$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: 56EqDjTiSHgaa4H7PpebdweTQV1Z0wH0a1/9fliZ60A= Subject key identifier: 90:80:36:A4:A3:C8:14:9A:6B:5B:18:00:3C:A0:3D:2C:88:AF:6E:2F Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B45 Signing time: Fri 16 May 2025 19:24:22 +0000 Manifest this update: Fri 16 May 2025 19:24:22 +0000 Manifest next update: Fri 23 May 2025 19:24:22 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: mzZNfXlmbiU7dTkzKUtlXmwdhB5X3jFVwX+Kg2GpJ1M=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: May 16 19:24:22 2025 GMT Not After : May 23 19:24:22 2025 GMT Subject: CN=682790e6-153a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:a4:5a:79:f9:f1:ac:9a:8f:37:3d:19:f2: 66:c6:1f:9c:53:89:1e:9e:c7:f3:13:e6:d0:ef:ed: a6:89:84:61:b8:11:c0:84:fa:1b:bc:47:7f:5a:fd: c2:c7:97:47:f1:5c:9f:6c:df:46:79:a4:dc:2a:35: 6a:cc:d6:f9:6b:1f:1c:16:32:a7:4a:e8:76:67:0b: e0:17:5c:52:9c:b7:4c:94:09:9b:4e:0c:31:9d:62: de:bf:8f:d6:4b:6a:6c:cb:29:c8:16:c4:c4:c3:84: 81:1a:ba:cb:52:c2:cd:0b:e4:69:a7:f1:e9:1a:ba: 60:da:b4:bf:cc:bd:be:3b:2f:54:07:44:8d:b2:26: 9c:ca:11:0b:7f:12:ab:0a:a2:b4:0a:49:e8:58:d7: f8:34:a2:56:fa:b6:93:39:34:7d:b2:e6:79:7d:eb: 78:86:43:98:07:94:45:e6:ad:84:a5:35:18:90:0f: 70:17:fb:78:7f:3f:1c:93:68:e6:b8:6f:32:11:65: 6d:b3:3a:e0:0a:26:0d:6c:4c:ea:14:4a:56:5a:30: 3a:7d:c2:fd:13:14:ed:6e:c3:3c:f0:bd:3d:cc:7d: 2b:46:27:18:68:40:bc:ec:a6:0b:05:ac:06:43:0c: 4b:64:a3:40:5f:b1:c1:f8:4a:1c:dc:d0:37:ab:46: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:36:A4:A3:C8:14:9A:6B:5B:18:00:3C:A0:3D:2C:88:AF:6E:2F X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:22:81:11:e4:ba:9d:60:46:e0:03:5b:1d:d8:d2:0f:d0:cf: ec:6a:4c:16:07:da:ab:aa:39:46:75:29:a1:9b:ff:15:c1:32: 50:2f:3c:a8:51:f5:94:e0:b4:30:32:06:ae:46:7f:76:2c:9d: b5:90:84:43:e5:5e:24:54:07:4e:f4:43:36:de:77:44:e1:c8: bc:34:2f:c0:76:91:17:88:63:d6:d3:b4:2e:5a:21:46:d8:4f: ea:9c:11:ff:bf:13:85:d8:43:36:cf:4a:c0:c3:59:3d:fc:d3: d3:5a:b9:44:73:7d:ec:a8:55:fc:5f:94:09:0e:bf:85:f5:48: 55:15:82:27:1f:0e:35:db:e0:55:6b:d0:3e:e9:54:b0:a1:f8: 19:ac:d4:d8:02:65:27:8d:3c:c6:74:67:af:16:7b:f0:5e:36: af:94:6a:02:aa:88:66:80:56:bb:33:b8:83:f9:6e:c6:81:cd: 1a:4c:61:00:f9:2e:16:16:50:a1:24:69:5a:9e:14:db:72:ed: 47:fe:ac:8e:2b:fd:2f:e7:fc:c6:eb:09:2e:d6:15:90:6a:45: c3:84:8a:87:7b:3d:d5:c3:50:ac:85:53:9b:b8:3f:0e:bc:ac: e3:fc:0e:8e:74:ed:52:56:63:74:b1:24:e6:80:a0:4d:22:a5: 3d:eb:61:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwNTE2MTkyNDIyWhcNMjUwNTIzMTkyNDIyWjAYMRYwFAYD VQQDEw02ODI3OTBlNi0xNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFikWnn58ayajzc9GfJmxh+cU4kensfzE+bQ7+2miYRhuBHAhPobvEd/Wv3C x5dH8VyfbN9GeaTcKjVqzNb5ax8cFjKnSuh2ZwvgF1xSnLdMlAmbTgwxnWLev4/W S2psyynIFsTEw4SBGrrLUsLNC+Rpp/HpGrpg2rS/zL2+Oy9UB0SNsiacyhELfxKr CqK0CknoWNf4NKJW+raTOTR9suZ5fet4hkOYB5RF5q2EpTUYkA9wF/t4fz8ck2jm uG8yEWVtszrgCiYNbEzqFEpWWjA6fcL9ExTtbsM88L09zH0rRicYaEC87KYLBawG QwxLZKNAX7HB+Eoc3NA3q0adNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCANqSj yBSaa1sYADygPSyIr24vMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4IoER5LqdYEbgA1sd2NIP0M/sakwWB9qrqjlGdSmhm/8VwTJQLzyo UfWU4LQwMgauRn92LJ21kIRD5V4kVAdO9EM23ndE4ci8NC/AdpEXiGPW07QuWiFG 2E/qnBH/vxOF2EM2z0rAw1k9/NPTWrlEc33sqFX8X5QJDr+F9UhVFYInHw412+BV a9A+6VSwofgZrNTYAmUnjTzGdGevFnvwXjavlGoCqohmgFa7M7iD+W7Ggc0aTGEA +S4WFlChJGlanhTbcu1H/qyOK/0v5/zG6wku1hWQakXDhIqHez3Vw1CshVObuD8O vKzj/A6OdO1SVmN0sSTmgKBNIqU962H1 -----END CERTIFICATE-----Generated at Sat May 17 15:52:08 2025 by rpki-client