$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: Vj50lLYPBGIUikagw576hK+7f7xuzS2K+tizYWSOr0I= Subject key identifier: 40:BC:90:B5:71:96:83:68:48:F9:D9:AF:A9:AF:F9:6D:A9:DE:6F:8F Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: A8 Signing time: Tue 13 May 2025 05:16:31 +0000 Manifest this update: Tue 13 May 2025 05:16:31 +0000 Manifest next update: Tue 20 May 2025 05:16:31 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: M4vrqKFVMIqF0d6zIxRXr7odX0lI3RjuIqYIt/RPJlA=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: Etmj0xt/W0SmV0Orr2NUt8hTe4pIwfnUtLKYwnR9+RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: May 13 05:16:31 2025 GMT Not After : May 20 05:16:31 2025 GMT Subject: CN=6822d5af-220a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:b8:b7:be:1a:9a:2c:42:9f:60:f0:d9:19: 2c:ac:28:22:ad:3b:70:fa:b2:c5:c6:db:0a:d0:be: ac:3f:1b:6b:c9:53:4f:d3:72:01:c5:c9:55:81:86: 06:ee:73:8d:8e:53:6e:0a:7a:b8:4b:be:73:7c:f4: 3b:4a:47:d6:c5:27:dd:e6:4f:8b:db:49:9d:08:54: 8c:c0:3b:01:54:46:9e:65:96:5d:a2:26:db:ca:b6: f6:cf:ff:d9:f7:95:fd:d3:99:48:78:59:1b:67:b7: 08:50:6d:6a:39:b0:8b:88:15:b5:6f:06:5a:a6:54: e4:40:2d:35:d0:2a:da:a6:06:da:b5:f2:f8:29:c0: 9a:fd:de:ef:43:2d:60:5d:ef:28:03:2b:d0:8b:fa: d6:b9:73:13:30:e0:41:a3:fd:8e:9b:b5:0b:0c:df: 10:de:d0:22:83:49:e8:e8:1e:6d:21:9d:c1:0a:2c: 2b:a0:4f:91:56:f5:ce:69:be:27:fc:52:cf:ab:12: fa:1a:4a:d5:b6:62:6f:ff:66:02:d9:f4:b5:87:4b: fc:fb:01:a0:56:b2:eb:ac:34:b0:92:07:af:5d:59: 41:13:f6:a0:30:32:57:33:7d:1b:83:1a:62:cf:f5: 52:9f:c4:41:ec:49:fc:84:bd:0b:b9:80:f1:b2:0a: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:90:B5:71:96:83:68:48:F9:D9:AF:A9:AF:F9:6D:A9:DE:6F:8F X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c7:9a:ad:37:3e:d4:e4:4d:65:cb:27:76:93:f7:86:6d:f6: 07:7d:c8:47:b9:f7:64:a1:86:38:f9:d9:30:ea:77:9e:d8:5d: 4e:82:80:07:5c:91:f1:7b:b3:ba:76:62:8e:ae:4a:81:df:a0: c2:ad:57:75:a6:4f:2f:e7:57:50:19:a6:e4:ba:e3:34:40:a1: a2:b3:6b:a2:ad:00:70:af:e8:e2:10:de:9b:8c:9b:76:da:0d: 7d:9e:8f:ac:b2:95:92:5c:6f:39:dc:50:f4:b8:52:86:48:a9: dd:c6:68:4a:5c:f3:17:68:f7:17:6f:8f:f5:71:e2:1b:43:6c: 9d:96:d3:ae:1f:f8:92:3b:6d:fb:d5:eb:2f:53:12:58:54:90: 19:ab:e8:64:de:a8:d1:1d:8b:de:0c:86:93:21:09:00:a5:52: 20:04:da:2c:30:20:e2:15:eb:77:11:d0:33:3b:6a:17:2b:ce: 92:40:fa:56:ec:57:67:27:a6:d8:48:9f:62:d1:76:20:58:50: a6:50:92:fe:b1:3e:56:19:d5:a9:31:09:ea:ef:f1:e8:2c:55: 67:0e:3d:8c:a3:70:30:ad:a1:64:7c:1d:49:67:d4:da:bb:ea: 8a:7b:80:1f:4e:33:40:3d:cf:e0:47:37:d8:79:98:90:38:58: 76:ab:21:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUwNTEzMDUxNjMxWhcNMjUwNTIwMDUxNjMxWjAYMRYwFAYD VQQDEw02ODIyZDVhZi0yMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv224t74amixCn2Dw2RksrCgirTtw+rLFxtsK0L6sPxtryVNP03IBxclVgYYG 7nONjlNuCnq4S75zfPQ7SkfWxSfd5k+L20mdCFSMwDsBVEaeZZZdoibbyrb2z//Z 95X905lIeFkbZ7cIUG1qObCLiBW1bwZaplTkQC010CrapgbatfL4KcCa/d7vQy1g Xe8oAyvQi/rWuXMTMOBBo/2Om7ULDN8Q3tAig0no6B5tIZ3BCiwroE+RVvXOab4n /FLPqxL6GkrVtmJv/2YC2fS1h0v8+wGgVrLrrDSwkgevXVlBE/agMDJXM30bgxpi z/VSn8RB7En8hL0LuYDxsgo54wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC8kLVx loNoSPnZr6mv+W2p3m+PMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQx5qtNz7U5E1lyyd2k/eGbfYHfchHufdkoYY4+dkw6nee2F1OgoAH XJHxe7O6dmKOrkqB36DCrVd1pk8v51dQGabkuuM0QKGis2uirQBwr+jiEN6bjJt2 2g19no+sspWSXG853FD0uFKGSKndxmhKXPMXaPcXb4/1ceIbQ2ydltOuH/iSO237 1esvUxJYVJAZq+hk3qjRHYveDIaTIQkApVIgBNosMCDiFet3EdAzO2oXK86SQPpW 7FdnJ6bYSJ9i0XYgWFCmUJL+sT5WGdWpMQnq7/HoLFVnDj2Mo3AwraFkfB1JZ9Ta u+qKe4AfTjNAPc/gRzfYeZiQOFh2qyFZ -----END CERTIFICATE-----Generated at Wed May 14 08:00:30 2025 by rpki-client