$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: /CA7kzzHT+hSW7J58sf7/FT6U8feOTxiuLzr4/e0ME4= Subject key identifier: 8D:51:29:E0:F9:26:C2:07:43:55:7B:01:D7:F7:0A:F5:5F:7A:B4:C7 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 075C Signing time: Fri 06 Jun 2025 21:42:06 +0000 Manifest this update: Fri 06 Jun 2025 21:42:05 +0000 Manifest next update: Fri 13 Jun 2025 21:42:05 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: wbp+iZ5DuspOnpfvIPBqhHfaO9cGXHG83u0GCnR31GE=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Jun 6 21:42:05 2025 GMT Not After : Jun 13 21:42:05 2025 GMT Subject: CN=684360ae-de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:a3:06:12:80:59:7c:2e:b6:c0:f6:8f:e8: 20:00:84:48:34:64:85:b6:dd:56:27:6a:78:84:d6: 8a:58:b2:8a:be:35:5c:db:1e:df:40:2e:f8:07:15: 2a:98:bc:99:83:83:2d:9c:26:26:6f:f6:b7:17:c2: 83:1a:ce:be:04:23:92:a0:8c:52:19:7c:91:b8:cf: ab:75:ba:9d:3c:aa:23:33:12:60:d1:d4:e7:09:90: 3b:87:17:36:db:fa:47:8f:54:9c:12:ec:f2:12:aa: 03:db:4a:fa:8c:28:27:f4:20:38:32:ac:5f:97:49: a6:ab:a4:50:cf:ef:8c:76:fc:be:5c:fb:f0:8f:0b: bb:7b:7a:9f:7d:d6:bc:1b:65:60:7a:b0:bb:08:0b: 9b:db:e8:c2:45:44:d9:4c:61:0d:af:46:a9:06:64: 77:13:44:11:53:cc:29:78:b3:54:10:52:84:3b:b2: 92:60:b5:85:cc:2b:79:78:24:76:41:24:f5:2a:a7: b1:c0:f5:9c:c1:6b:79:e8:68:b7:74:bd:4b:fd:ce: 96:2c:31:6a:a2:34:eb:61:ee:e1:5e:70:db:cf:c1: 2f:e5:a5:17:3a:12:62:a1:2d:3f:10:13:ad:dc:36: 6d:31:93:fb:c8:d8:28:a3:65:4b:7f:09:1e:1e:d7: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:51:29:E0:F9:26:C2:07:43:55:7B:01:D7:F7:0A:F5:5F:7A:B4:C7 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f8:5e:ba:64:2f:00:e6:4a:7d:13:57:d8:f9:c5:a6:c9:c1: 53:0d:21:2a:63:36:5e:c2:18:fb:ae:71:e0:65:60:4d:8e:f9: 5f:65:25:2a:ee:65:ff:2f:f4:4a:69:07:c9:88:2f:80:bf:ad: 10:1f:a7:3c:66:dd:c4:1f:67:ce:81:71:ab:09:44:37:41:89: dc:f6:dd:03:b4:c7:2c:f8:ca:db:14:f3:b5:98:2d:37:38:39: 5f:02:45:9e:4c:13:45:ed:00:40:7b:6d:2a:6f:64:e0:d5:7b: 89:08:72:df:cb:4a:5e:d0:b7:b5:7e:f2:07:ae:af:2a:fc:ce: 1a:bf:86:eb:3b:c4:6b:6e:4b:85:ac:9c:12:ff:82:a0:12:e6: d2:46:26:2f:79:a7:d4:dd:c5:4b:94:e3:2a:95:20:73:ef:57: cd:cf:fc:81:59:07:2c:81:35:a0:98:87:d7:7b:7c:1b:b4:90: 0b:2e:95:f7:ec:60:a4:ce:95:c8:0d:30:d9:3d:29:9e:91:98: 4c:e6:e4:e4:5c:8b:cd:c2:96:ab:b6:3c:f1:9a:af:3c:45:7c: 24:ef:58:0b:c9:0f:68:6e:99:0f:50:a2:09:d1:2c:42:4c:a2: 8d:5e:f8:fc:e3:42:a4:7e:6f:4d:61:be:a4:07:ac:06:0e:e9: 43:d3:51:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUwNjA2MjE0MjA1WhcNMjUwNjEzMjE0MjA1WjAYMRYwFAYD VQQDEw02ODQzNjBhZS1kZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WujBhKAWXwutsD2j+ggAIRINGSFtt1WJ2p4hNaKWLKKvjVc2x7fQC74BxUq mLyZg4MtnCYmb/a3F8KDGs6+BCOSoIxSGXyRuM+rdbqdPKojMxJg0dTnCZA7hxc2 2/pHj1ScEuzyEqoD20r6jCgn9CA4Mqxfl0mmq6RQz++Mdvy+XPvwjwu7e3qffda8 G2VgerC7CAub2+jCRUTZTGENr0apBmR3E0QRU8wpeLNUEFKEO7KSYLWFzCt5eCR2 QST1KqexwPWcwWt56Gi3dL1L/c6WLDFqojTrYe7hXnDbz8Ev5aUXOhJioS0/EBOt 3DZtMZP7yNgoo2VLfwkeHtf3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1RKeD5 JsIHQ1V7Adf3CvVferTHMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX+F66ZC8A5kp9E1fY+cWmycFTDSEqYzZewhj7rnHgZWBNjvlfZSUq 7mX/L/RKaQfJiC+Av60QH6c8Zt3EH2fOgXGrCUQ3QYnc9t0DtMcs+MrbFPO1mC03 ODlfAkWeTBNF7QBAe20qb2Tg1XuJCHLfy0pe0Le1fvIHrq8q/M4av4brO8RrbkuF rJwS/4KgEubSRiYveafU3cVLlOMqlSBz71fNz/yBWQcsgTWgmIfXe3wbtJALLpX3 7GCkzpXIDTDZPSmekZhM5uTkXIvNwpartjzxmq88RXwk71gLyQ9obpkPUKIJ0SxC TKKNXvj840Kkfm9NYb6kB6wGDulD01H4 -----END CERTIFICATE-----Generated at Sun Jun 8 09:16:04 2025 by rpki-client