$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json) Hash identifier: Fbfl9TmlFAi9ihtaBZNeQIoJdylL8Y+E7TfZn25XrWo= Subject key identifier: 68:47:ED:3F:30:CF:AD:07:3B:81:09:8C:4D:D2:9F:2C:5F:BF:0A:F7 Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft Manifest number: 51 Signing time: Sun 29 Jun 2025 06:18:54 +0000 Manifest this update: Sun 29 Jun 2025 06:18:54 +0000 Manifest next update: Sun 06 Jul 2025 06:18:54 +0000 Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: 4JHWwwGLZ/QOM/j4iIuCC69TmyF37p1pmoUVWVuIBLU=) 2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: Jun 29 06:18:54 2025 GMT Not After : Jul 6 06:18:54 2025 GMT Subject: CN=6860dace-ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:6f:46:d2:6a:c6:32:21:ab:5a:96:5b:d1: 0d:a8:71:fd:72:c0:e2:33:f1:78:0c:e3:d5:14:20: a9:74:78:d4:a9:22:cf:8d:23:0b:f7:71:23:41:38: 6f:4e:35:3a:81:d8:81:b0:af:f7:4e:15:11:de:d3: fd:3f:be:6c:67:d3:dd:51:21:1f:fe:81:59:0b:fb: 13:cb:db:d9:75:cd:dd:9d:78:1f:71:d0:68:cd:22: b4:f2:4f:a5:0a:85:45:6a:e0:c1:c5:24:ef:e1:e3: 5f:8d:bc:87:e6:53:53:38:90:ef:2e:47:64:39:cc: 4d:d6:3b:03:e6:f5:da:c2:1a:2c:c5:43:37:8b:87: 06:20:46:9b:b5:ee:9e:f5:cd:9e:54:6b:a8:e8:cd: 4c:cb:fb:d3:60:0c:d3:e3:33:4f:82:f5:9a:5d:e8: 01:a8:ba:73:a1:2d:d4:24:ff:7d:0b:38:f4:b2:18: 8e:09:27:34:2d:45:17:4c:15:7f:ae:44:40:8d:f4: 3e:63:09:15:45:15:af:03:42:41:c1:e2:2f:16:cc: 58:d7:fa:58:7a:02:11:d7:6e:b3:2d:f8:9e:27:c2: 5f:99:55:6c:0e:79:01:08:f7:35:99:6f:89:4c:f9: 9d:33:f7:5b:9a:ca:ea:08:ee:60:ab:ad:f1:32:d0: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:ED:3F:30:CF:AD:07:3B:81:09:8C:4D:D2:9F:2C:5F:BF:0A:F7 X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a9:89:e4:0d:fe:b8:01:60:a4:b1:6d:dd:24:c5:bc:0a:c4: 74:3e:cf:04:88:a1:3d:5e:39:54:4d:76:8c:e1:18:68:cc:ae: 70:a6:81:8c:b2:00:ee:cf:aa:1d:22:0b:81:ea:b7:16:19:db: e1:2c:2c:4d:e0:d7:6a:84:ab:a9:c8:6e:16:25:a0:ee:39:e7: 98:04:49:71:72:29:08:df:2d:18:de:3e:4c:35:32:b2:7e:28: d7:86:9f:06:fb:41:0a:fe:a6:79:99:45:39:21:61:b0:c3:b1: 4d:36:bc:10:09:8f:b8:e5:96:7a:8d:36:35:c0:2d:a4:0e:90: 88:d3:00:7f:cc:10:21:f4:05:d4:07:19:e2:d8:4b:45:64:52: f9:3b:25:44:89:0e:f8:11:75:fb:ee:e7:fa:fd:7a:b7:b7:87: bf:1d:b3:ed:d2:55:82:ae:2b:cf:ea:a6:75:2a:f4:5b:f1:f7: 5a:f8:e6:b2:af:83:14:59:bc:ef:cc:07:42:7d:01:36:0b:84: b8:1d:97:7d:0a:37:82:39:33:8e:1f:e9:b5:51:c7:7d:38:9c: 34:e8:b3:0a:8a:3d:56:f7:26:bb:bb:f5:34:8c:8a:b8:e9:10: b9:51:da:92:26:02:7a:01:3f:9f:fe:3b:99:ef:85:39:df:95: ed:5a:5a:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy RUI3RkEyMDAeFw0yNTA2MjkwNjE4NTRaFw0yNTA3MDYwNjE4NTRaMBgxFjAUBgNV BAMTDTY4NjBkYWNlLWVmMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs9m9G0mrGMiGrWpZb0Q2ocf1ywOIz8XgM49UUIKl0eNSpIs+NIwv3cSNBOG9O NTqB2IGwr/dOFRHe0/0/vmxn091RIR/+gVkL+xPL29l1zd2deB9x0GjNIrTyT6UK hUVq4MHFJO/h41+NvIfmU1M4kO8uR2Q5zE3WOwPm9drCGizFQzeLhwYgRpu17p71 zZ5Ua6jozUzL+9NgDNPjM0+C9Zpd6AGounOhLdQk/30LOPSyGI4JJzQtRRdMFX+u RECN9D5jCRVFFa8DQkHB4i8WzFjX+lh6AhHXbrMt+J4nwl+ZVWwOeQEI9zWZb4lM +Z0z91uayuoI7mCrrfEy0I7/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaEftPzDP rQc7gQmMTdKfLF+/CvcwHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAepieQN/rgBYKSxbd0kxbwKxHQ+zwSIoT1eOVRNdozhGGjMrnCmgYyy AO7Pqh0iC4HqtxYZ2+EsLE3g12qEq6nIbhYloO4555gESXFyKQjfLRjePkw1MrJ+ KNeGnwb7QQr+pnmZRTkhYbDDsU02vBAJj7jllnqNNjXALaQOkIjTAH/MECH0BdQH GeLYS0VkUvk7JUSJDvgRdfvu5/r9ere3h78ds+3SVYKuK8/qpnUq9Fvx91r45rKv gxRZvO/MB0J9ATYLhLgdl30KN4I5M44f6bVRx304nDToswqKPVb3Jru79TSMirjp ELlR2pImAnoBP5/+O5nvhTnfle1aWoI= -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:09 2025 by rpki-client