$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: 8Y52DG/Ddevq+jH+d2Q75jHhm7O9k+pJmrFl55KzDYQ= Subject key identifier: D6:85:22:64:B8:B2:25:26:A6:7B:45:12:42:24:8D:BA:F5:73:6D:4B Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 5A Signing time: Tue 13 May 2025 06:41:08 +0000 Manifest this update: Tue 13 May 2025 06:41:07 +0000 Manifest next update: Tue 20 May 2025 06:41:07 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: grofzkY2E9ZuLOn/4VRVHdOBgUdaL/8qfCv1naHa51I=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: May 13 06:41:07 2025 GMT Not After : May 20 06:41:07 2025 GMT Subject: CN=6822e983-53c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:a4:3a:d4:7c:a0:6a:2e:db:8a:4b:c2:16: 30:8b:3e:bb:cf:16:33:8f:59:0d:99:0a:3b:c9:ef: 48:8b:a3:d6:e8:e9:c5:22:5c:cd:58:ea:5d:40:55: 6c:71:03:ca:18:d4:58:a8:62:24:19:e5:2f:77:1e: 69:64:22:6b:87:b9:8a:4d:04:90:27:df:85:91:0e: 44:0a:a3:83:46:cd:b4:d6:ba:d0:18:41:91:eb:43: 9e:76:e6:48:68:04:19:0d:c8:4a:ac:cc:94:df:83: 63:34:f4:a6:3f:09:ae:5b:4d:a3:6c:ab:7a:63:d7: 49:49:77:00:7a:d2:88:4b:a2:c0:d7:f0:6d:57:ef: 73:9c:83:50:86:8d:b3:e7:d1:82:ae:22:54:31:76: 29:26:e6:94:e5:e1:57:06:fc:9d:be:3f:ec:f7:35: a1:51:bb:5b:bd:65:2c:8b:c7:16:f7:ce:bb:dc:ee: 87:36:27:cc:93:3a:b7:13:df:7e:90:12:99:ec:3a: 94:73:ca:4e:9c:3d:3a:f5:43:b0:e8:5b:a8:01:ce: 7f:62:37:6a:af:02:de:0b:48:45:fd:2d:ec:c2:27: 05:97:cb:dc:11:87:5f:c6:1f:a5:91:a1:99:68:45: 89:9a:a9:3b:b8:fb:a3:06:1d:de:72:3f:e2:4d:02: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:22:64:B8:B2:25:26:A6:7B:45:12:42:24:8D:BA:F5:73:6D:4B X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3a:6f:8b:53:3c:34:e1:c6:13:0f:94:2b:66:02:45:c1:8e: 48:a9:26:6a:b3:82:5a:b6:8c:31:77:0f:da:c4:66:ee:b2:31: 45:e7:db:a9:b9:33:2b:50:bb:76:85:dd:f7:e4:11:c0:6e:e1: f0:d3:f7:51:12:26:d3:96:35:fa:74:8c:9e:d3:52:5f:3f:fd: c7:c6:d1:93:23:d8:62:62:92:8c:ca:e9:e7:47:7e:f7:a8:bd: 04:2e:ac:ae:8e:15:53:89:a1:f2:b0:9f:56:80:f7:c1:e3:e4: fe:f4:c9:4d:95:f9:70:94:85:67:b7:db:94:af:de:b9:ba:79: bd:a8:3b:32:70:52:51:15:f7:4c:bd:d9:57:c5:ed:eb:d4:22: 54:b7:d0:a3:d6:20:f1:03:27:c9:59:5d:5f:fc:5d:3d:ce:45: 4f:c5:bb:b3:2b:15:14:e3:bd:22:0d:2b:1f:5f:74:df:cb:98: d7:3c:59:2b:50:72:c9:54:9d:06:66:b7:d2:51:b4:5f:3c:91: ab:53:d2:34:fe:7b:5a:9d:b5:71:a9:64:7f:41:e9:63:65:e6: 90:69:45:7e:86:2d:db:ea:5e:11:d2:a0:03:27:07:79:06:e4: 51:86:f3:bf:f5:a7:6e:f3:b8:2b:25:ae:6d:8c:4e:54:48:a2: 78:72:c7:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoNjI0Qjk2RTFENjY1RUQ3OEU3OERGQUY2QzIyMDE5MTA3 M0RCNjZDQzAeFw0yNTA1MTMwNjQxMDdaFw0yNTA1MjAwNjQxMDdaMBgxFjAUBgNV BAMTDTY4MjJlOTgzLTUzYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYBaQ61Hygai7bikvCFjCLPrvPFjOPWQ2ZCjvJ70iLo9bo6cUiXM1Y6l1AVWxx A8oY1FioYiQZ5S93HmlkImuHuYpNBJAn34WRDkQKo4NGzbTWutAYQZHrQ5525kho BBkNyEqszJTfg2M09KY/Ca5bTaNsq3pj10lJdwB60ohLosDX8G1X73Ocg1CGjbPn 0YKuIlQxdikm5pTl4VcG/J2+P+z3NaFRu1u9ZSyLxxb3zrvc7oc2J8yTOrcT336Q EpnsOpRzyk6cPTr1Q7DoW6gBzn9iN2qvAt4LSEX9LezCJwWXy9wRh1/GH6WRoZlo RYmaqTu4+6MGHd5yP+JNArtBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1oUiZLiy JSame0USQiSNuvVzbUswHwYDVR0jBBgwFoAUYkuW4dZl7Xjnjfr2wiAZEHPbZsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0MxMTJGNTVDRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWWt1VzRkWmw3WGpuamZyMndpQVpFSFBiWnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0MxMTJGNTVDRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hq bmpmcjJ3aUFaRUhQYlpzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADs6b4tTPDThxhMPlCtmAkXBjkipJmqzglq2jDF3D9rEZu6yMUXn26m5 MytQu3aF3ffkEcBu4fDT91ESJtOWNfp0jJ7TUl8//cfG0ZMj2GJikozK6edHfveo vQQurK6OFVOJofKwn1aA98Hj5P70yU2V+XCUhWe325Sv3rm6eb2oOzJwUlEV90y9 2VfF7evUIlS30KPWIPEDJ8lZXV/8XT3ORU/Fu7MrFRTjvSINKx9fdN/LmNc8WStQ cslUnQZmt9JRtF88katT0jT+e1qdtXGpZH9B6WNl5pBpRX6GLdvqXhHSoAMnB3kG 5FGG87/1p27zuCslrm2MTlRIonhyx6I= -----END CERTIFICATE-----Generated at Tue May 13 11:52:37 2025 by rpki-client