$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: W8sw8EYwoP99S0Y4l/ufT0kHiGhroqciaPbfjtBI//c= Subject key identifier: 4C:BE:1B:AE:BB:F0:4D:2A:67:52:3C:9E:14:42:79:39:6B:D2:3D:0E Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 077F Signing time: Mon 12 May 2025 21:12:01 +0000 Manifest this update: Mon 12 May 2025 21:12:00 +0000 Manifest next update: Mon 19 May 2025 21:12:00 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: CdHfumdi+Fo882+++sU2s80S5rS59UE6hUv/F3syM3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: May 12 21:12:00 2025 GMT Not After : May 19 21:12:00 2025 GMT Subject: CN=68226421-d9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:f3:6f:a2:63:d4:1b:ba:a0:37:b4:cf:c8: 83:5a:b6:88:0e:b8:77:e9:0f:a8:77:59:94:5f:ee: 51:ef:d7:3f:30:e5:23:4a:b2:a0:39:19:6b:eb:4f: 23:b9:eb:9b:31:64:ed:24:a9:e9:ba:3d:5f:a2:ed: f3:d8:59:c7:b1:4a:62:a5:8b:36:b6:56:7c:20:ff: b5:35:60:88:2f:5a:58:2c:4a:6b:41:c4:a8:ce:c3: e3:ff:c4:86:10:f4:f5:e4:47:03:c0:5b:60:9e:f6: 65:a6:58:2f:9a:77:a3:97:c9:91:e2:53:e5:63:3d: fa:1b:70:90:cb:3a:b6:0e:27:6c:ab:20:8b:46:2d: 35:d2:42:e4:45:80:31:32:ce:8c:69:39:49:46:8e: 5c:4a:07:72:f0:1d:b8:20:d0:74:31:24:3b:b3:74: fa:3e:64:d3:dd:2a:3c:51:ef:5e:2b:65:b7:de:fb: 3b:dc:ad:c4:d7:0a:73:c1:3b:76:15:45:82:43:45: f3:8d:46:21:5e:2a:c7:16:0e:67:79:10:46:c1:58: 74:50:bb:d6:cc:25:0c:72:19:e1:93:43:a9:79:d5: 49:ff:cd:4b:b8:fe:90:d6:77:d4:66:40:c9:7a:61: 47:69:1b:9c:b8:f1:00:d2:49:cd:57:be:b6:69:2a: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:1B:AE:BB:F0:4D:2A:67:52:3C:9E:14:42:79:39:6B:D2:3D:0E X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:37:b1:90:ab:e9:33:8f:78:4d:d5:af:5f:90:51:22:f2: bd:8b:5a:e3:4e:9a:2d:5b:c7:9a:ab:9a:9a:d5:c2:b5:38:6e: 5d:4c:84:08:68:9d:50:7a:e3:70:c6:8a:88:f3:e8:6d:1c:10: 2c:2d:2a:65:65:0a:78:e9:3b:05:ea:f2:31:94:60:e9:38:6a: 4a:16:8d:10:c1:86:13:59:b3:df:60:46:e6:81:64:a3:be:5c: 49:07:19:2f:09:69:04:ca:f2:3e:24:35:94:fc:14:43:ef:3c: 56:40:42:27:c8:12:1f:b8:59:e7:34:a2:0d:9a:46:aa:9c:b5: d9:5c:78:a8:55:30:10:e8:9f:a0:a7:70:5b:97:a7:b0:b9:e1: 8c:6b:68:96:93:52:9c:13:1f:51:32:eb:36:ea:b7:9d:6d:a8: 0e:17:e0:1d:c3:12:ac:a8:f1:03:b5:d1:9c:65:c1:13:c5:4a: 6c:90:6a:e4:94:1a:f2:6b:d4:72:52:a0:7b:95:11:04:93:95: cf:20:9f:55:ba:48:02:71:71:54:99:17:f0:d7:88:09:94:ba: f7:a1:67:78:98:91:67:20:a8:39:7c:e3:70:04:34:c8:ac:71: 89:b6:e3:77:f6:30:f4:a9:30:fe:1b:ad:e5:ae:c0:9d:ff:8d: 38:1b:0c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwNTEyMjExMjAwWhcNMjUwNTE5MjExMjAwWjAYMRYwFAYD VQQDEw02ODIyNjQyMS1kOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35fzb6Jj1Bu6oDe0z8iDWraIDrh36Q+od1mUX+5R79c/MOUjSrKgORlr608j ueubMWTtJKnpuj1fou3z2FnHsUpipYs2tlZ8IP+1NWCIL1pYLEprQcSozsPj/8SG EPT15EcDwFtgnvZlplgvmnejl8mR4lPlYz36G3CQyzq2DidsqyCLRi010kLkRYAx Ms6MaTlJRo5cSgdy8B24INB0MSQ7s3T6PmTT3So8Ue9eK2W33vs73K3E1wpzwTt2 FUWCQ0XzjUYhXirHFg5neRBGwVh0ULvWzCUMchnhk0OpedVJ/81LuP6Q1nfUZkDJ emFHaRucuPEA0knNV762aSpfJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy+G667 8E0qZ1I8nhRCeTlr0j0OMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8jexkKvpM494TdWvX5BRIvK9i1rjTpotW8eaq5qa1cK1OG5dTIQI aJ1QeuNwxoqI8+htHBAsLSplZQp46TsF6vIxlGDpOGpKFo0QwYYTWbPfYEbmgWSj vlxJBxkvCWkEyvI+JDWU/BRD7zxWQEInyBIfuFnnNKINmkaqnLXZXHioVTAQ6J+g p3Bbl6ewueGMa2iWk1KcEx9RMus26redbagOF+AdwxKsqPEDtdGcZcETxUpskGrk lBrya9RyUqB7lREEk5XPIJ9VukgCcXFUmRfw14gJlLr3oWd4mJFnIKg5fONwBDTI rHGJtuN39jD0qTD+G63lrsCd/404Gwzy -----END CERTIFICATE-----Generated at Tue May 13 08:45:37 2025 by rpki-client