$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: sBqCjxaGJ7ypq3vuIdU2qSqWnG/X57yI+KxCodfE9mM= Subject key identifier: 6B:C6:24:C8:0A:7A:0F:9C:58:0D:27:44:24:81:EE:6A:5F:96:AC:DB Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 24C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 24B0 Signing time: Wed 14 May 2025 15:51:31 +0000 Manifest this update: Wed 14 May 2025 15:51:30 +0000 Manifest next update: Wed 21 May 2025 15:51:30 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: r5GOVFUKlwyJHGCQkHSlSnueUelkMjDPzZHVji9e5TI=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: VpHAZdWeijuNJKWvKLj0k1xE9YF+5hfOXRYAI6729SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9409 (0x24c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: May 14 15:51:30 2025 GMT Not After : May 21 15:51:30 2025 GMT Subject: CN=6824bc02-cebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:1b:5c:b9:68:94:47:b8:d2:5d:8f:10:0f: 76:42:81:6d:a3:27:13:79:11:5d:a7:c7:e4:99:97: 3b:82:8c:d9:fc:cc:c0:11:83:db:56:8b:31:43:2e: 9e:bc:9c:17:a1:6f:7d:a3:a1:98:1e:57:f0:34:45: cb:49:98:72:00:f8:5b:9d:c3:0f:4a:9b:dc:e1:72: fe:f7:43:b5:d5:c0:c7:ff:be:a8:81:91:ba:f1:e3: 90:7b:ff:35:95:72:aa:15:16:de:1f:2b:dd:85:55: 0f:c1:c3:1c:8f:6b:4d:3b:dc:ca:b3:ae:4d:96:69: d8:16:57:d7:b5:17:04:c5:df:15:56:f2:44:16:90: 40:7e:58:39:b8:af:15:e0:07:97:a7:59:2a:49:a3: 22:49:04:c1:87:6f:f3:e0:6b:e7:d5:fd:9d:f0:1d: a3:db:73:12:49:2e:0f:15:1e:ef:47:9e:17:bd:bd: ca:c8:d1:da:97:8f:58:8b:71:1f:53:17:7a:da:07: 8d:5e:32:80:98:4c:1c:59:0e:a3:0c:92:4d:31:62: f5:60:fb:19:d1:2b:d0:d7:d9:05:9c:66:b8:d3:69: d9:9d:bc:d8:b1:71:66:e8:62:82:52:9e:5b:07:89: 1e:cd:55:03:c5:ab:c1:1b:ea:44:05:99:de:1b:ea: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C6:24:C8:0A:7A:0F:9C:58:0D:27:44:24:81:EE:6A:5F:96:AC:DB X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:34:73:1c:37:0e:84:f3:bc:71:c0:06:08:7a:1c:85:b5:cc: 42:9f:6d:86:c5:fd:02:45:95:ec:c6:a0:3f:fe:8f:04:62:d8: 70:3e:6c:f4:f2:24:10:03:59:67:77:32:da:cb:de:2f:6a:ee: 76:09:2f:ae:f2:59:d0:82:b7:fe:df:e8:dd:d5:fb:12:b7:83: 19:fa:79:20:7f:36:7f:93:25:cb:25:54:f6:cc:95:41:17:b3: a4:3e:6e:0f:f2:e4:98:c7:f6:54:e3:b5:5b:39:ef:ed:9e:e2: 1b:2e:aa:49:16:0d:fb:b2:00:ec:e8:7f:15:6c:2e:55:72:80: f1:e3:bb:a6:c8:7e:8c:ef:6e:ec:51:81:47:cb:3a:ab:d7:49: 03:f1:b2:5b:b8:54:73:12:6c:ab:22:6b:4a:7c:3b:64:94:ae: b8:32:a6:a6:a5:d6:0f:9c:54:12:3e:a7:e3:a5:34:6f:2e:7b: f2:c9:c2:d2:ee:c4:08:bf:c5:bd:14:dc:37:64:e9:e3:b3:b9: 2e:4d:d8:94:68:c8:e6:86:40:d7:da:6a:c5:7a:45:5b:21:1f: 75:b1:a0:d2:fb:a9:c0:99:2a:c7:6b:a0:dc:79:33:9c:66:d2: 14:c6:12:4f:80:4f:42:d7:12:51:ff:92:89:05:14:49:eb:50: 2c:76:99:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUwNTE0MTU1MTMwWhcNMjUwNTIxMTU1MTMwWjAYMRYwFAYD VQQDEw02ODI0YmMwMi1jZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6wbXLlolEe40l2PEA92QoFtoycTeRFdp8fkmZc7gozZ/MzAEYPbVosxQy6e vJwXoW99o6GYHlfwNEXLSZhyAPhbncMPSpvc4XL+90O11cDH/76ogZG68eOQe/81 lXKqFRbeHyvdhVUPwcMcj2tNO9zKs65NlmnYFlfXtRcExd8VVvJEFpBAflg5uK8V 4AeXp1kqSaMiSQTBh2/z4Gvn1f2d8B2j23MSSS4PFR7vR54Xvb3KyNHal49Yi3Ef Uxd62geNXjKAmEwcWQ6jDJJNMWL1YPsZ0SvQ19kFnGa402nZnbzYsXFm6GKCUp5b B4kezVUDxavBG+pEBZneG+oEWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvGJMgK eg+cWA0nRCSB7mpflqzbMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlNHMcNw6E87xxwAYIehyFtcxCn22Gxf0CRZXsxqA//o8EYthwPmz0 8iQQA1lndzLay94vau52CS+u8lnQgrf+3+jd1fsSt4MZ+nkgfzZ/kyXLJVT2zJVB F7OkPm4P8uSYx/ZU47VbOe/tnuIbLqpJFg37sgDs6H8VbC5VcoDx47umyH6M727s UYFHyzqr10kD8bJbuFRzEmyrImtKfDtklK64MqampdYPnFQSPqfjpTRvLnvyycLS 7sQIv8W9FNw3ZOnjs7kuTdiUaMjmhkDX2mrFekVbIR91saDS+6nAmSrHa6DceTOc ZtIUxhJPgE9C1xJR/5KJBRRJ61AsdplY -----END CERTIFICATE-----Generated at Thu May 15 15:37:31 2025 by rpki-client