$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: 8fCSZc6LNVU70eJI15YNLXSHX3vX2JxyTjoCiAGT+0k= Subject key identifier: 2A:FB:82:32:F0:83:D3:73:F6:6E:49:E2:E1:5C:43:53:F5:A0:19:75 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0E43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0E2F Signing time: Mon 12 May 2025 17:42:33 +0000 Manifest this update: Mon 12 May 2025 17:42:33 +0000 Manifest next update: Mon 19 May 2025 17:42:33 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: wpmXL8NslsS6UIPAowMA9G2Xp74eyehbpGKD+qET0rs=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ko6JuSH5KdHDRvbFAlQ/kuUaDfW5QK4Fi6pI4fCmc9Y=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: IVs/EZ3aUjzucqrKlhAwA1VLfGJK+bUizU/goA1sqEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3651 (0xe43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: May 12 17:42:33 2025 GMT Not After : May 19 17:42:33 2025 GMT Subject: CN=68223309-92c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:dd:af:c0:9b:be:9a:92:5f:f7:b3:fb:36: d5:35:7b:fb:bd:52:f9:61:6d:df:1d:f3:52:54:79: ee:8d:d4:0c:f0:8b:4c:9e:41:3b:9b:4b:aa:cf:12: 23:85:da:d2:53:48:e4:ef:6f:63:48:cb:93:3c:e9: 5a:ba:3e:78:26:7e:40:2c:0f:e4:0e:46:7e:1e:9b: 5e:32:6a:6d:ed:d2:86:d2:cc:b8:a5:61:63:49:73: 7c:18:48:4e:c4:01:2c:e0:bb:5e:5d:67:a4:ef:43: 9b:91:70:e3:92:1a:99:1d:0b:ec:f6:a9:35:52:ef: 36:cb:63:b8:01:ba:5a:b1:0e:d4:4e:69:57:d1:8a: 97:b9:76:d8:10:98:35:42:97:97:70:48:fe:6b:7e: 44:7e:e1:52:d4:24:57:03:f8:62:af:20:c5:e3:d4: 14:92:29:80:a7:e6:fa:57:94:48:a3:c5:74:52:21: eb:7f:da:5d:11:04:0d:74:f6:3f:70:c4:e5:04:8f: 1c:ff:dd:a5:27:80:ab:91:09:11:96:72:61:20:57: 38:32:e6:97:5f:77:87:6a:f0:48:94:e0:64:03:f3: 45:f5:33:32:54:c5:c3:bf:ca:ad:4b:f9:16:5c:b3: 5f:4d:a3:8e:fa:9e:87:de:bf:9d:c4:63:52:a5:be: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:82:32:F0:83:D3:73:F6:6E:49:E2:E1:5C:43:53:F5:A0:19:75 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6e:0e:67:07:26:45:27:cc:73:c1:67:8d:24:33:f9:cd:e2: aa:4f:b6:b7:47:1f:c6:56:ae:3b:5c:69:22:b1:d7:fd:3f:c9: 34:3e:cb:ca:c2:57:d0:8c:a5:35:a5:ce:00:ba:03:53:8a:02: be:7e:82:84:7a:47:21:39:96:d5:64:e1:92:5c:34:63:de:73: 47:e9:a0:53:2e:cb:e2:49:81:d2:ad:e8:92:4f:35:7c:24:f1: 0a:17:6c:28:f5:cf:58:68:b6:b8:ca:62:be:02:25:03:f8:bd: 1a:b7:e6:46:84:3e:30:ab:cb:50:69:56:45:cd:b1:70:eb:9d: ae:17:18:77:72:0a:93:03:68:e9:6f:f5:fe:b2:85:ec:3d:e0: fc:4d:e3:e6:30:ac:bd:fa:4e:4e:b9:ec:bc:b8:39:ff:47:47: 3f:19:cb:9d:c6:3a:72:93:8a:87:81:c5:d1:61:a4:9b:9b:a6: e2:4d:2b:fa:a9:09:d4:b6:9f:c6:eb:90:a7:70:4f:96:b1:45: fe:31:5e:79:da:26:38:d8:f2:61:f2:29:6f:c3:f1:78:9c:12: 69:eb:53:a9:0e:8c:d1:0c:03:ec:8c:50:60:36:ee:01:b9:73: 86:48:e1:51:66:9c:fe:1b:33:ab:f4:11:77:f7:57:bc:45:5b: 95:07:86:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUwNTEyMTc0MjMzWhcNMjUwNTE5MTc0MjMzWjAYMRYwFAYD VQQDEw02ODIyMzMwOS05MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGHdr8CbvpqSX/ez+zbVNXv7vVL5YW3fHfNSVHnujdQM8ItMnkE7m0uqzxIj hdrSU0jk729jSMuTPOlauj54Jn5ALA/kDkZ+HpteMmpt7dKG0sy4pWFjSXN8GEhO xAEs4LteXWek70ObkXDjkhqZHQvs9qk1Uu82y2O4AbpasQ7UTmlX0YqXuXbYEJg1 QpeXcEj+a35EfuFS1CRXA/hiryDF49QUkimAp+b6V5RIo8V0UiHrf9pdEQQNdPY/ cMTlBI8c/92lJ4CrkQkRlnJhIFc4MuaXX3eHavBIlOBkA/NF9TMyVMXDv8qtS/kW XLNfTaOO+p6H3r+dxGNSpb5/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr7gjLw g9Nz9m5J4uFcQ1P1oBl1MB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLbg5nByZFJ8xzwWeNJDP5zeKqT7a3Rx/GVq47XGkisdf9P8k0PsvK wlfQjKU1pc4AugNTigK+foKEekchOZbVZOGSXDRj3nNH6aBTLsviSYHSreiSTzV8 JPEKF2wo9c9YaLa4ymK+AiUD+L0at+ZGhD4wq8tQaVZFzbFw652uFxh3cgqTA2jp b/X+soXsPeD8TePmMKy9+k5Ouey8uDn/R0c/Gcudxjpyk4qHgcXRYaSbm6biTSv6 qQnUtp/G65CncE+WsUX+MV552iY42PJh8ilvw/F4nBJp61OpDozRDAPsjFBgNu4B uXOGSOFRZpz+GzOr9BF391e8RVuVB4b2 -----END CERTIFICATE-----Generated at Mon May 12 19:54:39 2025 by rpki-client