$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: o9oR1BD8ABJiNWFna4pF7oDvlhcoNfLCQCJt7U2htOE= Subject key identifier: 18:6B:18:D7:27:9A:79:53:06:CC:20:7D:70:13:64:DD:23:4E:EB:D0 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 0199 Signing time: Mon 05 May 2025 02:21:50 +0000 Manifest this update: Mon 05 May 2025 02:21:49 +0000 Manifest next update: Mon 12 May 2025 02:21:49 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: O+PtQn2nezci4xOstZ307A4Wk2ekwDu9gR7Acgy0lgU=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: May 5 02:21:49 2025 GMT Not After : May 12 02:21:49 2025 GMT Subject: CN=681820bd-fbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:58:ba:69:78:76:f2:e3:00:72:5b:51:7d:10: e6:ee:b8:1a:51:f7:e5:fe:7f:71:23:9e:bd:b0:bb: 21:c5:6c:d3:46:fc:33:16:e2:91:5b:e5:d6:67:00: d3:b7:74:f5:46:a8:e3:6f:eb:83:8a:30:87:ca:4d: d0:35:18:bd:29:a1:43:f8:08:ae:73:11:5c:45:80: 22:01:50:c1:15:55:11:e7:38:32:1e:72:e3:cf:02: 9a:88:02:d8:21:26:a0:2a:d7:02:c2:70:3f:5d:77: 2c:e3:09:2a:30:a8:54:9e:90:8f:0f:3b:3f:9b:1f: 46:97:b9:a6:99:84:96:cc:2e:5e:8d:06:ee:1d:3a: 6c:61:b9:e3:a1:d2:f0:4f:45:51:0e:1f:82:11:dd: 9f:ec:40:26:49:35:6d:f9:9d:9f:4b:2e:bd:d2:6d: da:e8:95:19:a9:1c:17:c0:a7:73:ec:00:0e:7c:fd: 5a:e6:a9:7e:5d:99:f4:f8:0f:72:e7:aa:71:9e:84: 14:4a:47:55:1f:11:bd:88:89:9f:5e:1b:64:5f:2f: 9a:2f:aa:af:d2:e0:6e:ff:c5:53:35:c6:48:f2:a1: be:ec:ac:a3:0c:b3:4e:c7:18:67:85:53:e8:5e:86: f6:f6:d2:8f:45:2b:79:45:7d:af:ef:d7:14:49:94: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6B:18:D7:27:9A:79:53:06:CC:20:7D:70:13:64:DD:23:4E:EB:D0 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:fc:05:37:dd:f1:eb:65:18:2e:6f:bd:34:73:74:62:9d:ad: ba:b7:e5:47:89:d7:49:c2:73:f2:a9:5f:dc:61:38:7a:3f:18: f7:1a:eb:0b:f8:89:40:36:fb:b4:ac:0e:85:ec:60:a9:b4:83: ff:e9:e2:15:83:f7:76:16:bf:cd:19:0e:42:f9:f7:f2:e6:35: 90:0b:03:f3:2e:15:7e:e2:cb:b0:95:47:fa:7e:86:b7:a8:8f: 65:cf:e3:13:99:df:23:27:0c:27:f8:cd:12:fa:b0:68:15:7b: 53:3e:79:1a:5d:61:c5:79:9b:92:39:8d:0f:89:f7:c2:e7:ff: af:62:b8:64:ee:e9:74:f2:ff:40:d8:e7:a3:42:ea:fa:37:57: 5a:6e:3f:82:14:fc:76:76:eb:bf:f4:a9:79:f3:3b:c5:dc:6c: ba:a3:2d:e3:56:27:b4:32:cf:6f:cc:d9:77:2f:ee:f0:3a:63: b6:06:3c:5b:70:be:1d:72:50:56:76:47:aa:99:03:06:db:57: 3b:2f:98:75:f0:3e:a1:fb:38:ee:67:2b:a8:0d:01:72:ff:24: 4f:90:2e:74:cf:49:f2:aa:79:19:b2:06:64:95:ba:7a:d0:7b: 80:07:62:ee:44:f1:6c:06:13:61:3f:64:d6:62:51:6a:66:73: cf:7e:3f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUwNTA1MDIyMTQ5WhcNMjUwNTEyMDIyMTQ5WjAYMRYwFAYD VQQDEw02ODE4MjBiZC1mYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA91i6aXh28uMAcltRfRDm7rgaUffl/n9xI569sLshxWzTRvwzFuKRW+XWZwDT t3T1Rqjjb+uDijCHyk3QNRi9KaFD+AiucxFcRYAiAVDBFVUR5zgyHnLjzwKaiALY ISagKtcCwnA/XXcs4wkqMKhUnpCPDzs/mx9Gl7mmmYSWzC5ejQbuHTpsYbnjodLw T0VRDh+CEd2f7EAmSTVt+Z2fSy690m3a6JUZqRwXwKdz7AAOfP1a5ql+XZn0+A9y 56pxnoQUSkdVHxG9iImfXhtkXy+aL6qv0uBu/8VTNcZI8qG+7KyjDLNOxxhnhVPo Xob29tKPRSt5RX2v79cUSZRx8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhrGNcn mnlTBswgfXATZN0jTuvQMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm/AU33fHrZRgub700c3Rina26t+VHiddJwnPyqV/cYTh6Pxj3GusL +IlANvu0rA6F7GCptIP/6eIVg/d2Fr/NGQ5C+ffy5jWQCwPzLhV+4suwlUf6foa3 qI9lz+MTmd8jJwwn+M0S+rBoFXtTPnkaXWHFeZuSOY0PiffC5/+vYrhk7ul08v9A 2OejQur6N1dabj+CFPx2duu/9Kl58zvF3Gy6oy3jVie0Ms9vzNl3L+7wOmO2Bjxb cL4dclBWdkeqmQMG21c7L5h18D6h+zjuZyuoDQFy/yRPkC50z0nyqnkZsgZklbp6 0HuAB2LuRPFsBhNhP2TWYlFqZnPPfj9b -----END CERTIFICATE-----Generated at Mon May 5 19:58:31 2025 by rpki-client