$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: y6GRx3Wa5mz5RHLhBXd2TbWStp3NxLK8lZcpYWp7XEA= Subject key identifier: 58:65:46:01:19:C3:57:76:27:37:0D:47:5A:91:B8:B8:E8:B0:AE:FF Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 3C Signing time: Thu 15 May 2025 06:51:52 +0000 Manifest this update: Thu 15 May 2025 06:51:51 +0000 Manifest next update: Thu 22 May 2025 06:51:51 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: DaHj1+1dg3bTo60GV6+egyDUhKv/ywTZa8f/C+wwRTg=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: u8mLTgdlzLOcst0PW7RFWtPWXwp8xBwUEW3SQOngh5k=) 3: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (hash: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: May 15 06:51:51 2025 GMT Not After : May 22 06:51:51 2025 GMT Subject: CN=68258f08-a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:9d:e2:00:bd:ba:ed:2b:f6:f0:d6:c9:16: 57:cb:dd:4d:6a:83:b4:6b:93:83:1d:15:19:40:7f: 20:23:09:42:ac:f2:96:a2:16:e2:d2:a1:3d:4d:90: 70:43:b9:27:3f:d5:a3:02:bc:7e:51:50:e5:04:97: c9:a8:28:07:0c:2a:5f:62:8d:7e:41:88:27:ae:e8: 17:80:40:68:8e:fc:00:0f:20:90:ac:c8:19:6c:ae: 46:10:67:c5:d2:29:b3:40:40:b6:af:f6:db:ae:d4: d0:4c:ad:72:24:2d:51:97:8f:66:1c:6b:b8:88:01: 4c:59:46:97:d2:5b:8e:92:78:49:2a:b6:dd:c6:96: 80:1c:39:27:10:ed:08:37:cb:7a:c5:50:40:f4:b3: 37:49:b7:35:1e:b7:5e:69:07:2c:6c:08:24:48:d9: 9c:2b:57:e5:f3:9a:cb:71:ab:f0:70:93:1c:0a:e9: 53:ce:4a:95:34:fb:50:d6:74:9a:3a:53:16:48:51: 0e:9c:da:98:bb:ab:45:1a:35:59:db:e5:c1:75:9d: d7:d5:0d:57:d4:0b:e0:88:0b:47:a8:ba:ea:c3:ad: a3:c9:c6:1b:4e:42:c2:a2:0f:2a:3c:23:aa:dc:ac: c2:0e:fd:0c:01:54:44:16:a1:6a:ea:da:d8:93:ae: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:46:01:19:C3:57:76:27:37:0D:47:5A:91:B8:B8:E8:B0:AE:FF X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:a0:1f:44:69:2e:11:8b:59:40:bc:ff:bd:a3:f5:19:ed: 01:9c:5f:a8:7f:82:0e:3e:4b:7f:4a:17:c2:0e:d0:c9:36:61: 70:95:ab:2c:c1:d7:2f:c3:44:d8:19:70:0d:7c:d1:bb:15:40: ce:94:cd:51:28:a2:e6:38:99:a1:ac:7e:03:3f:10:75:96:d9: b3:83:33:68:8a:f8:3c:5a:56:62:80:dd:fd:bf:20:80:25:90: 2d:ca:c5:9c:91:8a:db:f8:29:6f:d7:c2:d7:bc:cc:81:7f:0c: 7c:35:f6:1a:08:48:41:35:40:f5:82:04:d2:46:e4:48:e8:db: e2:fb:28:92:6f:c5:02:10:76:73:8e:8d:22:d4:eb:85:30:eb: f0:e8:2d:26:39:42:d4:da:e1:b6:07:9f:f1:17:89:00:01:ff: db:a9:64:8b:2a:cf:8b:d9:1c:07:db:a8:02:5b:a5:50:78:a1: ee:aa:91:62:f1:57:0a:8e:ae:4d:66:0b:c2:de:76:a4:3e:66: e4:a3:bb:fa:4b:1f:7d:64:73:c9:2d:08:30:8f:b0:af:61:2d: ad:17:28:1a:b6:bd:47:f4:0f:b8:fa:14:cc:14:35:91:60:d4: 0d:0e:dc:46:54:22:96:c3:0e:06:ed:d0:23:4c:50:90:08:c4: ee:47:52:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA1MTUwNjUxNTFaFw0yNTA1MjIwNjUxNTFaMBgxFjAUBgNV BAMTDTY4MjU4ZjA4LWE2MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyqp3iAL267Sv28NbJFlfL3U1qg7Rrk4MdFRlAfyAjCUKs8paiFuLSoT1NkHBD uSc/1aMCvH5RUOUEl8moKAcMKl9ijX5BiCeu6BeAQGiO/AAPIJCsyBlsrkYQZ8XS KbNAQLav9tuu1NBMrXIkLVGXj2Yca7iIAUxZRpfSW46SeEkqtt3GloAcOScQ7Qg3 y3rFUED0szdJtzUet15pByxsCCRI2ZwrV+Xzmstxq/BwkxwK6VPOSpU0+1DWdJo6 UxZIUQ6c2pi7q0UaNVnb5cF1ndfVDVfUC+CIC0eouurDraPJxhtOQsKiDyo8I6rc rMIO/QwBVEQWoWrq2tiTrkm3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWGVGARnD V3YnNw1HWpG4uOiwrv8wHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEF8oB9EaS4Ri1lAvP+9o/UZ7QGcX6h/gg4+S39KF8IO0Mk2YXCVqyzB 1y/DRNgZcA180bsVQM6UzVEoouY4maGsfgM/EHWW2bODM2iK+DxaVmKA3f2/IIAl kC3KxZyRitv4KW/Xwte8zIF/DHw19hoISEE1QPWCBNJG5Ejo2+L7KJJvxQIQdnOO jSLU64Uw6/DoLSY5QtTa4bYHn/EXiQAB/9upZIsqz4vZHAfbqAJbpVB4oe6qkWLx VwqOrk1mC8LedqQ+ZuSju/pLH31kc8ktCDCPsK9hLa0XKBq2vUf0D7j6FMwUNZFg 1A0O3EZUIpbDDgbt0CNMUJAIxO5HUms= -----END CERTIFICATE-----Generated at Fri May 16 09:37:45 2025 by rpki-client