$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: Z4jMF5nm0esY0GvfDz7x2RvKyyFgdd9ujY3T+9oTbYA= Subject key identifier: 3C:05:FF:E2:14:DF:5A:B6:F8:30:FD:B4:D2:1F:C5:33:43:9A:C2:56 Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 0938 Signing time: Mon 30 Jun 2025 20:24:56 +0000 Manifest this update: Mon 30 Jun 2025 20:24:56 +0000 Manifest next update: Mon 07 Jul 2025 20:24:56 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: xpG0gaFSPInXof2XaAhN2a03ShxRHOXks/kc8GkEtAE=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: F/lUPKZHFm1sIOo7h73Lh8+bzw8LraoeACifeBa4ogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: Jun 30 20:24:56 2025 GMT Not After : Jul 7 20:24:56 2025 GMT Subject: CN=6862f298-7a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:10:ac:91:52:20:f6:37:91:32:61:1b:0d: 9a:24:5b:c4:42:db:e8:10:a9:d6:cd:aa:c5:01:97: 9a:b7:22:33:05:02:8e:33:c4:ff:67:15:78:4c:4b: 99:85:7c:f3:96:01:df:76:34:b3:d0:5f:57:b0:d7: 4b:5f:46:91:ad:b6:e3:d9:24:e4:d9:7f:2c:32:00: 25:20:29:46:9e:dd:c2:67:99:5f:96:74:7f:bc:b1: 94:cf:08:36:b3:52:78:27:db:5c:3a:74:82:be:2a: a2:ce:4c:63:27:02:42:f9:a3:22:01:f7:0c:73:68: b7:a9:45:1e:72:87:15:76:bc:d5:ee:ab:6c:be:28: 93:7e:35:36:9e:98:16:a0:b2:b2:99:43:a7:54:ad: 8e:ff:0d:03:e2:48:78:5d:b4:74:ba:d7:4c:af:ac: c0:1d:87:9d:3b:8a:7b:2e:ff:98:a3:18:36:f3:c4: b3:9a:7d:73:4f:7a:cf:4c:be:e1:4e:6c:07:12:aa: e6:11:fc:8e:74:02:d6:18:45:6b:e7:2e:27:8b:47: 17:c6:55:ef:5b:e6:10:fe:7d:f5:cf:bb:41:ce:42: d1:3d:42:c3:7b:cb:eb:d9:f1:d0:44:87:8f:30:e0: 0d:57:9c:7f:eb:f3:78:cc:33:d1:02:ba:f3:5c:68: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:FF:E2:14:DF:5A:B6:F8:30:FD:B4:D2:1F:C5:33:43:9A:C2:56 X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:01:51:19:13:3c:a0:0a:26:7c:c7:0e:90:a2:76:7d:bb:df: 99:1d:ad:a9:ee:21:40:3d:54:9a:45:44:9a:06:42:9d:e0:36: bd:68:3b:87:16:7f:a3:46:7d:39:c9:60:d1:01:2d:d9:ce:e0: 7c:ed:e9:e6:5f:aa:5e:2c:c0:72:2b:81:89:b6:5b:e9:d5:69: b0:fa:41:7c:bd:9f:a7:f1:4b:4b:d7:79:4d:06:ea:bc:5e:75: bf:ee:30:b9:49:10:2c:83:c1:58:58:de:a3:b4:0a:00:dc:65: 52:60:ba:e3:dc:7e:4a:8d:92:0b:a4:38:f6:bf:01:f3:67:0f: 00:4d:66:23:97:b7:94:9b:c7:2d:d3:17:8c:55:a7:7f:da:1e: 15:68:0f:ad:36:7b:4d:ea:01:da:c2:bd:01:56:7c:ac:a9:03: f3:f5:04:10:ab:b7:44:31:43:45:7e:9f:c2:77:98:27:61:bb: 40:61:62:40:e9:f8:6b:5a:ac:ea:98:2c:b4:e4:1e:0d:f4:f4: 21:0d:90:48:66:13:11:04:61:77:1f:03:25:e1:fe:65:11:c2: c6:89:98:50:a6:1c:66:66:2c:27:75:b5:48:21:8c:1a:ae:aa: f0:fd:af:33:90:38:f7:3b:b9:23:e0:3b:d4:dd:32:d3:c7:51: 5e:f5:2b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjUwNjMwMjAyNDU2WhcNMjUwNzA3MjAyNDU2WjAYMRYwFAYD VQQDEw02ODYyZjI5OC03YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXwQrJFSIPY3kTJhGw2aJFvEQtvoEKnWzarFAZeatyIzBQKOM8T/ZxV4TEuZ hXzzlgHfdjSz0F9XsNdLX0aRrbbj2STk2X8sMgAlIClGnt3CZ5lflnR/vLGUzwg2 s1J4J9tcOnSCviqizkxjJwJC+aMiAfcMc2i3qUUecocVdrzV7qtsviiTfjU2npgW oLKymUOnVK2O/w0D4kh4XbR0utdMr6zAHYedO4p7Lv+Yoxg288Szmn1zT3rPTL7h TmwHEqrmEfyOdALWGEVr5y4ni0cXxlXvW+YQ/n31z7tBzkLRPULDe8vr2fHQRIeP MOANV5x/6/N4zDPRArrzXGj9nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwF/+IU 31q2+DD9tNIfxTNDmsJWMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyAVEZEzygCiZ8xw6QonZ9u9+ZHa2p7iFAPVSaRUSaBkKd4Da9aDuH Fn+jRn05yWDRAS3ZzuB87enmX6peLMByK4GJtlvp1Wmw+kF8vZ+n8UtL13lNBuq8 XnW/7jC5SRAsg8FYWN6jtAoA3GVSYLrj3H5KjZILpDj2vwHzZw8ATWYjl7eUm8ct 0xeMVad/2h4VaA+tNntN6gHawr0BVnysqQPz9QQQq7dEMUNFfp/Cd5gnYbtAYWJA 6fhrWqzqmCy05B4N9PQhDZBIZhMRBGF3HwMl4f5lEcLGiZhQphxmZiwndbVIIYwa rqrw/a8zkDj3O7kj4DvU3TLTx1Fe9Svi -----END CERTIFICATE-----Generated at Tue Jul 1 11:09:33 2025 by rpki-client