$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json) Hash identifier: 6K3isyNERj/+5t4XOCFAMRm3BUb4vXXdl3RpFz1JUmg= Subject key identifier: 3F:10:49:51:06:1A:CA:35:F5:DF:1A:77:81:6B:AE:AC:87:87:D3:93 Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Certificate serial: 17DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft Manifest number: 17D3 Signing time: Mon 12 May 2025 16:30:02 +0000 Manifest this update: Mon 12 May 2025 16:30:01 +0000 Manifest next update: Mon 19 May 2025 16:30:01 +0000 Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: QLyRMSNfa2IHN14XATeMZiZwgfk2dEcHxJtpL5A1UN4=) 2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: KWbJbgpGfDdYPVO+KIuyWusqQxr6PU0FBc6ESlEd+IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6108 (0x17dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Validity Not Before: May 12 16:30:01 2025 GMT Not After : May 19 16:30:01 2025 GMT Subject: CN=6822220a-af34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:35:40:23:ac:fa:7b:32:b4:10:56:d6:e2:d6: ed:1d:36:19:b3:c5:86:be:94:bc:7f:27:8f:44:da: 68:ff:c3:4f:06:fa:ce:23:16:63:f3:54:81:a1:2f: 4a:8a:b1:7f:a1:62:03:7e:01:7f:54:30:74:fa:14: cb:52:2b:44:b1:54:4c:da:f3:f3:b6:9e:b2:7e:04: 90:ae:ba:6e:e9:5a:c6:d7:17:01:6d:25:8a:45:e7: 12:54:96:bf:e6:41:61:80:30:05:c2:c7:81:eb:d2: e0:bc:2a:e6:3e:2f:0a:18:13:d2:a4:ba:d1:39:3c: af:b8:13:cc:37:6f:93:e6:01:f0:8a:7b:bb:ed:0d: 54:1d:34:92:f1:52:e4:d7:61:b7:c4:99:b0:46:ca: 58:c8:d0:c4:53:53:e8:b5:01:90:f3:f3:84:91:39: d3:fb:9b:93:20:24:0c:03:59:ec:19:d9:6a:29:45: be:81:db:b9:99:c9:81:bb:17:9a:9c:bd:e4:38:83: 89:f0:48:50:7f:2f:bb:6d:c5:d9:82:38:99:5d:bf: bd:c9:df:59:60:f0:7f:6e:c9:c9:89:c0:39:42:48: a0:23:7f:2a:88:a7:49:86:69:70:e7:f7:bb:5a:94: 9e:92:96:56:18:44:c0:01:73:61:f2:f4:c6:65:c5: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:49:51:06:1A:CA:35:F5:DF:1A:77:81:6B:AE:AC:87:87:D3:93 X509v3 Authority Key Identifier: keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:1c:44:57:81:0a:d7:77:91:89:7c:27:03:e5:45:09:aa: 53:0c:03:81:cd:6f:ca:7e:e4:5b:5e:6d:0e:c3:6e:f4:bb:10: a7:64:4f:4b:7e:5a:cb:b8:00:c1:eb:a7:46:81:00:cc:d6:8d: a6:7a:9b:0a:97:2b:81:76:36:27:c6:41:45:67:bf:ff:7d:cf: c3:75:ca:2f:ff:00:b3:21:6e:c9:05:63:ed:40:7e:3b:07:b8: fb:b5:67:7d:d2:4a:30:3f:7a:f3:85:1e:e3:c3:4d:ed:20:8c: 70:81:aa:6b:18:09:c1:11:47:02:17:4b:e7:9c:9f:b5:a0:9e: 94:92:d2:46:a6:19:4c:93:e7:21:a6:8c:86:4e:ca:b6:fa:d4: 1e:01:e6:2c:f3:18:c1:0a:82:3f:ec:c2:76:0d:87:cd:91:a9: 87:34:86:b5:b8:7d:44:5f:74:e8:96:c4:45:6b:5f:26:9a:6d: cd:f1:6b:18:93:a9:2d:2d:78:d8:56:60:2d:61:f9:52:fe:14: 9c:a9:6c:21:e8:8e:01:24:43:ac:21:33:08:04:20:44:5d:41: 4d:f2:e0:99:c8:44:7d:db:86:5e:16:3a:17:48:e0:74:df:54: 11:f3:5c:9b:d7:83:c9:f1:be:d5:fe:50:29:b1:72:f4:a3:21: 25:6f:d6:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDQ1ODA1QjU1ODBENTE1MTk3RDFBNjE1QUQ2NkM4QjlE NDg1NEY1RUEwHhcNMjUwNTEyMTYzMDAxWhcNMjUwNTE5MTYzMDAxWjAYMRYwFAYD VQQDEw02ODIyMjIwYS1hZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DVAI6z6ezK0EFbW4tbtHTYZs8WGvpS8fyePRNpo/8NPBvrOIxZj81SBoS9K irF/oWIDfgF/VDB0+hTLUitEsVRM2vPztp6yfgSQrrpu6VrG1xcBbSWKRecSVJa/ 5kFhgDAFwseB69LgvCrmPi8KGBPSpLrROTyvuBPMN2+T5gHwinu77Q1UHTSS8VLk 12G3xJmwRspYyNDEU1PotQGQ8/OEkTnT+5uTICQMA1nsGdlqKUW+gdu5mcmBuxea nL3kOIOJ8EhQfy+7bcXZgjiZXb+9yd9ZYPB/bsnJicA5QkigI38qiKdJhmlw5/e7 WpSekpZWGETAAXNh8vTGZcWARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8QSVEG Gso19d8ad4FrrqyHh9OTMB8GA1UdIwQYMBaAFEWAW1WA1RUZfRphWtZsi51IVPXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9GOEZGMTUyMkJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZSbDlHbUZhMW15TG5VaFU5 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZQmJWWURWRlJsOUdtRmExbXlMblVoVTllby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9GOEZGMTUyMkJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZS bDlHbUZhMW15TG5VaFU5ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ/BxEV4EK13eRiXwnA+VFCapTDAOBzW/KfuRbXm0Ow270uxCnZE9L flrLuADB66dGgQDM1o2mepsKlyuBdjYnxkFFZ7//fc/Ddcov/wCzIW7JBWPtQH47 B7j7tWd90kowP3rzhR7jw03tIIxwgaprGAnBEUcCF0vnnJ+1oJ6UktJGphlMk+ch poyGTsq2+tQeAeYs8xjBCoI/7MJ2DYfNkamHNIa1uH1EX3TolsRFa18mmm3N8WsY k6ktLXjYVmAtYflS/hScqWwh6I4BJEOsITMIBCBEXUFN8uCZyER924ZeFjoXSOB0 31QR81yb14PJ8b7V/lApsXL0oyElb9Yb -----END CERTIFICATE-----Generated at Tue May 13 05:56:59 2025 by rpki-client