$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: HGucdU1MWZuz8zbLn9eRi4KsTyIXGVGaYeP8seN4WRY= Subject key identifier: 74:3D:C5:C7:66:CD:0B:30:0D:06:14:32:60:11:3C:B1:3E:31:2E:D3 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: 74 Signing time: Tue 13 May 2025 05:57:53 +0000 Manifest this update: Tue 13 May 2025 05:57:52 +0000 Manifest next update: Tue 20 May 2025 05:57:52 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: 6M+JdwHh1jQ5hD/Rh7NaTl9AwcU7G5GrsEHSPTwSitM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: May 13 05:57:52 2025 GMT Not After : May 20 05:57:52 2025 GMT Subject: CN=6822df60-232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:8c:c9:e8:ba:85:91:9a:61:18:8e:60:d1: 03:db:98:43:18:21:d4:7c:a9:c4:cb:20:b7:41:a6: c7:de:a4:a6:89:25:01:cd:59:f9:ac:8f:11:ac:2f: e2:8e:11:c2:5b:76:c2:3e:c1:b4:63:14:b6:f4:5c: 2c:d7:e2:02:2e:5b:47:63:53:f9:68:b6:0e:b3:8a: 41:f3:cf:c4:dd:d4:c6:ab:a0:6c:7b:74:73:96:4f: 9c:53:a1:80:74:96:50:f8:9d:7b:ca:24:bd:a2:de: c0:8b:58:7c:af:5c:07:2b:67:7d:92:18:c9:5e:7c: 0e:5f:ab:07:89:9f:89:ac:90:6a:52:ae:6a:28:3d: ef:7b:25:db:b8:8d:be:af:99:c8:f4:93:a4:c4:2f: 41:4c:12:88:45:46:ad:94:84:e8:48:e7:25:0f:e2: 67:62:4a:e9:f8:5d:b3:43:cc:11:f9:77:d7:f6:bd: 4e:aa:67:87:ed:cc:03:16:c4:5b:e3:67:6a:fc:97: 9b:53:76:9c:21:80:b6:27:ac:60:bb:39:eb:e5:61: f3:80:ff:ba:fc:20:fc:7c:1b:50:f3:92:20:00:e2: 56:e7:ae:8d:16:6e:de:7a:36:20:7d:21:e7:52:fc: 91:46:5b:f9:91:96:bd:56:29:79:64:84:1c:9e:d8: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3D:C5:C7:66:CD:0B:30:0D:06:14:32:60:11:3C:B1:3E:31:2E:D3 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f1:a3:35:c6:7b:7b:6d:84:e0:31:f7:61:b1:3a:d1:d9:3d: d9:54:39:b7:30:7c:36:b8:1a:3a:a6:af:55:0d:51:d8:ac:c6: ec:68:ca:0b:d7:73:93:8e:12:e0:73:94:8a:6e:ff:23:ed:ab: 97:00:75:4e:7e:1c:d7:79:af:06:12:ff:41:ac:6c:0a:e0:0a: de:d9:32:5e:4d:36:d8:46:58:c6:5c:5d:8b:73:bf:88:bd:9d: f6:b3:c0:b3:be:37:16:8f:f8:6f:e8:17:be:19:e9:31:da:92: f8:24:4b:04:bb:c9:68:69:6a:91:68:af:e5:a4:09:f1:99:6d: 45:56:c8:c6:f7:84:7a:e6:fb:91:2e:53:85:ee:78:69:a2:3d: a9:9c:da:99:65:2c:6a:73:28:d0:1b:8c:0e:f9:ef:58:3c:13: c1:91:49:be:83:58:46:aa:cb:8f:97:2f:29:cd:6f:8d:04:d2: e6:d0:c3:22:aa:93:96:23:c7:5d:3a:a9:48:9a:2f:b9:9c:01: e8:97:2e:66:35:7e:34:04:0f:66:02:84:b2:56:e6:cb:0a:1a: 94:85:ab:27:85:b1:bd:44:08:c8:13:3b:d2:2c:e2:4d:a5:45: 26:24:47:f4:b6:48:2c:57:89:17:18:8b:5b:1b:5d:8e:50:aa: 0e:e8:0d:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoNjMwNURDQjU1RkQxNEI1QzdBQTI5NEFFMzdDNzAyNzU2 OTJGNDE4MDAeFw0yNTA1MTMwNTU3NTJaFw0yNTA1MjAwNTU3NTJaMBgxFjAUBgNV BAMTDTY4MjJkZjYwLTIzMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk7YzJ6LqFkZphGI5g0QPbmEMYIdR8qcTLILdBpsfepKaJJQHNWfmsjxGsL+KO EcJbdsI+wbRjFLb0XCzX4gIuW0djU/lotg6zikHzz8Td1MaroGx7dHOWT5xToYB0 llD4nXvKJL2i3sCLWHyvXAcrZ32SGMlefA5fqweJn4mskGpSrmooPe97Jdu4jb6v mcj0k6TEL0FMEohFRq2UhOhI5yUP4mdiSun4XbNDzBH5d9f2vU6qZ4ftzAMWxFvj Z2r8l5tTdpwhgLYnrGC7OevlYfOA/7r8IPx8G1DzkiAA4lbnro0Wbt56NiB9IedS /JFGW/mRlr1WKXlkhBye2HWtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdD3Fx2bN CzANBhQyYBE8sT4xLtMwHwYDVR0jBBgwFoAUYwXctV/RS1x6opSuN8cCdWkvQYAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzdBOUEyNTEwN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXdYY3RWX1JTMXg2b3BTdU44Y0NkV2t2UVlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzdBOUEyNTEwN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4 Nm9wU3VOOGNDZFdrdlFZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPxozXGe3tthOAx92GxOtHZPdlUObcwfDa4Gjqmr1UNUdisxuxoygvX c5OOEuBzlIpu/yPtq5cAdU5+HNd5rwYS/0GsbArgCt7ZMl5NNthGWMZcXYtzv4i9 nfazwLO+NxaP+G/oF74Z6THakvgkSwS7yWhpapFor+WkCfGZbUVWyMb3hHrm+5Eu U4XueGmiPamc2pllLGpzKNAbjA7571g8E8GRSb6DWEaqy4+XLynNb40E0ubQwyKq k5Yjx106qUiaL7mcAeiXLmY1fjQED2YChLJW5ssKGpSFqyeFsb1ECMgTO9Is4k2l RSYkR/S2SCxXiRcYi1sbXY5Qqg7oDTs= -----END CERTIFICATE-----Generated at Wed May 14 08:00:31 2025 by rpki-client