$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: P/mSv1DdCB5pj/1XYq3uDSZ2RJaKLttd+5xYguxbow8= Subject key identifier: 8B:8A:C2:73:10:0E:16:DC:58:E4:5C:ED:F7:62:69:A3:F5:8B:81:15 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 045B Signing time: Mon 12 May 2025 23:57:50 +0000 Manifest this update: Mon 12 May 2025 23:57:50 +0000 Manifest next update: Mon 19 May 2025 23:57:50 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: TE/an5JKD+pElrNhkOvtiYWvK73nH7n21BHowDJnvVo=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: May 12 23:57:50 2025 GMT Not After : May 19 23:57:50 2025 GMT Subject: CN=68228afe-9ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:2c:f9:9a:58:ba:df:14:aa:55:72:b0:57: 30:96:e6:77:28:73:7e:23:ee:b7:87:2e:ef:d6:6d: b1:73:c3:62:62:fb:8a:67:6f:99:78:12:d9:18:f6: fc:e2:77:5b:e0:ac:d9:5b:0c:23:90:ab:a0:d1:b6: d1:82:24:01:4f:1f:e0:10:26:07:53:c2:a7:1d:43: 75:6b:69:e0:95:47:1e:4f:ad:66:f7:85:b9:5d:d0: 92:53:71:35:78:50:bf:62:ea:93:9f:47:3d:06:0a: 8f:9e:35:6e:65:7f:f0:a7:ca:87:96:05:b7:63:c4: 07:b4:0e:8b:c8:13:11:00:e1:44:76:72:be:c9:8b: 7a:2a:40:95:91:f4:44:26:20:9d:38:aa:6e:a2:ee: 46:37:55:dc:6b:62:b5:db:a9:4b:29:98:6b:30:1b: 9b:aa:d5:dd:63:6f:c8:e9:75:e4:7a:05:5f:ad:49: e8:b4:33:9b:ff:bb:53:60:76:95:5f:8a:61:a3:0a: 13:a2:01:6b:e8:07:67:07:e9:30:11:58:39:a8:87: 8e:44:d1:3c:f8:c8:ef:f6:61:05:ab:0e:b0:00:10: 9b:57:68:95:d9:51:d1:32:21:f2:8b:d5:15:cf:de: c9:8f:96:cd:72:32:1e:e5:d8:bc:db:e2:be:8d:68: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:C2:73:10:0E:16:DC:58:E4:5C:ED:F7:62:69:A3:F5:8B:81:15 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:32:91:01:9a:2e:f6:43:a3:4d:32:7b:ae:d7:57:d5:14:a3: ba:6e:0c:83:d3:9a:de:64:85:84:2c:80:08:58:1b:e4:46:a3: 9b:57:07:85:83:a1:51:21:17:ad:c3:7d:f8:b4:aa:e6:f6:be: ac:74:85:99:0a:c3:17:d9:3d:b1:5b:e8:71:93:a5:10:12:c7: c2:a1:b9:1f:e9:15:1d:32:ad:c7:84:7a:7d:99:55:0c:d4:aa: 7a:c6:45:86:e9:4c:4e:aa:a0:56:cd:b6:a3:80:2b:84:b5:8f: 4c:33:3d:0f:c2:88:81:6c:7c:ff:da:72:f3:a3:31:a6:25:65: 87:f1:ab:0a:d1:8d:c2:d1:8b:d5:de:1f:85:b0:15:aa:e6:79: 15:d8:b4:69:37:a1:c3:ce:0c:4e:65:8a:4f:62:b9:b0:28:01: 62:de:bd:20:be:b7:ba:fb:04:d0:f9:3b:50:13:e1:49:8c:fc: c1:6a:34:42:2e:70:48:f2:68:36:7c:ca:c1:ee:30:ea:01:8d: 25:17:65:c6:52:c8:68:72:11:a2:55:48:c8:a1:b3:7d:43:89: c8:31:e3:fc:6c:5d:c0:9c:46:ef:3f:e9:90:41:2a:85:dc:83: 77:61:65:c9:78:b2:b9:34:6c:24:d9:ae:05:62:a5:d2:93:8c: 85:b9:49:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwNTEyMjM1NzUwWhcNMjUwNTE5MjM1NzUwWjAYMRYwFAYD VQQDEw02ODIyOGFmZS05ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDQs+ZpYut8UqlVysFcwluZ3KHN+I+63hy7v1m2xc8NiYvuKZ2+ZeBLZGPb8 4ndb4KzZWwwjkKug0bbRgiQBTx/gECYHU8KnHUN1a2nglUceT61m94W5XdCSU3E1 eFC/YuqTn0c9BgqPnjVuZX/wp8qHlgW3Y8QHtA6LyBMRAOFEdnK+yYt6KkCVkfRE JiCdOKpuou5GN1Xca2K126lLKZhrMBubqtXdY2/I6XXkegVfrUnotDOb/7tTYHaV X4phowoTogFr6AdnB+kwEVg5qIeORNE8+Mjv9mEFqw6wABCbV2iV2VHRMiHyi9UV z97Jj5bNcjIe5di82+K+jWhWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuKwnMQ DhbcWORc7fdiaaP1i4EVMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvMpEBmi72Q6NNMnuu11fVFKO6bgyD05reZIWELIAIWBvkRqObVweF g6FRIRetw334tKrm9r6sdIWZCsMX2T2xW+hxk6UQEsfCobkf6RUdMq3HhHp9mVUM 1Kp6xkWG6UxOqqBWzbajgCuEtY9MMz0PwoiBbHz/2nLzozGmJWWH8asK0Y3C0YvV 3h+FsBWq5nkV2LRpN6HDzgxOZYpPYrmwKAFi3r0gvre6+wTQ+TtQE+FJjPzBajRC LnBI8mg2fMrB7jDqAY0lF2XGUshochGiVUjIobN9Q4nIMeP8bF3AnEbvP+mQQSqF 3IN3YWXJeLK5NGwk2a4FYqXSk4yFuUlS -----END CERTIFICATE-----Generated at Tue May 13 22:57:24 2025 by rpki-client