$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: aBWa4KVWoYElMLRdfoCaIXLG0CkzHBFkrZ+xnDAqrkE= Subject key identifier: C2:F1:7E:BA:CE:DD:55:76:F0:DE:6A:84:67:1A:29:CE:CD:6E:24:69 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 025E Signing time: Sun 11 May 2025 01:19:38 +0000 Manifest this update: Sun 11 May 2025 01:19:37 +0000 Manifest next update: Sun 18 May 2025 01:19:37 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: DHx/0FoF8pAnM9FPYs+qY9CeI8998w/zp90syDxmdFw=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: May 11 01:19:37 2025 GMT Not After : May 18 01:19:37 2025 GMT Subject: CN=681ffb29-3b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:c7:52:67:a5:a4:a9:4d:34:17:0e:af:f0: 4a:6e:47:37:78:2a:91:49:39:11:64:92:b8:11:a8: 09:12:c3:74:b4:c7:06:5d:aa:84:d6:1c:71:da:29: ff:e9:92:1a:0f:b5:0d:04:bb:5d:76:2c:c6:89:49: ed:0d:19:77:4c:4a:ab:cd:cc:48:30:21:a0:c7:8e: 25:de:ae:8d:0d:64:37:21:35:d6:bf:35:42:34:45: 64:4d:54:41:7e:de:33:dd:7f:50:ca:57:34:34:35: 22:5f:16:ba:b2:02:39:14:54:fc:84:67:62:85:d5: 43:4b:ec:ed:84:1c:ec:5e:f2:90:35:d4:43:63:60: 3e:72:08:6c:d4:c2:db:94:16:41:a2:0d:e9:95:ef: a6:66:c8:53:46:e1:7f:90:9c:5e:f5:d0:d7:70:a6: 32:df:3d:ab:59:0d:52:b7:a8:ee:75:3a:f2:d0:c6: a6:57:af:e0:7c:0c:89:1b:2a:34:0e:92:e7:6a:1d: 1d:ff:5c:75:a3:0b:12:d5:08:1c:b0:37:4f:f5:c1: 31:7e:c5:28:90:d5:17:f2:9a:15:2d:b6:fc:9c:25: 55:cc:fb:f2:6f:40:fe:af:60:cb:4d:a0:db:7c:ee: b6:ee:bf:cf:04:2b:63:33:70:ce:9a:cc:6c:33:fe: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F1:7E:BA:CE:DD:55:76:F0:DE:6A:84:67:1A:29:CE:CD:6E:24:69 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:12:7e:ee:60:06:ea:4d:10:5d:06:03:9a:20:2f:2a:ea:e2: 07:21:f7:4f:ea:05:98:f9:69:b2:4f:95:57:f4:f2:37:1b:91: b2:24:55:91:3a:f3:b3:ba:f6:dd:53:f7:59:0c:5e:17:71:9a: f7:94:ef:e9:25:7f:26:0f:af:2f:a4:f6:90:4e:08:df:65:4f: a3:8b:5b:11:29:d8:40:ec:dc:2f:39:ad:74:c6:cb:54:20:9e: 23:3d:c4:d1:7b:d0:17:ea:49:ac:3e:2a:c9:ad:9e:94:fc:5e: 3b:95:36:4c:af:7e:b9:06:08:47:4e:df:d3:4e:4f:ec:2e:e7: 71:1f:20:71:fe:e8:45:70:e7:c6:12:ad:5a:23:37:92:42:29: d6:62:34:3e:16:25:0e:a9:cb:f2:dc:2d:93:1c:82:1d:8a:bb: 1c:70:b4:14:e5:36:3a:1b:bd:21:22:86:75:2d:d5:8e:e4:7c: 3e:97:31:f9:0a:15:ef:6a:15:9c:fb:65:e4:05:cd:3c:d7:3c: f0:bc:67:be:5f:cb:1f:fe:1b:ce:9d:bf:09:45:35:83:87:9e: ff:e4:a4:a5:5d:29:e5:40:bd:a8:21:dc:84:95:b0:9e:e8:04: a4:3b:01:df:90:0b:0b:a8:69:dd:35:4b:9d:cf:30:1b:d6:b1: dc:51:52:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwNTExMDExOTM3WhcNMjUwNTE4MDExOTM3WjAYMRYwFAYD VQQDEw02ODFmZmIyOS0zYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyvHUmelpKlNNBcOr/BKbkc3eCqRSTkRZJK4EagJEsN0tMcGXaqE1hxx2in/ 6ZIaD7UNBLtddizGiUntDRl3TEqrzcxIMCGgx44l3q6NDWQ3ITXWvzVCNEVkTVRB ft4z3X9Qylc0NDUiXxa6sgI5FFT8hGdihdVDS+zthBzsXvKQNdRDY2A+cghs1MLb lBZBog3ple+mZshTRuF/kJxe9dDXcKYy3z2rWQ1St6judTry0MamV6/gfAyJGyo0 DpLnah0d/1x1owsS1QgcsDdP9cExfsUokNUX8poVLbb8nCVVzPvyb0D+r2DLTaDb fO627r/PBCtjM3DOmsxsM/4XIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLxfrrO 3VV28N5qhGcaKc7NbiRpMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaEn7uYAbqTRBdBgOaIC8q6uIHIfdP6gWY+WmyT5VX9PI3G5GyJFWR OvOzuvbdU/dZDF4XcZr3lO/pJX8mD68vpPaQTgjfZU+ji1sRKdhA7NwvOa10xstU IJ4jPcTRe9AX6kmsPirJrZ6U/F47lTZMr365BghHTt/TTk/sLudxHyBx/uhFcOfG Eq1aIzeSQinWYjQ+FiUOqcvy3C2THIIdirsccLQU5TY6G70hIoZ1LdWO5Hw+lzH5 ChXvahWc+2XkBc081zzwvGe+X8sf/hvOnb8JRTWDh57/5KSlXSnlQL2oIdyElbCe 6ASkOwHfkAsLqGndNUudzzAb1rHcUVJP -----END CERTIFICATE-----Generated at Mon May 12 18:18:57 2025 by rpki-client