$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: G01naKzI9b9YDWGWXJqOgl5xkbWuKchdTA8AocsaBqM= Subject key identifier: FB:F0:DD:31:82:18:12:A3:E8:E6:AA:E6:6E:5A:FD:05:B5:0B:7D:C1 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 0750 Signing time: Mon 12 May 2025 21:26:16 +0000 Manifest this update: Mon 12 May 2025 21:26:15 +0000 Manifest next update: Mon 19 May 2025 21:26:15 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: nJ72DaX36MGhOh8BgRvR9Rz+usxjlbKoSJRCYcm58l4=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: May 12 21:26:15 2025 GMT Not After : May 19 21:26:15 2025 GMT Subject: CN=68226778-c0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:9b:36:b7:3c:a8:43:53:33:3d:4b:64:67: ab:0c:6a:28:d9:33:96:46:1c:02:db:80:d5:d7:6f: f8:c6:77:0f:f9:a5:04:5d:75:e4:6f:85:fa:c3:49: 5b:2b:05:db:04:e4:2a:db:a8:40:c4:f3:01:b1:57: f4:99:d6:43:3d:b3:d7:47:b4:ec:25:ca:97:66:c8: 13:34:85:13:98:a3:9c:a9:f9:10:56:69:a5:63:44: 84:f8:7b:1c:bb:0e:9e:b4:13:a0:13:76:64:c1:ed: 45:fc:15:2c:2e:bb:32:6b:99:d9:cc:53:60:87:ef: 59:3c:7b:4d:4c:a0:f7:8d:cc:c1:73:56:f0:9d:06: 72:b1:3a:32:cc:dd:19:87:fc:be:6b:70:b2:fd:3e: 50:34:4d:1d:67:96:a7:fb:3d:a4:f1:2a:b3:1b:56: 10:5a:0e:51:7e:80:f8:45:f5:5e:7d:e7:80:2f:0b: 72:65:0d:10:3f:c5:37:22:b2:de:f5:50:09:96:88: 30:2e:07:06:d2:a0:b3:8c:0e:5f:17:72:a9:b9:e3: 1a:01:01:78:71:d3:7d:93:fa:36:f0:fa:be:6e:36: 43:1b:d2:2f:a4:b5:9d:bf:be:73:ce:ac:fa:84:79: 5a:4c:f9:b2:c3:01:ca:90:bf:1f:14:e2:69:33:3c: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F0:DD:31:82:18:12:A3:E8:E6:AA:E6:6E:5A:FD:05:B5:0B:7D:C1 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b8:43:f7:3b:24:83:92:fc:e7:7c:90:d1:92:ba:7b:92:9c: 39:4b:a3:ec:bf:b9:2b:97:72:92:85:35:c8:46:e0:3a:0f:7c: 14:e3:89:db:c7:1b:0e:53:01:a7:c7:e4:b1:03:95:2b:3e:6f: 6d:6b:6c:d9:66:84:cd:78:15:74:dc:62:a0:57:e7:a1:6b:54: 13:c5:7d:2d:c1:46:36:e4:73:41:6c:b2:2c:b2:4e:28:e8:46: 6a:18:21:56:41:6f:25:76:88:15:b2:6b:05:46:5d:67:a4:cb: f2:8e:cb:8c:1e:a1:93:dc:d2:81:f3:77:36:fa:19:99:17:4a: 87:02:bd:df:d4:56:a2:5a:0c:84:ca:34:b7:46:d6:08:6e:9f: 8b:67:19:e6:af:5b:ee:77:2e:67:95:c1:c0:7e:cd:dc:6f:f8: ed:26:e2:11:4b:8f:14:ad:a2:ad:e1:64:e3:30:b8:ab:a4:33: 59:9b:e2:ab:67:ef:0a:c6:1d:e3:df:85:ea:eb:fd:e2:0f:32: db:76:75:9b:32:30:26:33:9a:4b:df:dd:3d:2a:f7:9a:0b:cc: f8:a4:fe:d2:be:7b:0d:c7:2d:2a:3b:73:cf:25:d0:c4:89:71: 63:84:99:7a:ba:80:0b:70:91:78:0d:6f:9e:9f:4a:f2:03:ce: 6d:79:1a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUwNTEyMjEyNjE1WhcNMjUwNTE5MjEyNjE1WjAYMRYwFAYD VQQDEw02ODIyNjc3OC1jMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oebNrc8qENTMz1LZGerDGoo2TOWRhwC24DV12/4xncP+aUEXXXkb4X6w0lb KwXbBOQq26hAxPMBsVf0mdZDPbPXR7TsJcqXZsgTNIUTmKOcqfkQVmmlY0SE+Hsc uw6etBOgE3Zkwe1F/BUsLrsya5nZzFNgh+9ZPHtNTKD3jczBc1bwnQZysToyzN0Z h/y+a3Cy/T5QNE0dZ5an+z2k8SqzG1YQWg5RfoD4RfVefeeALwtyZQ0QP8U3IrLe 9VAJlogwLgcG0qCzjA5fF3KpueMaAQF4cdN9k/o28Pq+bjZDG9IvpLWdv75zzqz6 hHlaTPmywwHKkL8fFOJpMzzs0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvw3TGC GBKj6Oaq5m5a/QW1C33BMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4uEP3OySDkvznfJDRkrp7kpw5S6Psv7krl3KShTXIRuA6D3wU44nb xxsOUwGnx+SxA5UrPm9ta2zZZoTNeBV03GKgV+eha1QTxX0twUY25HNBbLIssk4o 6EZqGCFWQW8ldogVsmsFRl1npMvyjsuMHqGT3NKB83c2+hmZF0qHAr3f1FaiWgyE yjS3RtYIbp+LZxnmr1vudy5nlcHAfs3cb/jtJuIRS48UraKt4WTjMLirpDNZm+Kr Z+8Kxh3j34Xq6/3iDzLbdnWbMjAmM5pL3909KveaC8z4pP7SvnsNxy0qO3PPJdDE iXFjhJl6uoALcJF4DW+en0ryA85teRph -----END CERTIFICATE-----Generated at Tue May 13 04:50:56 2025 by rpki-client