$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: 9k/egHPe6dbDvYNkZxzNnKjXpR5ZECJbRowGMTsAHq0= Subject key identifier: 4E:CB:DB:20:F1:9F:DA:C5:BF:94:BB:A2:7F:47:E9:70:57:F0:1E:40 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: E3 Signing time: Mon 05 May 2025 04:22:44 +0000 Manifest this update: Mon 05 May 2025 04:22:44 +0000 Manifest next update: Mon 12 May 2025 04:22:44 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: 3FpBlLbRwMxNrudXTEfFZnoL/j8b+QXLiWrjkZlZnww=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: May 5 04:22:44 2025 GMT Not After : May 12 04:22:44 2025 GMT Subject: CN=68183d14-b459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:37:e4:b2:7c:a8:19:9c:71:cd:44:72:c3: e1:0a:d1:a0:33:91:be:65:89:47:95:9a:c4:91:17: 5b:9f:1f:3b:be:6e:13:5b:0f:f6:1f:ec:c5:01:6d: 53:8f:a1:fd:d0:35:c7:30:27:96:90:cd:9c:55:f4: a8:dd:5f:eb:cb:9f:31:59:99:8b:16:b2:e9:1c:66: d3:fd:9a:08:59:d7:7c:23:15:e7:d0:60:69:27:2d: f8:db:3b:b4:56:aa:d2:d7:70:cc:27:6a:f9:84:0e: e4:bc:eb:4b:18:8f:2a:d3:81:98:fc:e9:8c:00:cf: 5c:29:31:f3:fb:e7:0a:30:5b:c0:c1:cd:82:49:19: 12:6a:40:3f:60:51:a8:15:38:88:00:af:d4:bf:92: 65:a7:2f:eb:85:09:9e:68:30:5b:21:84:c3:37:3f: 23:cf:13:6a:04:74:9e:15:a3:41:0c:1a:d9:14:f7: 85:7e:51:b8:89:88:86:7f:fc:6d:d4:2f:7f:4f:a1: a1:ce:a4:93:ff:17:f4:15:e5:71:c8:ea:27:6e:06: d8:b5:3d:02:71:e5:88:80:a1:e7:9a:34:1d:4d:53: c8:cd:58:c7:fe:08:b6:73:a7:77:a7:60:6d:55:2b: b3:cc:12:a8:57:93:70:11:d9:b6:e5:c7:ca:a5:da: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:DB:20:F1:9F:DA:C5:BF:94:BB:A2:7F:47:E9:70:57:F0:1E:40 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:21:ec:79:e1:4a:ad:ff:65:39:24:44:18:59:3e:d3:d3: 25:a6:46:e1:46:98:f0:b9:b9:ff:8b:da:a0:d7:8c:a0:cc:87: 67:73:57:b0:cb:7e:6e:9c:fe:62:02:9f:7c:3e:80:75:90:af: fd:61:73:26:a6:1a:7a:4b:62:37:5d:ae:95:c5:42:4a:06:e7: 6e:c4:ea:16:00:d9:67:cc:ac:f5:96:f6:d1:ab:ac:62:f4:ea: b6:80:60:a3:8b:64:97:e8:52:f0:a8:1f:1b:f5:79:b1:a9:ae: 85:15:a5:b0:a5:12:12:e6:86:7b:58:8b:9b:fe:fd:e3:5a:76: a1:80:9d:44:65:61:c0:c4:9b:b0:93:5c:4b:c5:ee:68:80:fa: 24:a1:2e:20:e4:68:b4:e8:af:0d:37:66:19:38:3e:18:f3:fc: 91:bb:b6:b0:be:75:17:19:0c:10:7d:41:b9:a3:c9:6f:46:97: da:85:c0:ad:5a:0b:b0:6f:9f:b1:49:89:97:92:cc:d3:63:28: b9:db:55:e7:07:10:2e:7c:2c:46:c9:f1:59:e0:9f:3a:3a:39: 5f:65:96:55:69:3f:53:30:53:b5:24:63:aa:d2:66:2b:97:22: ed:23:56:ce:8a:6c:42:13:d5:13:43:1d:ae:13:9f:22:d5:d3: 9f:ee:26:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUwNTA1MDQyMjQ0WhcNMjUwNTEyMDQyMjQ0WjAYMRYwFAYD VQQDEw02ODE4M2QxNC1iNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsec35LJ8qBmccc1EcsPhCtGgM5G+ZYlHlZrEkRdbnx87vm4TWw/2H+zFAW1T j6H90DXHMCeWkM2cVfSo3V/ry58xWZmLFrLpHGbT/ZoIWdd8IxXn0GBpJy342zu0 VqrS13DMJ2r5hA7kvOtLGI8q04GY/OmMAM9cKTHz++cKMFvAwc2CSRkSakA/YFGo FTiIAK/Uv5Jlpy/rhQmeaDBbIYTDNz8jzxNqBHSeFaNBDBrZFPeFflG4iYiGf/xt 1C9/T6GhzqST/xf0FeVxyOonbgbYtT0CceWIgKHnmjQdTVPIzVjH/gi2c6d3p2Bt VSuzzBKoV5NwEdm25cfKpdp2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7L2yDx n9rFv5S7on9H6XBX8B5AMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBChSHseeFKrf9lOSREGFk+09MlpkbhRpjwubn/i9qg14ygzIdnc1ew y35unP5iAp98PoB1kK/9YXMmphp6S2I3Xa6VxUJKBuduxOoWANlnzKz1lvbRq6xi 9Oq2gGCji2SX6FLwqB8b9Xmxqa6FFaWwpRIS5oZ7WIub/v3jWnahgJ1EZWHAxJuw k1xLxe5ogPokoS4g5Gi06K8NN2YZOD4Y8/yRu7awvnUXGQwQfUG5o8lvRpfahcCt Wguwb5+xSYmXkszTYyi521XnBxAufCxGyfFZ4J86OjlfZZZVaT9TMFO1JGOq0mYr lyLtI1bOimxCE9UTQx2uE58i1dOf7iZs -----END CERTIFICATE-----Generated at Tue May 6 20:29:01 2025 by rpki-client