$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json) Hash identifier: Pts0ym0YK+u3rm8ONyafP2iFuFuYC2HQiwM7yM6qcRw= Subject key identifier: 15:3F:E0:AB:80:B1:22:EE:57:B0:75:A9:9D:71:4C:3D:BA:28:E9:B9 Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft Manifest number: 01A6 Signing time: Sun 11 May 2025 02:17:17 +0000 Manifest this update: Sun 11 May 2025 02:17:16 +0000 Manifest next update: Sun 18 May 2025 02:17:16 +0000 Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: Yg2UXqDiGampOS8DGEf+SYZD+2PEuCXL/a2IcVnOlzw=) 2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: ck7frHwbdvA8vLLhGdgsJbIt8cpEwUyRbFKBDEFTB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A Validity Not Before: May 11 02:17:16 2025 GMT Not After : May 18 02:17:16 2025 GMT Subject: CN=682008ad-2278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1b:f5:06:fa:15:ff:9f:7a:28:7a:a1:0c:b9: 16:e1:0d:a4:97:16:74:14:fd:12:ea:38:ce:9a:2c: af:af:1c:db:cc:a8:99:36:5e:d9:5c:9e:64:dc:2b: 13:46:6e:b7:20:1b:9c:13:94:69:d2:36:2a:5e:97: 6a:c9:f7:1f:c3:ca:a8:7c:d3:82:8d:bb:bc:7e:73: 42:81:fb:4f:2e:26:77:d6:27:bc:ad:c3:d2:53:ee: 98:d4:9d:09:85:9b:25:a1:9b:f7:3c:12:cb:15:20: 58:f4:60:5d:46:b4:2c:66:a6:ff:54:b5:fc:40:45: b1:2f:67:5f:07:c9:04:ef:ff:9a:d0:aa:be:93:57: 1b:37:2a:0e:8e:15:bd:e8:e3:6b:8b:fa:2a:e2:91: cc:32:80:0b:b2:d1:08:c7:dd:48:4f:ae:cd:7d:4b: c9:62:88:28:ba:b3:ed:eb:90:c1:73:c6:a3:1c:48: 44:cd:91:e8:9e:4b:db:b7:ee:86:05:08:fa:30:29: 4f:54:1e:f4:ac:8f:8e:28:49:7e:4a:5b:61:94:99: 0c:ca:19:36:21:c9:d0:1e:3f:b6:1c:f2:27:ae:92: b4:4a:02:50:9c:a2:aa:5b:7a:5c:21:57:6f:89:bf: 1e:6a:62:53:8f:f9:01:5e:dd:97:14:6e:f3:66:fb: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:E0:AB:80:B1:22:EE:57:B0:75:A9:9D:71:4C:3D:BA:28:E9:B9 X509v3 Authority Key Identifier: keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2c:fc:16:9b:19:a3:8e:36:9b:9e:cf:3d:09:a1:1b:e1:ae: 52:0e:7d:93:67:19:94:f9:e3:3a:82:fd:64:b6:ca:f6:ac:4c: f8:ea:75:af:f3:7f:14:fa:87:c7:e7:b1:eb:65:51:79:47:1d: 8b:83:45:00:aa:e8:7b:f3:86:a3:f9:d2:c8:2b:d0:62:9e:1a: db:b3:99:f0:0e:c1:c0:0e:f5:e4:db:72:33:2a:b7:77:13:cd: 47:ed:40:35:07:ea:f7:c0:9d:9b:3c:fc:df:8b:0d:16:91:32: 7e:1c:0a:93:f6:08:a8:02:7c:29:f8:a3:ff:60:de:ab:ba:4c: b6:26:4d:a7:3c:52:4c:e5:7f:e0:16:a3:2c:64:e0:f4:a6:b6: ce:ab:f7:b4:76:e8:74:cd:da:f3:ca:c7:99:cd:6e:e3:54:9f: 4c:bb:20:b0:0e:09:ec:4b:57:9d:31:93:23:8d:c3:9a:42:f2: 6f:dc:bb:cc:10:bd:e3:4b:a7:3f:8a:9e:44:b6:66:cd:d7:8e: 48:e6:9f:d5:82:7d:87:ae:9f:25:0e:6c:62:a4:e6:d0:75:ad: c4:9d:a2:2d:97:4d:97:0d:ea:17:43:41:d5:70:fe:8a:5c:ab: 8b:5c:33:ae:9f:ff:04:75:23:d7:f7:f4:a0:e2:8a:66:71:a3: 70:0d:01:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCNEMxMTAvBgNVBAUTKDYzNDk3MzU5MDRFMUJDMEQ2NUJENTk0QTA3NzYyQkI1 Mjk5QzAzOEEwHhcNMjUwNTExMDIxNzE2WhcNMjUwNTE4MDIxNzE2WjAYMRYwFAYD VQQDEw02ODIwMDhhZC0yMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bv1BvoV/596KHqhDLkW4Q2klxZ0FP0S6jjOmiyvrxzbzKiZNl7ZXJ5k3CsT Rm63IBucE5Rp0jYqXpdqyfcfw8qofNOCjbu8fnNCgftPLiZ31ie8rcPSU+6Y1J0J hZsloZv3PBLLFSBY9GBdRrQsZqb/VLX8QEWxL2dfB8kE7/+a0Kq+k1cbNyoOjhW9 6ONri/oq4pHMMoALstEIx91IT67NfUvJYogourPt65DBc8ajHEhEzZHonkvbt+6G BQj6MClPVB70rI+OKEl+SlthlJkMyhk2IcnQHj+2HPInrpK0SgJQnKKqW3pcIVdv ib8eamJTj/kBXt2XFG7zZvuBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBU/4KuA sSLuV7B1qZ1xTD26KOm5MB8GA1UdIwQYMBaAFGNJc1kE4bwNZb1ZSgd2K7UpnAOK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qy9DNDcwQjIyQUIy OTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZBMWx2VmxLQjNZcnRTbWNB NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwbHpXUVRodkExbHZWbEtCM1lydFNtY0E0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI0Qy9DNDcwQjIyQUIyOTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZB MWx2VmxLQjNZcnRTbWNBNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLPwWmxmjjjabns89CaEb4a5SDn2TZxmU+eM6gv1ktsr2rEz46nWv 838U+ofH57HrZVF5Rx2Lg0UAquh784aj+dLIK9Binhrbs5nwDsHADvXk23IzKrd3 E81H7UA1B+r3wJ2bPPzfiw0WkTJ+HAqT9gioAnwp+KP/YN6ruky2Jk2nPFJM5X/g FqMsZOD0prbOq/e0duh0zdrzyseZzW7jVJ9MuyCwDgnsS1edMZMjjcOaQvJv3LvM EL3jS6c/ip5EtmbN145I5p/Vgn2Hrp8lDmxipObQda3EnaItl02XDeoXQ0HVcP6K XKuLXDOun/8EdSPX9/Sg4opmcaNwDQHd -----END CERTIFICATE-----Generated at Mon May 12 18:26:02 2025 by rpki-client