$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: WSsYgBsYG00Olw1bwTy4Piqvn3KdP3Ilhoj8DN0D0Qs= Subject key identifier: 46:FD:84:8A:30:5B:CE:89:CD:6E:66:9C:CE:99:C5:CE:35:D3:4F:01 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 07EA Signing time: Mon 30 Jun 2025 21:15:02 +0000 Manifest this update: Mon 30 Jun 2025 21:15:01 +0000 Manifest next update: Mon 07 Jul 2025 21:15:01 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: geuV5ZA4mJVzz+pjQ7SrWYpCLYuowU39KS9mjGOoxCM=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Jun 30 21:15:01 2025 GMT Not After : Jul 7 21:15:01 2025 GMT Subject: CN=6862fe56-9e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:58:31:0a:e3:41:e3:b5:ce:a8:f8:b7:83: db:45:34:b4:a6:37:61:6b:23:4a:a8:86:47:9a:06: ff:65:cc:fa:3d:a9:6f:aa:55:21:17:5d:34:6a:82: 54:f6:be:4d:5a:45:84:d8:03:7f:fd:cf:4e:f1:c5: 6e:71:13:d5:8a:b6:1d:30:89:a6:14:b9:be:d8:77: 40:ae:81:aa:c2:2b:39:50:21:ae:4a:90:80:c6:29: 6c:13:9e:26:77:3a:fd:22:97:2b:0a:a2:e0:90:d1: 7a:b1:92:19:2d:6b:4d:f2:30:c1:1f:0e:ca:29:d4: fb:9e:2a:ec:f0:d3:63:6c:f5:b5:c3:25:31:bb:72: 76:b5:c4:a9:c4:8d:0c:c4:f2:36:56:c8:34:34:7e: e3:f6:76:b7:97:46:46:01:18:1c:56:39:fc:d0:49: 85:ef:40:83:9b:62:82:48:27:58:a0:03:d2:60:ae: c4:d3:57:4c:22:74:53:a3:3e:a3:a4:d8:3b:fa:30: b4:7f:38:83:18:26:45:bc:7e:1f:36:45:ba:43:b7: 96:25:e7:e1:0d:20:5a:6a:d9:1d:1b:6b:83:e4:05: 53:d8:f9:96:27:d7:63:25:55:17:2d:f1:a6:0f:f0: 95:a2:cb:35:d9:ed:58:71:14:d2:54:71:db:2a:fd: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:84:8A:30:5B:CE:89:CD:6E:66:9C:CE:99:C5:CE:35:D3:4F:01 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:02:14:21:c8:53:dd:2f:12:15:b5:fb:01:62:b5:8c:ab:8a: d1:20:99:e5:6c:da:85:11:4a:da:69:e3:99:77:d0:60:f1:ac: db:49:ad:8c:45:57:36:cd:e5:75:88:65:78:b3:53:a9:71:0f: 8a:bd:4a:5f:eb:e7:f2:05:ea:0d:c6:c9:69:56:39:c5:d0:1a: 72:71:05:f7:35:19:a7:5d:18:e6:54:fc:4b:b6:76:58:16:56: 6c:07:59:3e:d9:e9:b2:89:f7:89:6f:e0:1e:05:93:0d:c6:00: ca:b1:09:c9:2a:4e:32:6a:97:74:a9:77:32:6b:8d:8c:cb:75: 94:5d:8b:4e:75:1f:0b:51:e5:a4:b7:98:9c:4f:3e:c0:70:3e: 31:8f:2e:58:f2:4d:e0:f8:fb:1b:b9:38:ee:f6:96:7d:13:c4: 1d:09:78:f5:b8:02:09:b7:a5:82:d1:1d:21:42:c6:8b:ca:86: b0:c7:37:c9:b5:0f:7e:51:a8:fe:7c:a2:83:9b:42:46:4e:89: 20:ee:77:28:2f:07:a2:97:90:d4:3f:87:0f:1d:34:9c:25:16: b0:cb:75:88:99:c3:25:2e:b0:bd:f1:a5:c8:ce:40:0d:2a:c5: 8c:59:e4:3e:b4:9e:6d:99:0a:8b:50:b3:7b:41:c9:39:51:ad: a2:b0:b0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUwNjMwMjExNTAxWhcNMjUwNzA3MjExNTAxWjAYMRYwFAYD VQQDEw02ODYyZmU1Ni05ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUNYMQrjQeO1zqj4t4PbRTS0pjdhayNKqIZHmgb/Zcz6PalvqlUhF100aoJU 9r5NWkWE2AN//c9O8cVucRPVirYdMImmFLm+2HdAroGqwis5UCGuSpCAxilsE54m dzr9IpcrCqLgkNF6sZIZLWtN8jDBHw7KKdT7nirs8NNjbPW1wyUxu3J2tcSpxI0M xPI2Vsg0NH7j9na3l0ZGARgcVjn80EmF70CDm2KCSCdYoAPSYK7E01dMInRToz6j pNg7+jC0fziDGCZFvH4fNkW6Q7eWJefhDSBaatkdG2uD5AVT2PmWJ9djJVUXLfGm D/CVoss12e1YcRTSVHHbKv1CzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb9hIow W86JzW5mnM6Zxc41008BMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFAhQhyFPdLxIVtfsBYrWMq4rRIJnlbNqFEUraaeOZd9Bg8azbSa2M RVc2zeV1iGV4s1OpcQ+KvUpf6+fyBeoNxslpVjnF0BpycQX3NRmnXRjmVPxLtnZY FlZsB1k+2emyifeJb+AeBZMNxgDKsQnJKk4yapd0qXcya42My3WUXYtOdR8LUeWk t5icTz7AcD4xjy5Y8k3g+PsbuTju9pZ9E8QdCXj1uAIJt6WC0R0hQsaLyoawxzfJ tQ9+Uaj+fKKDm0JGTokg7ncoLweil5DUP4cPHTScJRawy3WImcMlLrC98aXIzkAN KsWMWeQ+tJ5tmQqLULN7Qck5Ua2isLBJ -----END CERTIFICATE-----Generated at Wed Jul 2 05:09:21 2025 by rpki-client