$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: 20y1GoRJpayf5eTwsD7Xo06GScnTsPsqNa4oS62GQ/U= Subject key identifier: F7:E9:7D:76:17:32:0F:89:81:08:81:FB:C1:99:EE:45:37:35:3D:D1 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 05A1 Signing time: Mon 12 May 2025 22:58:41 +0000 Manifest this update: Mon 12 May 2025 22:58:40 +0000 Manifest next update: Mon 19 May 2025 22:58:40 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: D7wOvSkjrkBCo3OWQKg+6brKi4+QFgE2+QA2Z9onSHE=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: CjCSmslBUSukL+VQeriKJzpmD5FpwHuT7xL5fJExCAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: May 12 22:58:40 2025 GMT Not After : May 19 22:58:40 2025 GMT Subject: CN=68227d21-502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:20:46:29:4c:6e:01:d2:90:95:47:b6:85: 75:38:37:05:be:49:6b:71:bb:65:be:89:a4:58:79: 2f:9e:55:5c:15:7c:ca:f2:cb:8a:95:60:f0:12:dc: 80:e1:c0:bd:fa:37:87:2e:83:c9:14:ce:35:89:fb: de:77:8a:b3:76:31:22:73:51:22:bc:eb:26:67:61: 90:f0:c3:04:be:cf:9e:00:cc:27:1f:46:3a:3d:d6: 30:6e:59:c5:5a:9c:55:ec:6d:63:df:e5:ca:90:b2: fa:3d:62:26:61:1c:10:8b:d5:b9:65:58:84:6b:81: c4:66:16:9e:b3:d9:6e:72:19:6e:1c:2c:1e:af:1a: 1d:0c:af:ab:e9:82:bd:a3:b0:28:ec:e1:ab:1b:9a: 0d:45:88:6d:1d:0d:4f:0b:89:b6:ab:f5:a6:d0:84: 2e:15:55:61:74:e7:50:83:96:f0:90:fa:77:aa:b6: a9:db:9d:31:23:72:b9:af:55:55:06:53:e9:89:b5: 87:02:4e:4a:d9:6f:49:27:2e:37:bd:b3:6e:51:17: d1:c7:90:a8:91:99:05:2b:e0:08:a8:5d:00:2e:ec: 85:8d:1a:64:5d:47:e5:ab:10:75:03:20:da:94:af: 6a:66:eb:d4:72:a0:40:e1:2d:6f:8a:1a:a3:fd:2c: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E9:7D:76:17:32:0F:89:81:08:81:FB:C1:99:EE:45:37:35:3D:D1 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:80:9e:ee:c7:cb:66:48:42:d1:fa:19:c7:9e:2a:ac:49:40: 47:e9:15:2c:cc:56:9a:66:b1:08:61:3d:b8:5e:c4:a1:a8:24: 99:c3:ea:c8:a3:7f:27:90:11:6a:5e:bc:9c:99:22:6c:c8:d4: c4:56:18:5a:cd:35:f7:96:df:c6:47:b4:1d:65:c9:db:dd:22: f1:ab:43:f5:47:73:8b:21:2c:fd:c5:c6:0d:9a:c6:10:97:58: bb:77:9b:91:5f:8c:b4:f9:f9:3c:d3:13:a2:fc:8f:99:09:3e: 6c:61:84:44:d2:2f:af:2b:98:8b:73:44:fc:dc:a5:4f:2a:a6: a8:3e:c3:35:f0:0b:8c:79:5f:65:45:5e:ab:2c:fc:d4:2b:ca: 82:1f:bd:65:76:79:20:f6:d2:c5:4d:7b:36:a4:ac:24:2a:10: 16:45:e3:6c:d7:f6:30:a0:bd:75:50:d6:c7:06:cd:1d:9e:a5: 3f:4f:36:9b:29:85:f4:4a:16:da:3e:e3:dc:53:dc:0f:c9:d5: 50:c2:1d:9e:55:f4:67:c1:1a:c2:71:88:bd:d7:ef:7c:55:d3: 56:b4:1e:b7:1b:36:da:04:4e:fe:1f:85:84:bf:05:5f:9d:cb: 71:01:c9:38:46:5e:a3:a1:54:c7:74:81:75:dc:49:9e:03:a3: 15:0e:bb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjUwNTEyMjI1ODQwWhcNMjUwNTE5MjI1ODQwWjAYMRYwFAYD VQQDEw02ODIyN2QyMS01MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOMgRilMbgHSkJVHtoV1ODcFvklrcbtlvomkWHkvnlVcFXzK8suKlWDwEtyA 4cC9+jeHLoPJFM41ifved4qzdjEic1EivOsmZ2GQ8MMEvs+eAMwnH0Y6PdYwblnF WpxV7G1j3+XKkLL6PWImYRwQi9W5ZViEa4HEZhaes9luchluHCwerxodDK+r6YK9 o7Ao7OGrG5oNRYhtHQ1PC4m2q/Wm0IQuFVVhdOdQg5bwkPp3qrap250xI3K5r1VV BlPpibWHAk5K2W9JJy43vbNuURfRx5CokZkFK+AIqF0ALuyFjRpkXUflqxB1AyDa lK9qZuvUcqBA4S1vihqj/SyFcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfpfXYX Mg+JgQiB+8GZ7kU3NT3RMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWgJ7ux8tmSELR+hnHniqsSUBH6RUszFaaZrEIYT24XsShqCSZw+rI o38nkBFqXrycmSJsyNTEVhhazTX3lt/GR7QdZcnb3SLxq0P1R3OLISz9xcYNmsYQ l1i7d5uRX4y0+fk80xOi/I+ZCT5sYYRE0i+vK5iLc0T83KVPKqaoPsM18AuMeV9l RV6rLPzUK8qCH71ldnkg9tLFTXs2pKwkKhAWReNs1/YwoL11UNbHBs0dnqU/Tzab KYX0ShbaPuPcU9wPydVQwh2eVfRnwRrCcYi91+98VdNWtB63GzbaBE7+H4WEvwVf nctxAck4Rl6joVTHdIF13EmeA6MVDrtl -----END CERTIFICATE-----Generated at Tue May 13 14:01:42 2025 by rpki-client