$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: 55I8UavXvHu8mDJK8OT0EgfTd/jJrQANcD2UwHJV+Tw= Subject key identifier: A5:B4:56:91:1F:A9:CA:DA:D7:EE:B4:4B:89:D1:0F:7D:20:10:17:E6 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 13D5 Signing time: Wed 02 Jul 2025 19:18:10 +0000 Manifest this update: Wed 02 Jul 2025 19:18:09 +0000 Manifest next update: Wed 09 Jul 2025 19:18:09 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: qZu+lS1yCh0DB9uAXGLMe/VwN1mggk+0pnOyzwurVCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Jul 2 19:18:09 2025 GMT Not After : Jul 9 19:18:09 2025 GMT Subject: CN=686585f1-4f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:23:06:68:75:94:82:9d:06:78:bc:de:bc: b4:d6:80:50:02:af:54:dc:3a:9c:00:8e:f3:38:0f: f5:7c:f4:fa:e5:a7:d3:fb:a0:38:97:fd:a3:8d:7e: 77:d2:55:29:1d:c2:c0:58:f3:53:27:f1:58:fa:48: 88:f9:4e:34:8f:28:5b:e5:f2:d2:f1:08:74:14:d1: b5:38:70:32:65:85:e5:dd:4c:84:9a:45:07:1f:1d: 01:a5:8a:74:17:9c:88:e9:f6:96:a4:f1:17:2c:0b: 9e:7c:62:94:30:37:96:84:ad:20:e2:f0:26:09:fc: 08:ca:61:f1:a4:d3:33:de:c6:fc:da:14:9e:8c:cc: d1:e5:41:5a:13:c5:b0:be:49:89:92:0f:04:00:61: fe:b4:9c:ac:9d:d6:14:a2:9a:b2:7a:9d:26:c3:91: 95:81:60:1b:3f:89:bb:ab:02:0c:29:1e:36:29:4f: f8:01:5e:83:b5:6f:1e:a6:6d:d6:73:50:9e:94:f3: e5:29:03:67:2f:47:f1:eb:c1:b0:6b:6d:13:76:48: e0:a5:35:22:30:27:4e:8b:22:c0:95:b8:81:ac:a4: 69:db:a2:ed:c9:c2:c5:78:34:d1:68:1c:f8:26:66: 18:cf:38:87:d7:b8:63:c3:c5:ed:60:06:49:47:34: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B4:56:91:1F:A9:CA:DA:D7:EE:B4:4B:89:D1:0F:7D:20:10:17:E6 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:c6:5e:81:b6:26:dd:4d:c9:55:58:7b:97:25:50:11:4b: fa:be:2e:29:2e:b9:83:70:6d:18:f5:71:ee:77:ae:d9:3c:b4: fd:99:63:00:54:12:b3:2d:77:48:55:45:80:28:c1:6c:ba:e2: 5b:5e:e2:a3:80:9e:d8:c0:57:89:be:5b:1c:a3:a7:78:40:37: 81:e3:8d:89:f3:7c:e9:fd:b6:dc:78:93:1f:59:e5:78:c5:a2: 18:72:c8:21:c2:b5:bf:31:c5:74:cd:08:06:7f:5b:f1:b8:7c: 79:30:0e:a2:2c:09:e5:5f:34:9d:a0:09:44:56:da:62:af:0d: 03:a9:67:15:cf:44:ed:2f:4e:82:fc:9c:fb:54:49:ad:54:90: 60:53:ca:88:2d:dc:b3:7f:ae:6e:b3:7b:d9:6a:70:65:41:6a: 88:db:97:dc:f3:5f:73:b4:2d:e5:6f:2b:8d:02:f5:44:49:8a: 27:18:39:21:79:8b:60:55:c8:7b:9e:ff:fa:ab:60:7d:a3:7f: a5:3b:ce:d4:fb:8c:11:af:4d:a0:e4:4b:90:80:72:2a:a8:dc: 5a:0c:6a:cc:62:1a:05:5b:b3:84:f4:a1:7d:5b:da:a2:15:cc: d7:a8:88:7f:94:60:ba:9f:0f:b3:36:d6:24:50:b5:8b:95:0e: 66:78:63:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwNzAyMTkxODA5WhcNMjUwNzA5MTkxODA5WjAYMRYwFAYD VQQDEw02ODY1ODVmMS00ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoIjBmh1lIKdBni83ry01oBQAq9U3DqcAI7zOA/1fPT65afT+6A4l/2jjX53 0lUpHcLAWPNTJ/FY+kiI+U40jyhb5fLS8Qh0FNG1OHAyZYXl3UyEmkUHHx0BpYp0 F5yI6faWpPEXLAuefGKUMDeWhK0g4vAmCfwIymHxpNMz3sb82hSejMzR5UFaE8Ww vkmJkg8EAGH+tJysndYUopqyep0mw5GVgWAbP4m7qwIMKR42KU/4AV6DtW8epm3W c1CelPPlKQNnL0fx68Gwa20TdkjgpTUiMCdOiyLAlbiBrKRp26LtycLFeDTRaBz4 JmYYzziH17hjw8XtYAZJRzT3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW0VpEf qcra1+60S4nRD30gEBfmMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJsZegbYm3U3JVVh7lyVQEUv6vi4pLrmDcG0Y9XHud67ZPLT9mWMA VBKzLXdIVUWAKMFsuuJbXuKjgJ7YwFeJvlsco6d4QDeB442J83zp/bbceJMfWeV4 xaIYcsghwrW/McV0zQgGf1vxuHx5MA6iLAnlXzSdoAlEVtpirw0DqWcVz0TtL06C /Jz7VEmtVJBgU8qILdyzf65us3vZanBlQWqI25fc819ztC3lbyuNAvVESYonGDkh eYtgVch7nv/6q2B9o3+lO87U+4wRr02g5EuQgHIqqNxaDGrMYhoFW7OE9KF9W9qi FczXqIh/lGC6nw+zNtYkULWLlQ5meGO4 -----END CERTIFICATE-----Generated at Thu Jul 3 14:49:36 2025 by rpki-client