$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: xBc8IsK/pBYtxRJ0CGNVvSW8y1J/CYTpFOEXtG9tKWU= Subject key identifier: B9:CD:76:46:6A:88:DD:A4:5A:76:E5:67:E7:9B:95:E0:56:94:23:49 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 6E Signing time: Sun 01 Jun 2025 06:38:31 +0000 Manifest this update: Sun 01 Jun 2025 06:38:30 +0000 Manifest next update: Sun 08 Jun 2025 06:38:30 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: zx/T0xciYSs1wI/Xu/yfg8l6KLjP07l5lm2f4HX2LUw=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Jun 1 06:38:30 2025 GMT Not After : Jun 8 06:38:30 2025 GMT Subject: CN=683bf566-ad6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:47:a9:97:a9:05:a8:57:9b:35:cf:f6:79: 18:70:9a:2b:ce:c5:34:74:28:56:2f:52:d4:88:b1: 79:86:1b:b3:cc:6d:b5:03:20:90:75:a4:28:c4:73: f1:7b:aa:ac:45:98:c6:60:eb:97:5e:84:17:91:d4: 87:b3:1a:42:30:11:f6:d9:ed:ae:f5:1f:ea:83:87: 7a:21:b6:ce:7c:08:b0:b5:ab:43:5c:1b:81:cc:21: fa:a2:93:20:5c:30:10:7d:f0:90:a7:2a:fa:91:8b: 7a:15:35:e9:30:f3:01:f8:a7:1e:00:11:0d:f6:94: 8a:df:58:47:80:e3:07:2e:ae:a2:df:4e:36:17:8a: ba:b4:65:b9:80:e9:89:4c:26:09:03:7b:e5:f6:dd: d8:2e:ec:e2:22:7c:ec:74:a1:52:b0:f1:10:48:bf: 11:27:7a:fe:cb:74:1c:b9:11:b2:b3:55:a1:75:26: 38:f0:47:fa:6d:7e:6e:04:ac:8f:39:56:4c:59:eb: 51:b4:e0:56:2f:d1:82:38:93:ac:c1:8a:e8:bb:3a: a1:bf:4e:f8:18:a0:c4:17:ea:11:ef:61:ea:2f:a5: 64:82:92:b0:18:55:9c:05:52:4f:80:37:ef:fb:e5: 14:27:56:89:1d:4d:90:fc:6d:34:ef:f1:aa:c7:5a: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CD:76:46:6A:88:DD:A4:5A:76:E5:67:E7:9B:95:E0:56:94:23:49 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:90:84:14:23:8a:69:20:fe:9b:6a:c2:db:b0:db:d7:ee:00: 60:fc:3a:a5:90:f0:f5:2c:d1:7a:dc:ec:f0:af:da:1e:96:48: 8f:47:1f:b3:aa:5e:fa:d2:63:e4:cc:4a:29:5e:f1:e2:e6:34: 34:f5:15:f3:44:28:fe:21:eb:43:02:f4:a4:a7:ee:f8:ba:12: 33:de:7a:c0:72:65:c7:16:8e:b7:6a:bf:7c:95:e2:d6:7a:5b: 4f:1a:34:96:d6:08:7f:08:ca:28:45:50:7b:c0:ee:cf:90:86: fc:82:87:38:76:ab:b2:5d:33:d4:6c:79:7d:da:35:bf:69:cf: d1:54:03:a5:3a:32:3d:ee:2a:56:82:ba:fd:be:6d:af:82:20: 00:55:be:31:9f:d1:df:ad:d7:d1:1c:29:1e:61:04:a8:58:58: 80:4d:61:6b:a1:10:70:60:1f:ed:fc:84:30:19:02:61:ca:2e: 47:92:b1:24:84:0a:95:6a:d6:fd:f2:e8:03:a7:f5:74:2d:86: eb:7f:60:58:c9:1d:6d:cd:54:13:68:90:96:5f:14:a8:62:2d: bf:18:12:4a:d3:f2:8f:e2:0f:5d:0d:c1:9d:98:67:90:d8:8c: 7e:06:6a:27:5f:a9:5c:27:92:94:c9:c8:72:f1:c0:da:1a:0d: 96:a9:37:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNTA2MDEwNjM4MzBaFw0yNTA2MDgwNjM4MzBaMBgxFjAUBgNV BAMTDTY4M2JmNTY2LWFkNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7FEepl6kFqFebNc/2eRhwmivOxTR0KFYvUtSIsXmGG7PMbbUDIJB1pCjEc/F7 qqxFmMZg65dehBeR1IezGkIwEfbZ7a71H+qDh3ohts58CLC1q0NcG4HMIfqikyBc MBB98JCnKvqRi3oVNekw8wH4px4AEQ32lIrfWEeA4wcurqLfTjYXirq0ZbmA6YlM JgkDe+X23dgu7OIifOx0oVKw8RBIvxEnev7LdBy5EbKzVaF1JjjwR/ptfm4ErI85 VkxZ61G04FYv0YI4k6zBiui7OqG/TvgYoMQX6hHvYeovpWSCkrAYVZwFUk+AN+/7 5RQnVokdTZD8bTTv8arHWoA1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuc12RmqI 3aRaduVn55uV4FaUI0kwHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACqQhBQjimkg/ptqwtuw29fuAGD8OqWQ8PUs0Xrc7PCv2h6WSI9HH7Oq XvrSY+TMSile8eLmNDT1FfNEKP4h60MC9KSn7vi6EjPeesByZccWjrdqv3yV4tZ6 W08aNJbWCH8IyihFUHvA7s+QhvyChzh2q7JdM9RseX3aNb9pz9FUA6U6Mj3uKlaC uv2+ba+CIABVvjGf0d+t19EcKR5hBKhYWIBNYWuhEHBgH+38hDAZAmHKLkeSsSSE CpVq1v3y6AOn9XQthut/YFjJHW3NVBNokJZfFKhiLb8YEkrT8o/iD10NwZ2YZ5DY jH4GaidfqVwnkpTJyHLxwNoaDZapN7E= -----END CERTIFICATE-----Generated at Mon Jun 2 20:27:50 2025 by rpki-client