$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: qWbDFCRU+/nokIGK6qCcBGtVVSDrTCyUU88rIJ+/Ncc= Subject key identifier: 93:AB:BB:93:20:89:E7:32:36:32:44:78:CD:EB:41:7C:B7:81:8F:B5 Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: E7 Signing time: Sun 11 May 2025 04:19:22 +0000 Manifest this update: Sun 11 May 2025 04:19:22 +0000 Manifest next update: Sun 18 May 2025 04:19:22 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: F8Msjja54qcgVyy6wbZ6yMeeHI0n9w6Bi/3oZY0MxSA=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: May 11 04:19:22 2025 GMT Not After : May 18 04:19:22 2025 GMT Subject: CN=6820254a-2976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:cd:cc:c5:f8:76:4e:5e:1e:53:44:f4:07: fd:8b:06:8e:6f:3a:ce:1d:71:58:45:b1:24:5e:20: e2:b7:aa:37:5d:22:12:21:be:90:66:1a:64:31:ca: 85:1f:4b:e7:7f:49:52:2e:cc:3f:1d:0f:8a:24:0b: 13:e3:7f:bd:c0:ef:6d:b4:86:8d:2a:ca:f8:8d:67: 50:3b:99:03:0a:d5:4d:12:5d:6b:86:39:9c:5e:7d: 2f:63:22:97:84:1f:8d:fd:16:00:a6:d0:09:10:ac: 05:cc:a7:63:0c:19:72:54:7a:35:57:15:d9:df:7f: b0:5e:fa:84:50:fd:11:ad:69:a2:51:04:df:03:74: b2:02:cd:40:0f:7e:90:92:31:bd:61:11:98:9b:3c: 92:62:26:fa:46:a8:e1:3f:dc:c0:8e:02:43:46:f8: 63:03:eb:8b:dc:4e:fa:82:04:b9:06:1c:28:a5:33: 15:69:ff:e7:01:b8:eb:d5:26:9d:03:de:ea:a4:dc: 8d:d3:87:97:ff:28:79:6b:2f:69:13:75:aa:e7:1b: 81:0d:b7:f2:20:bd:37:a1:dd:62:2a:4d:3a:b0:42: 73:fc:6e:ad:aa:70:97:49:e1:ba:24:58:c0:ee:9b: a0:df:fc:98:23:15:5f:47:e0:e7:b1:80:9f:8f:c4: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AB:BB:93:20:89:E7:32:36:32:44:78:CD:EB:41:7C:B7:81:8F:B5 X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:3f:9a:93:89:df:e5:84:ac:75:82:df:85:f8:a4:cf:ee: 26:d5:dc:00:88:cc:33:a7:86:54:bd:37:12:43:c9:14:84:29: 17:48:20:55:ad:4a:4f:c9:6e:27:f9:15:9b:f4:37:03:5e:69: 05:28:ae:b5:23:30:6c:28:b2:40:be:76:f5:9c:81:78:16:18: 7d:16:03:94:d9:e4:be:74:79:df:13:fa:ca:14:0d:37:f7:0e: 6d:ba:9d:0f:c1:3c:1a:de:45:77:2d:64:d4:54:a0:2d:1a:41: c2:16:2a:71:94:41:0f:27:3e:84:b0:f3:ce:f0:d5:3d:35:07: 07:79:ba:45:45:18:10:be:bd:71:ea:6a:ea:af:30:5d:ab:90: 93:93:5b:1b:b9:29:b2:b8:35:bc:cd:91:f9:1e:18:9c:dc:b8: 66:56:34:fb:8f:51:cb:2d:be:7c:54:e3:0a:58:52:e8:3d:03: 91:8e:60:f1:a6:a5:d8:8d:0a:ae:fe:2f:63:c6:90:df:dc:c0: 72:1e:54:f7:f0:f3:fe:76:39:9c:6f:ab:94:f1:f1:42:35:60: c3:b5:5c:a3:52:f5:eb:71:31:f6:7c:23:d5:75:21:49:63:cf: 91:9e:de:6f:7a:0b:66:a8:7a:a9:bc:16:41:52:5e:09:7a:21: b3:55:2f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwNTExMDQxOTIyWhcNMjUwNTE4MDQxOTIyWjAYMRYwFAYD VQQDEw02ODIwMjU0YS0yOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2bNzMX4dk5eHlNE9Af9iwaObzrOHXFYRbEkXiDit6o3XSISIb6QZhpkMcqF H0vnf0lSLsw/HQ+KJAsT43+9wO9ttIaNKsr4jWdQO5kDCtVNEl1rhjmcXn0vYyKX hB+N/RYAptAJEKwFzKdjDBlyVHo1VxXZ33+wXvqEUP0RrWmiUQTfA3SyAs1AD36Q kjG9YRGYmzySYib6RqjhP9zAjgJDRvhjA+uL3E76ggS5BhwopTMVaf/nAbjr1Sad A97qpNyN04eX/yh5ay9pE3Wq5xuBDbfyIL03od1iKk06sEJz/G6tqnCXSeG6JFjA 7pug3/yYIxVfR+DnsYCfj8SBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOru5Mg iecyNjJEeM3rQXy3gY+1MB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzIT+ak4nf5YSsdYLfhfikz+4m1dwAiMwzp4ZUvTcSQ8kUhCkXSCBV rUpPyW4n+RWb9DcDXmkFKK61IzBsKLJAvnb1nIF4Fhh9FgOU2eS+dHnfE/rKFA03 9w5tup0PwTwa3kV3LWTUVKAtGkHCFipxlEEPJz6EsPPO8NU9NQcHebpFRRgQvr1x 6mrqrzBdq5CTk1sbuSmyuDW8zZH5Hhic3LhmVjT7j1HLLb58VOMKWFLoPQORjmDx pqXYjQqu/i9jxpDf3MByHlT38PP+djmcb6uU8fFCNWDDtVyjUvXrcTH2fCPVdSFJ Y8+Rnt5vegtmqHqpvBZBUl4JeiGzVS8w -----END CERTIFICATE-----Generated at Mon May 12 11:45:13 2025 by rpki-client