$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: MHCH2ztU/p4hptSFEZPw/1TiyyZwzRlykYjg5CjIFrY= Subject key identifier: A8:D5:AD:18:F0:40:6B:D7:0A:65:D1:2B:F1:BC:F7:5B:C9:A2:B2:60 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 314E Signing time: Mon 12 May 2025 15:25:13 +0000 Manifest this update: Mon 12 May 2025 15:25:12 +0000 Manifest next update: Mon 19 May 2025 15:25:12 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: QAxAwIGgyxlWGBwgYTnWg1OdubRJKo8liYccJSaUhqc=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12642 (0x3162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: May 12 15:25:12 2025 GMT Not After : May 19 15:25:12 2025 GMT Subject: CN=682212d8-72fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:25:37:c0:8e:5f:dc:de:a4:aa:10:e6:07: 32:00:72:eb:5a:d0:eb:86:61:d7:a6:a7:a5:2c:41: d1:14:dc:9c:c2:1c:4f:c5:46:41:5e:2d:4b:eb:2d: e2:ff:d3:b2:d2:0f:32:3c:e9:cb:ee:dc:a7:1b:14: 2d:e4:1f:47:5f:8b:f4:ad:5c:99:ed:2c:bb:17:87: 06:f5:bb:90:72:32:3b:49:5d:6f:30:2e:ab:48:cb: 32:16:68:68:93:66:f7:56:c0:a4:ec:64:08:5f:f3: 58:d7:ee:d7:aa:d7:0d:53:04:ac:62:fe:75:56:40: 32:84:ab:42:a4:d6:9f:35:59:98:aa:b9:ef:50:eb: ce:13:15:d0:74:21:46:2c:95:38:4b:58:dc:73:a8: d8:ef:d3:f9:ae:ca:26:0c:00:a5:1d:62:b1:56:81: 51:de:25:24:55:c2:50:87:93:33:db:2c:33:66:61: 5c:c3:c0:f0:a3:4f:8e:10:70:8e:e4:cb:8a:53:db: d7:c0:2d:36:d6:9e:4f:ee:c5:ce:1f:a8:bc:7e:b6: 06:88:cb:26:37:dd:cf:3d:3d:5d:47:86:62:49:9b: 45:d9:96:d7:24:27:cd:ee:4a:74:e0:83:0c:87:48: b8:49:02:b0:c9:85:12:47:9c:50:9d:6d:63:40:6e: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:AD:18:F0:40:6B:D7:0A:65:D1:2B:F1:BC:F7:5B:C9:A2:B2:60 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:76:96:7d:81:3c:a1:c5:cb:3a:a8:65:9a:f2:1d:8d:aa: b9:f8:b2:28:6a:d2:28:a6:87:99:7a:5a:2e:88:b8:dc:d6:f7: f0:e2:be:6f:37:fc:d9:79:4e:9c:0e:af:c5:54:b0:c1:e4:71: 8d:22:0f:d2:42:bf:1d:81:a8:4a:08:63:17:20:d1:33:99:f6: 19:dd:20:a9:17:0a:38:8b:19:93:3d:7c:1a:d8:58:c3:ea:fa: ec:f0:0d:8d:75:b1:b0:dd:b1:24:2e:ae:86:b5:98:65:37:40: 1f:57:ba:58:2f:eb:97:a5:c4:82:2a:b0:2e:d2:cf:d8:d2:01: c2:b7:29:5c:b3:3d:1a:f6:a0:ba:3f:86:85:64:ce:de:33:f9: a3:33:2c:f8:7c:0b:1f:25:ab:75:51:c3:73:bc:d0:85:1b:ae: 17:80:05:d1:16:0d:18:db:d2:55:dd:e9:46:7e:5c:72:49:cc: 32:0a:39:35:6e:d0:b8:78:c9:9a:0d:e9:12:66:ec:f9:28:28: 1b:b0:57:7c:50:87:a6:8f:47:ad:e7:77:00:d4:26:a9:16:fa: e7:70:7f:1b:f6:89:0a:a9:39:98:d8:3d:63:fb:be:b9:12:d2: 6b:bd:f8:3f:5b:00:41:f8:ff:a0:92:97:54:a8:0b:2e:6b:cb: c7:c7:ed:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUwNTEyMTUyNTEyWhcNMjUwNTE5MTUyNTEyWjAYMRYwFAYD VQQDEw02ODIyMTJkOC03MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWQlN8COX9zepKoQ5gcyAHLrWtDrhmHXpqelLEHRFNycwhxPxUZBXi1L6y3i /9Oy0g8yPOnL7tynGxQt5B9HX4v0rVyZ7Sy7F4cG9buQcjI7SV1vMC6rSMsyFmho k2b3VsCk7GQIX/NY1+7XqtcNUwSsYv51VkAyhKtCpNafNVmYqrnvUOvOExXQdCFG LJU4S1jcc6jY79P5rsomDAClHWKxVoFR3iUkVcJQh5Mz2ywzZmFcw8Dwo0+OEHCO 5MuKU9vXwC021p5P7sXOH6i8frYGiMsmN93PPT1dR4ZiSZtF2ZbXJCfN7kp04IMM h0i4SQKwyYUSR5xQnW1jQG710QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjVrRjw QGvXCmXRK/G891vJorJgMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2UHaWfYE8ocXLOqhlmvIdjaq5+LIoatIopoeZelouiLjc1vfw4r5v N/zZeU6cDq/FVLDB5HGNIg/SQr8dgahKCGMXINEzmfYZ3SCpFwo4ixmTPXwa2FjD 6vrs8A2NdbGw3bEkLq6GtZhlN0AfV7pYL+uXpcSCKrAu0s/Y0gHCtylcsz0a9qC6 P4aFZM7eM/mjMyz4fAsfJat1UcNzvNCFG64XgAXRFg0Y29JV3elGflxyScwyCjk1 btC4eMmaDekSZuz5KCgbsFd8UIemj0et53cA1CapFvrncH8b9okKqTmY2D1j+765 EtJrvfg/WwBB+P+gkpdUqAsua8vHx+16 -----END CERTIFICATE-----Generated at Mon May 12 23:15:29 2025 by rpki-client