$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: 6KRKt6j4G/EqBVNiRRuAKqhPi9BIAsoYMGoTUYIUJT0= Subject key identifier: 43:16:93:24:3C:FB:AA:5E:A0:4F:21:11:9F:14:94:06:C6:F6:A7:00 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FAB Signing time: Wed 02 Jul 2025 17:43:49 +0000 Manifest this update: Wed 02 Jul 2025 17:43:48 +0000 Manifest next update: Wed 09 Jul 2025 17:43:48 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: DrhfPgiJENV1a/LLYShXq2l+UdwYEbhm4UdVaiGepss=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4018 (0xfb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Jul 2 17:43:48 2025 GMT Not After : Jul 9 17:43:48 2025 GMT Subject: CN=68656fd5-0663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:9d:98:ef:26:40:e3:1a:3d:77:bc:7d:ad: b6:c7:0a:64:6b:13:e5:94:46:51:63:47:ed:e5:d0: 33:dd:42:d1:4c:f3:28:b6:95:e5:26:71:fb:ca:67: 5b:32:11:62:f6:52:a9:40:3f:27:7b:a1:d0:b2:97: cc:f0:ff:7e:97:f9:39:81:a3:13:7e:ab:3d:6f:59: 4d:5b:9a:72:5b:6b:20:5e:3a:90:76:a7:00:37:d5: c7:99:8e:1b:d8:a2:8f:b6:63:8f:ad:b7:7e:67:3e: 8d:76:d6:f4:8d:50:8b:13:b4:fc:7b:94:9b:2c:e8: dc:1a:a2:d7:f8:50:18:99:95:71:3b:60:63:c8:dc: 18:46:08:3f:71:df:4b:bf:f5:e0:12:b0:28:f6:4b: 2c:a2:f5:4f:90:04:0d:ed:db:ac:9c:a1:7d:54:18: da:5e:64:05:ae:6f:61:f5:a5:9a:1f:20:be:85:2b: 13:eb:cf:c7:1b:56:d6:53:46:73:45:e1:8c:af:eb: 7f:bd:18:b3:c0:0f:10:e7:9f:19:c3:6d:e4:f5:07: 30:3b:a5:cb:74:e4:f6:c4:46:f8:e2:aa:41:db:79: 0d:ab:44:73:cf:ec:2b:3d:ac:6f:c8:19:2a:d0:e7: 98:24:24:a1:14:79:e2:2a:e0:42:09:d9:fc:66:21: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:93:24:3C:FB:AA:5E:A0:4F:21:11:9F:14:94:06:C6:F6:A7:00 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d8:a2:7b:b3:e3:2c:ac:8d:27:c9:11:9f:b4:2e:3a:33:ad: a1:e0:b3:ab:f6:e1:eb:6e:5e:fc:27:e3:d3:49:ba:a8:98:40: 42:54:37:a2:60:9a:b6:57:61:85:2b:11:21:cb:a2:4e:3d:f2: 22:3c:77:93:20:cc:1e:b8:ca:18:a7:50:a9:0b:7a:af:f1:97: 74:6c:9c:e7:6c:db:0f:b7:5f:08:44:12:96:23:69:6f:67:09: 92:66:bf:bb:41:8c:90:e4:11:fc:3a:18:2d:da:a9:45:d5:a3: 6e:ad:09:49:8f:ed:9f:05:5e:e8:85:1b:af:76:a6:b7:0b:97: 65:ae:87:b6:d6:5e:a9:2d:40:a4:f7:dd:50:b9:77:5d:fa:89: e5:55:a6:35:3a:85:e5:f6:f7:84:5b:f3:d5:a8:a1:d1:ee:d1: b1:62:31:f0:9a:cb:00:5e:7f:68:0b:5e:9e:7e:5f:ef:b0:3a: b4:7d:b1:9c:3c:63:8d:eb:21:c0:42:54:a9:0b:4f:eb:56:b3: 62:8a:ec:f8:40:a6:a0:25:6b:63:b5:02:73:c9:14:73:bc:ad: 17:e0:99:7f:36:69:d3:f7:ec:b7:76:0c:7e:62:56:c8:2d:82: 62:70:2e:4a:c5:c2:9e:3d:9a:4b:71:b6:97:16:26:7a:29:1b: a2:89:db:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNzAyMTc0MzQ4WhcNMjUwNzA5MTc0MzQ4WjAYMRYwFAYD VQQDEw02ODY1NmZkNS0wNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjudmO8mQOMaPXe8fa22xwpkaxPllEZRY0ft5dAz3ULRTPMotpXlJnH7ymdb MhFi9lKpQD8ne6HQspfM8P9+l/k5gaMTfqs9b1lNW5pyW2sgXjqQdqcAN9XHmY4b 2KKPtmOPrbd+Zz6Ndtb0jVCLE7T8e5SbLOjcGqLX+FAYmZVxO2BjyNwYRgg/cd9L v/XgErAo9kssovVPkAQN7dusnKF9VBjaXmQFrm9h9aWaHyC+hSsT68/HG1bWU0Zz ReGMr+t/vRizwA8Q558Zw23k9QcwO6XLdOT2xEb44qpB23kNq0Rzz+wrPaxvyBkq 0OeYJCShFHniKuBCCdn8ZiH95wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMWkyQ8 +6peoE8hEZ8UlAbG9qcAMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD2KJ7s+MsrI0nyRGftC46M62h4LOr9uHrbl78J+PTSbqomEBCVDei YJq2V2GFKxEhy6JOPfIiPHeTIMweuMoYp1CpC3qv8Zd0bJznbNsPt18IRBKWI2lv ZwmSZr+7QYyQ5BH8Ohgt2qlF1aNurQlJj+2fBV7ohRuvdqa3C5dlroe21l6pLUCk 991QuXdd+onlVaY1OoXl9veEW/PVqKHR7tGxYjHwmssAXn9oC16efl/vsDq0fbGc PGON6yHAQlSpC0/rVrNiiuz4QKagJWtjtQJzyRRzvK0X4Jl/NmnT9+y3dgx+YlbI LYJicC5KxcKePZpLcbaXFiZ6KRuiiduS -----END CERTIFICATE-----Generated at Thu Jul 3 21:47:35 2025 by rpki-client