFjGnOooK/CdP/Pkeoa+cTUYL5egu XdUU2YIWQ57fSU4n7sWtWH9lVXJZdiwa+v5pw1ZbhFsPzQrEUx4Kb6s/30lqaQri sdSBMP/Ew5ixWVvB/aKv0uGn6KJ4Vb2NvTTJm0H0UaQyAorqjSErdt+QevND+8Yp GRDDSMGCvCMAe7B1QTheVtc3OemCKtiJ/x9MTqyjyzyECLLsGHG/2lrs29/jbEzO RODzMMbeC0+97zrPrgxpiNRNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH7xOFD mXgGzNWfbJkzKQuyJuZzMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetz1dwI9Ip+CjXa0uK4HCXq7oALQ26fekE0DXiC9FwpN57IFJRPlq YjIeBB/VdWgGr0eNGH2SU/Gjjysdw2csiessRIlxMvbK8OowosdRidhP1qtT9kMb nrPqyuc6USjjACotzeNuq74+rpeObF3bRmmyKmiEwFgCpXrnrrxYn0I+okxfchnJ x14p98ewh1g5lHcdyxUwDb7WTpS1g/OHt+X1+odb+IdxNEUipPe3olfskRQNknYl LfMH7mPS1GzFAF7FB/l4OQ3ZSvlkmVN+fYnVyWw35VQwsrL4PKR3CnLky/+pV3bP dD42WYDrYwN9H3z1cHPEJPoyAS3t2S7b -----END CERTIFICATE-----Generated at Thu Jul 3 20:20:18 2025 by rpki-client