$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: x1dl81eVLAachsRYc7RxYSbP443oyhTL5dHb0EcaBTk= Subject key identifier: AF:71:42:C5:A6:AF:7E:09:76:B0:62:6B:CE:EE:E8:38:0E:00:16:B1 Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 2293 Signing time: Sat 10 May 2025 15:48:08 +0000 Manifest this update: Sat 10 May 2025 15:48:07 +0000 Manifest next update: Sat 17 May 2025 15:48:07 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: u3CUzUIMk9JVq5b9EZXLFrAu3+Is7ui8KvmnQye3fU8=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: May 10 15:48:07 2025 GMT Not After : May 17 15:48:07 2025 GMT Subject: CN=681f7538-7588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:e1:79:07:af:97:bd:f4:f1:68:d6:f7:d1: cb:8e:9f:1a:e3:54:65:7f:48:f4:fd:72:70:20:c6: e7:2a:3b:9b:05:fc:c6:df:65:14:11:37:4a:23:b1: f6:e6:f3:c4:b8:d2:44:e6:0f:0e:36:f7:a6:21:dc: 08:24:7d:08:cd:f8:be:72:95:c5:6c:a7:4b:c0:8c: 78:85:db:4e:0c:9f:da:25:97:fe:22:41:b2:d8:73: 4a:02:d5:51:fe:8e:d6:24:c3:4c:12:e3:59:05:75: 31:d7:3a:87:d6:17:18:73:d5:6e:fc:85:61:08:ce: b9:c0:8d:a3:4a:d6:86:c2:88:44:5a:ba:9f:b2:43: 5d:04:9b:7d:e9:b3:89:b8:62:94:3f:0e:48:90:d0: ff:5d:82:9b:be:0c:89:92:42:83:1e:ef:3f:f5:31: 03:9f:17:94:81:6d:16:40:cb:f6:5a:03:e3:3a:02: bc:f9:f0:a8:3e:77:46:05:26:3e:46:c4:46:c6:84: 49:04:ac:63:04:f7:3a:b6:8a:62:b7:5e:48:d8:23: dc:29:e7:50:aa:20:ef:10:06:83:87:58:a7:e6:2a: 03:79:0b:b6:ec:b7:ab:a3:fd:7e:d9:78:eb:f0:23: a2:dc:77:33:68:35:8e:5e:0a:b8:0e:f6:59:ca:4c: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:42:C5:A6:AF:7E:09:76:B0:62:6B:CE:EE:E8:38:0E:00:16:B1 X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3e:0f:2b:37:00:f6:f2:cc:35:e3:dd:6b:f2:1a:52:1e:f4: 4b:95:0c:e5:c9:fd:c5:ac:32:6c:b6:1e:fc:76:b3:22:80:92: 38:3d:99:cf:8c:cc:99:03:ef:82:73:4c:e5:11:b4:8a:48:ea: a0:7c:a8:fc:c6:df:5c:6e:35:f1:05:57:95:4f:20:13:2d:1b: 64:66:b0:c6:46:96:2f:bf:ba:34:33:0b:7e:c4:79:eb:ba:0c: 80:f8:ec:e5:c9:98:bf:29:b0:82:15:b3:3b:43:a7:37:37:a7: 08:49:fb:ee:5e:28:6f:40:9f:da:4f:6f:12:1f:29:86:bc:e7: 4a:81:e9:b4:ee:1e:ad:f4:40:d1:18:e7:72:ef:ff:8f:51:cc: 72:ea:04:65:9d:2e:db:a5:02:09:e8:1a:09:b0:16:ba:7d:e4: e7:07:02:72:77:bc:70:23:3a:2b:3a:6d:0c:10:59:5d:f5:69: 26:87:02:0b:8c:89:8d:25:75:df:fc:93:c5:e0:74:5b:c1:6c: 1d:d0:4e:6c:e8:07:e8:01:5e:08:ce:80:1a:a9:87:ee:f5:63: 99:b0:62:63:c4:93:32:3d:51:3f:14:2e:63:1f:d3:a6:9d:88: 8c:ae:10:0e:cc:12:2f:3e:b3:1b:e2:ed:fb:bb:b8:67:6e:99: 44:3b:0d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjUwNTEwMTU0ODA3WhcNMjUwNTE3MTU0ODA3WjAYMRYwFAYD VQQDEw02ODFmNzUzOC03NTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cHheQevl7308WjW99HLjp8a41Rlf0j0/XJwIMbnKjubBfzG32UUETdKI7H2 5vPEuNJE5g8ONvemIdwIJH0Izfi+cpXFbKdLwIx4hdtODJ/aJZf+IkGy2HNKAtVR /o7WJMNMEuNZBXUx1zqH1hcYc9Vu/IVhCM65wI2jStaGwohEWrqfskNdBJt96bOJ uGKUPw5IkND/XYKbvgyJkkKDHu8/9TEDnxeUgW0WQMv2WgPjOgK8+fCoPndGBSY+ RsRGxoRJBKxjBPc6topit15I2CPcKedQqiDvEAaDh1in5ioDeQu27Lero/1+2Xjr 8COi3HczaDWOXgq4DvZZykzdVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9xQsWm r34JdrBia87u6DgOABaxMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Pg8rNwD28sw1491r8hpSHvRLlQzlyf3FrDJsth78drMigJI4PZnP jMyZA++Cc0zlEbSKSOqgfKj8xt9cbjXxBVeVTyATLRtkZrDGRpYvv7o0Mwt+xHnr ugyA+OzlyZi/KbCCFbM7Q6c3N6cISfvuXihvQJ/aT28SHymGvOdKgem07h6t9EDR GOdy7/+PUcxy6gRlnS7bpQIJ6BoJsBa6feTnBwJyd7xwIzorOm0MEFld9WkmhwIL jImNJXXf/JPF4HRbwWwd0E5s6AfoAV4IzoAaqYfu9WOZsGJjxJMyPVE/FC5jH9Om nYiMrhAOzBIvPrMb4u37u7hnbplEOw3M -----END CERTIFICATE-----Generated at Sun May 11 04:28:54 2025 by rpki-client