$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: mqBl9XQ/njCcy+IFpIzmpzJKHbPdd31c3njbW7DDe20= Subject key identifier: 8E:E9:DA:02:4E:31:BC:80:30:8F:31:23:B0:1D:D4:34:AF:68:12:13 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1A4D Signing time: Mon 12 May 2025 16:18:02 +0000 Manifest this update: Mon 12 May 2025 16:18:01 +0000 Manifest next update: Mon 19 May 2025 16:18:01 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: eEHlzF6DjPqMR0M50H9sy3yfZwXKF/Cn/aFJCBru63M=) 2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bo/SZs4FQGVCgHbfJ/qOcN+amQtsXWeV9LBgPktlbik=) 3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: XfRW9hpvnBY9LTBMASrvKe5ewyj8spWmKtOVyqPmD0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6746 (0x1a5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: May 12 16:18:01 2025 GMT Not After : May 19 16:18:01 2025 GMT Subject: CN=68221f3a-9a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:d0:02:c8:4d:7e:36:12:6a:b0:91:32:ae: 14:05:29:b2:42:85:2c:dd:8a:7d:6b:76:d4:2d:31: 0b:0e:8c:a2:2c:fa:b0:49:60:12:08:f3:42:11:c1: a2:ab:ff:ae:f0:26:74:41:a3:b3:a2:ce:3d:34:ce: 34:06:0b:b6:c1:bc:e7:ab:c6:c6:28:18:48:a8:0a: ea:11:6e:6b:9d:77:dc:1d:2e:00:af:c9:6e:6b:e3: 50:06:e2:3b:2c:74:43:26:b2:10:11:91:e4:a1:95: 10:38:a1:10:b2:64:31:c8:45:03:83:41:5a:de:15: 10:ca:5e:6f:34:8a:6e:86:9c:6e:2a:63:2f:b3:32: e9:72:24:ce:68:54:56:42:b4:c5:73:02:88:5d:dc: 9b:d8:e0:26:4b:65:b2:f3:de:09:e8:fc:67:e8:26: a0:8e:a8:21:0a:5e:e3:46:fd:f1:64:93:da:4a:f9: 57:06:88:c9:c8:f3:fc:60:e7:79:04:18:ea:0a:c9: ba:cf:59:6d:59:ff:cd:1a:68:f1:c7:2b:71:16:f6: e7:f4:25:e2:5f:2d:99:7a:7d:eb:09:b7:74:c3:b3: 80:cc:7d:f9:92:56:16:45:5d:76:4f:ee:b5:fd:fa: a8:51:a9:52:b3:2d:24:db:7f:38:db:f0:fa:dd:5c: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:DA:02:4E:31:BC:80:30:8F:31:23:B0:1D:D4:34:AF:68:12:13 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e1:3b:06:3f:fa:87:90:68:da:39:f9:f5:b2:c5:f0:07:ca: 5e:b4:e0:78:bf:81:0a:96:47:e8:c1:b5:9b:4f:d3:ac:19:58: be:74:38:2c:bb:30:e7:28:fa:bb:1e:86:6f:89:97:09:d9:55: 54:5b:d6:6a:6e:6a:24:38:c8:c2:6a:4d:db:03:1f:d7:50:87: fe:a5:7c:c0:0a:92:3f:35:67:59:cd:32:10:94:6e:d1:7f:ff: a6:4a:10:f4:dd:ca:ff:29:09:d8:d1:cc:b0:ce:15:fa:4e:2a: ff:dd:3d:74:ea:b6:53:4d:c5:ca:10:ea:73:22:e9:f4:61:95: 04:48:55:df:a6:f9:59:e5:ba:ae:c1:ac:3e:8f:99:82:73:68: fa:3b:46:a9:08:d0:73:3a:1a:3d:e0:b9:6e:6c:6d:af:36:a9: 35:62:a7:29:79:61:16:84:ed:89:77:08:d0:bc:1d:60:d4:e8: 0c:47:16:4d:12:d0:d9:b2:20:95:2f:7f:34:a9:e7:12:4e:d6: 57:7e:94:8f:bd:80:5e:f8:9f:41:2c:7c:04:93:a0:29:35:49: ac:20:c4:52:ee:37:07:b7:ed:ea:f1:83:95:08:a2:7d:86:af: c9:7b:5e:d9:ab:66:9f:0e:ed:44:2e:39:a7:e9:01:bd:11:50: de:d8:23:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjUwNTEyMTYxODAxWhcNMjUwNTE5MTYxODAxWjAYMRYwFAYD VQQDEw02ODIyMWYzYS05YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyXQAshNfjYSarCRMq4UBSmyQoUs3Yp9a3bULTELDoyiLPqwSWASCPNCEcGi q/+u8CZ0QaOzos49NM40Bgu2wbznq8bGKBhIqArqEW5rnXfcHS4Ar8lua+NQBuI7 LHRDJrIQEZHkoZUQOKEQsmQxyEUDg0Fa3hUQyl5vNIpuhpxuKmMvszLpciTOaFRW QrTFcwKIXdyb2OAmS2Wy894J6Pxn6CagjqghCl7jRv3xZJPaSvlXBojJyPP8YOd5 BBjqCsm6z1ltWf/NGmjxxytxFvbn9CXiXy2Zen3rCbd0w7OAzH35klYWRV12T+61 /fqoUalSsy0k23842/D63VxUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7p2gJO MbyAMI8xI7Ad1DSvaBITMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU4TsGP/qHkGjaOfn1ssXwB8petOB4v4EKlkfowbWbT9OsGVi+dDgs uzDnKPq7HoZviZcJ2VVUW9ZqbmokOMjCak3bAx/XUIf+pXzACpI/NWdZzTIQlG7R f/+mShD03cr/KQnY0cywzhX6Tir/3T106rZTTcXKEOpzIun0YZUESFXfpvlZ5bqu waw+j5mCc2j6O0apCNBzOho94LlubG2vNqk1YqcpeWEWhO2JdwjQvB1g1OgMRxZN EtDZsiCVL380qecSTtZXfpSPvYBe+J9BLHwEk6ApNUmsIMRS7jcHt+3q8YOVCKJ9 hq/Je17Zq2afDu1ELjmn6QG9EVDe2COT -----END CERTIFICATE-----Generated at Wed May 14 17:17:35 2025 by rpki-client