$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: U1snM0D/s7ZU/D1EEP9NNSbbiwgdTqYjLB3NAVXSxx8= Subject key identifier: BB:9D:66:79:9D:70:88:28:39:48:0D:2C:FB:AD:BA:09:C3:67:DF:17 Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 05AD Signing time: Sat 10 May 2025 22:45:05 +0000 Manifest this update: Sat 10 May 2025 22:45:04 +0000 Manifest next update: Sat 17 May 2025 22:45:04 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: 0Proz8xzTHdNBK3CCz/DaaQd1+JUZBiZW0YCaFop1q8=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: f4gRh38ZrvS7ONxmLsMLRwFey6PLic9m7nSCkN6WMeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Validity Not Before: May 10 22:45:04 2025 GMT Not After : May 17 22:45:04 2025 GMT Subject: CN=681fd6f0-50f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:46:55:bb:d6:fb:a3:a1:77:e0:3c:17:96: e9:a8:a0:4b:04:e2:b1:94:f2:5b:92:5c:a2:81:31: 14:8d:81:30:94:b7:0f:1b:1a:fb:e9:0d:45:66:0c: eb:4b:88:26:9c:0b:cb:d2:3a:f5:f0:e3:4d:ed:61: b7:72:95:cf:46:e1:b3:0a:00:16:8c:46:8d:75:65: f0:1b:3a:a3:7b:57:9f:be:b7:a5:64:0f:57:cd:23: ab:62:97:fc:27:19:49:94:8e:be:65:f8:f5:16:3a: ec:b8:d9:23:f1:74:fb:d4:4e:cb:0b:fb:1b:42:8f: c4:8e:b3:d6:bd:84:cf:c0:7c:d1:9f:af:63:a3:3e: da:4a:e0:10:dc:09:62:03:c1:d2:fb:98:d8:a7:75: 11:65:d8:0b:5f:c7:cb:f8:87:7b:2d:07:4d:f0:d9: b1:2b:dd:8d:85:5c:bb:f4:88:5b:91:04:bb:fc:65: aa:b9:7f:03:c8:bb:09:b0:f0:a9:9e:f8:3d:e8:f7: b9:4f:ab:94:a4:c0:2c:ff:88:6d:1c:f8:a1:d6:1a: 8c:87:01:e3:df:52:6f:7c:f1:0e:9f:d6:d9:b9:2b: 2f:4e:35:d5:83:a0:13:01:8d:97:3e:fc:f7:65:4d: c8:34:43:06:b5:28:9b:3b:7e:a3:b9:52:67:c2:0e: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:66:79:9D:70:88:28:39:48:0D:2C:FB:AD:BA:09:C3:67:DF:17 X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:11:64:4f:4e:8a:3c:ca:18:8f:78:b5:10:79:25:bf:94:c4: d3:71:b8:8c:24:c1:f4:97:ce:f0:ef:6b:31:d8:e0:d7:3e:0f: 0a:c7:79:b0:79:40:3d:95:23:41:76:bd:d0:7b:0a:d1:74:3d: 6f:50:4c:20:fb:a5:51:21:88:a6:2a:a8:03:71:71:f7:ed:b7: 55:be:0c:b2:b5:7d:f6:01:55:4c:d3:80:d1:c3:53:44:b3:19: 31:20:c5:77:8b:8d:9d:58:ba:90:99:16:8c:44:b3:36:b7:c4: f4:82:3b:3c:95:f0:11:f9:21:90:03:db:d4:93:e0:40:e6:9b: 98:81:b9:29:3b:4a:cb:40:69:24:87:a9:86:ce:17:2b:ed:f1: b6:db:a3:86:ae:88:64:0c:60:3f:5b:df:26:73:7e:c0:1f:21: 0a:7c:a3:a5:05:16:ae:07:8d:50:a4:46:d9:d6:78:b3:95:f8: 21:e4:08:cc:b8:36:39:f6:29:09:2a:d8:96:d9:01:58:dd:b0: bd:eb:3a:0a:8e:e5:9a:bb:eb:00:f9:60:7b:99:71:b4:6d:e5: 7e:58:b0:55:32:91:b2:0d:97:b6:d1:c1:99:f4:95:f8:ec:5d: 26:01:a8:9b:79:9b:31:2d:66:ba:93:bc:a7:2e:77:b7:4c:a9: 04:33:ce:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUwNTEwMjI0NTA0WhcNMjUwNTE3MjI0NTA0WjAYMRYwFAYD VQQDEw02ODFmZDZmMC01MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeRGVbvW+6Ohd+A8F5bpqKBLBOKxlPJbklyigTEUjYEwlLcPGxr76Q1FZgzr S4gmnAvL0jr18ONN7WG3cpXPRuGzCgAWjEaNdWXwGzqje1efvrelZA9XzSOrYpf8 JxlJlI6+Zfj1FjrsuNkj8XT71E7LC/sbQo/EjrPWvYTPwHzRn69joz7aSuAQ3Ali A8HS+5jYp3URZdgLX8fL+Id7LQdN8NmxK92NhVy79IhbkQS7/GWquX8DyLsJsPCp nvg96Pe5T6uUpMAs/4htHPih1hqMhwHj31JvfPEOn9bZuSsvTjXVg6ATAY2XPvz3 ZU3INEMGtSibO36juVJnwg6gYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLudZnmd cIgoOUgNLPutugnDZ98XMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNEWRPToo8yhiPeLUQeSW/lMTTcbiMJMH0l87w72sx2ODXPg8Kx3mw eUA9lSNBdr3QewrRdD1vUEwg+6VRIYimKqgDcXH37bdVvgyytX32AVVM04DRw1NE sxkxIMV3i42dWLqQmRaMRLM2t8T0gjs8lfAR+SGQA9vUk+BA5puYgbkpO0rLQGkk h6mGzhcr7fG226OGrohkDGA/W98mc37AHyEKfKOlBRauB41QpEbZ1nizlfgh5AjM uDY59ikJKtiW2QFY3bC96zoKjuWau+sA+WB7mXG0beV+WLBVMpGyDZe20cGZ9JX4 7F0mAaibeZsxLWa6k7ynLne3TKkEM86K -----END CERTIFICATE-----Generated at Mon May 12 02:45:54 2025 by rpki-client