$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: 5QmDDmQkuAp0pPj2abMdLwPA/+J4hh3+WFYv3jRDBjk= Subject key identifier: B3:C9:32:61:D2:35:8C:1B:D0:3B:83:69:2F:72:A9:D4:8F:DF:E5:12 Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: A6 Signing time: Tue 13 May 2025 05:20:55 +0000 Manifest this update: Tue 13 May 2025 05:20:55 +0000 Manifest next update: Tue 20 May 2025 05:20:55 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: iGiZ/nYiJo/T1a2nJWRmfEc7g7Te73OVIeMBBAlWucA=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Validity Not Before: May 13 05:20:55 2025 GMT Not After : May 20 05:20:55 2025 GMT Subject: CN=6822d6b7-87d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:8c:a7:1c:32:fe:f3:3d:99:7a:a6:05:43: ab:61:25:8a:01:99:5d:16:93:c6:f4:60:9b:06:a7: 0f:5b:36:5e:5d:77:4c:98:c9:4f:01:ac:a2:2a:a3: f6:87:0b:f7:a5:f2:4b:2a:1b:16:15:b5:e3:5b:1c: 65:e0:57:bf:fa:c7:52:d1:38:e9:09:16:b4:b3:4f: da:b0:fa:a4:82:3b:22:ce:92:8f:3f:33:6e:39:4c: 83:db:74:a1:8a:d2:36:91:60:69:8a:37:58:54:58: cc:e4:8e:a8:58:3f:b5:76:a6:ca:30:35:60:b2:65: 65:4d:1b:3d:fe:59:a5:91:26:b2:64:c9:89:be:bf: 57:ce:c3:ff:21:17:22:5a:1d:07:a8:ff:39:31:3c: 02:5e:0a:f9:58:fe:16:87:a9:ee:99:20:33:30:e8: c1:70:d8:3b:30:2c:8e:7b:bf:19:b3:99:a5:97:b4: 12:04:8a:6a:87:f5:ce:f9:a5:35:a5:db:eb:ab:32: c1:e8:4b:89:bf:c8:9e:34:53:ca:71:11:d5:a6:7b: b5:bd:a7:80:6f:8c:22:43:cd:90:0a:e1:0d:31:3c: 17:22:c0:41:fc:e9:e3:e5:40:0d:e7:52:6e:a1:e3: 5d:cf:3b:8f:27:9e:10:8e:39:f2:9e:c2:fe:bc:ee: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:32:61:D2:35:8C:1B:D0:3B:83:69:2F:72:A9:D4:8F:DF:E5:12 X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1a:a6:c0:6c:82:de:d1:14:57:bc:21:da:25:b0:e0:29:15: 8d:74:ac:fc:16:3c:46:ee:16:f3:68:9c:22:b0:92:1e:e3:6e: d9:2b:34:15:7c:ae:1a:56:50:57:93:82:75:89:7f:64:f1:08: 35:59:5e:8c:83:90:92:f3:d1:79:d6:70:53:7e:52:5e:b1:65: 1b:8f:04:d5:e9:65:b2:88:ab:2e:57:c9:37:fc:bd:24:4b:14: 48:df:c9:0a:be:ac:f9:55:ec:10:38:d0:2f:05:bd:fb:d2:1d: 57:bd:09:6e:d5:85:e7:7c:64:67:50:9f:76:6a:43:51:0a:ae: db:e7:53:97:14:08:28:05:8c:e5:59:0c:6d:76:e1:8d:bf:e4: fc:cc:6c:09:31:68:d2:27:aa:72:c8:89:eb:94:16:ea:02:43: 83:8e:8d:5e:17:dd:ec:f3:f8:1b:3e:b9:47:05:08:9b:83:2d: cf:56:34:eb:19:61:d3:44:31:22:a3:31:b2:7d:6a:47:68:a4: 73:ce:19:36:80:23:3b:78:ba:a5:70:2a:04:a3:c8:d0:58:bb: f2:ed:2a:42:45:bb:a2:ce:da:36:06:99:a5:73:72:ee:15:04: d7:7a:28:ea:3e:e6:4d:56:30:dc:4a:52:16:3c:f7:82:2b:97: 7b:d9:90:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjUwNTEzMDUyMDU1WhcNMjUwNTIwMDUyMDU1WjAYMRYwFAYD VQQDEw02ODIyZDZiNy04N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLaMpxwy/vM9mXqmBUOrYSWKAZldFpPG9GCbBqcPWzZeXXdMmMlPAayiKqP2 hwv3pfJLKhsWFbXjWxxl4Fe/+sdS0TjpCRa0s0/asPqkgjsizpKPPzNuOUyD23Sh itI2kWBpijdYVFjM5I6oWD+1dqbKMDVgsmVlTRs9/lmlkSayZMmJvr9XzsP/IRci Wh0HqP85MTwCXgr5WP4Wh6numSAzMOjBcNg7MCyOe78Zs5mll7QSBIpqh/XO+aU1 pdvrqzLB6EuJv8ieNFPKcRHVpnu1vaeAb4wiQ82QCuENMTwXIsBB/Onj5UAN51Ju oeNdzzuPJ54QjjnynsL+vO6dZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPJMmHS NYwb0DuDaS9yqdSP3+USMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+GqbAbILe0RRXvCHaJbDgKRWNdKz8FjxG7hbzaJwisJIe427ZKzQV fK4aVlBXk4J1iX9k8Qg1WV6Mg5CS89F51nBTflJesWUbjwTV6WWyiKsuV8k3/L0k SxRI38kKvqz5VewQONAvBb370h1XvQlu1YXnfGRnUJ92akNRCq7b51OXFAgoBYzl WQxtduGNv+T8zGwJMWjSJ6pyyInrlBbqAkODjo1eF93s8/gbPrlHBQibgy3PVjTr GWHTRDEiozGyfWpHaKRzzhk2gCM7eLqlcCoEo8jQWLvy7SpCRbuizto2Bpmlc3Lu FQTXeijqPuZNVjDcSlIWPPeCK5d72ZDJ -----END CERTIFICATE-----Generated at Wed May 14 19:35:43 2025 by rpki-client