$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: X7iHEsfe1lTZfee0aqo79/WYMf/Nxpcrxd8yjbiOxu4= Subject key identifier: B7:2A:45:DD:EF:58:86:36:4B:16:8A:57:22:EF:D8:7A:A0:D3:4A:58 Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 08C4 Signing time: Sat 10 May 2025 20:13:24 +0000 Manifest this update: Sat 10 May 2025 20:13:24 +0000 Manifest next update: Sat 17 May 2025 20:13:24 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: ViXcC3e8tupFhVlC8z7brtwuGMygF23VYsLIrJ8yack=) 2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=) 3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=) 4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=) 5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: May 10 20:13:24 2025 GMT Not After : May 17 20:13:24 2025 GMT Subject: CN=681fb364-e8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:91:86:eb:bd:f2:fe:48:f2:b2:7b:29:f3: 1a:b8:9c:1f:97:94:ae:0e:bd:31:f0:60:f2:d9:4f: 63:a4:b2:d2:5f:ee:c3:75:2e:79:1c:49:4a:91:67: cc:a1:3a:ad:fe:0c:fa:ed:ff:9c:96:5f:e8:4d:bc: 07:00:9b:79:9a:d6:7a:0d:27:1d:e4:e9:81:59:15: 63:ff:cf:64:e3:13:57:1c:ce:48:54:a7:cb:cb:f7: 70:d4:4e:30:66:dd:de:30:c8:de:a8:7b:b0:a7:35: b1:88:a2:b0:c0:6f:39:fc:1d:68:41:d9:74:10:fb: ec:9d:63:1e:3f:02:ca:99:72:bc:8d:eb:0d:ce:60: 64:c7:3f:87:82:16:a8:d4:74:16:e2:7a:43:62:0e: 37:30:11:d3:bd:a2:f3:39:e3:eb:a0:fb:69:bd:6a: 55:6e:d2:e6:ad:a0:89:84:f6:09:b2:73:ea:b1:40: e8:1e:ed:80:db:49:3d:8d:0d:54:6f:e2:4a:f1:66: 0f:d9:6f:3a:fd:88:ed:30:8a:7c:84:4c:30:72:bb: 65:45:4e:5a:c9:02:00:e5:b4:df:01:55:b8:7d:2a: f6:0b:be:6a:e4:3b:43:4a:7b:45:88:95:f8:86:33: ba:1a:b8:3e:2b:97:f9:60:b7:17:5a:c0:ba:7a:85: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:45:DD:EF:58:86:36:4B:16:8A:57:22:EF:D8:7A:A0:D3:4A:58 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ec:56:bd:8d:08:70:00:b3:af:13:d0:0f:0c:11:db:67:78: ee:88:a6:20:0c:96:7b:b7:8e:c7:73:81:2d:f6:25:48:de:54: 9e:2b:e6:8e:17:72:70:84:41:b8:66:31:5b:8a:74:29:4c:cd: 16:6e:6a:6a:03:62:e0:9b:bc:ba:7f:5c:db:61:54:0e:8e:4b: a8:18:c1:8b:bd:9f:36:cd:0f:db:fd:43:61:ff:72:f4:49:bd: 79:26:24:10:4d:f6:26:b2:ce:9a:22:d5:3b:c0:1e:bb:3a:81: 86:01:78:eb:35:42:32:5b:36:6d:34:f4:df:84:c8:3e:70:a9: 44:47:ce:c8:26:e5:18:02:c6:4e:24:4e:21:0a:8c:ec:d0:f1: 70:7d:c4:90:4c:43:95:68:6f:15:cf:27:14:ed:27:f2:8f:47: fa:96:1c:c1:c7:a4:43:21:ae:65:67:92:11:3e:e6:d6:bd:d7: 8b:ec:09:97:34:8f:21:55:14:b9:27:29:c4:28:9d:05:b9:51: 1e:a0:1d:61:10:b6:5f:cf:e2:5a:b9:ab:d3:c3:88:9f:27:6f: fc:08:19:5c:18:13:a5:c3:e0:03:07:6b:2b:b2:e4:d5:d2:2e: c4:97:16:1b:c3:77:05:b4:27:dd:14:c0:e1:ca:55:da:74:92: 2c:67:4b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjUwNTEwMjAxMzI0WhcNMjUwNTE3MjAxMzI0WjAYMRYwFAYD VQQDEw02ODFmYjM2NC1lOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6p2Rhuu98v5I8rJ7KfMauJwfl5SuDr0x8GDy2U9jpLLSX+7DdS55HElKkWfM oTqt/gz67f+cll/oTbwHAJt5mtZ6DScd5OmBWRVj/89k4xNXHM5IVKfLy/dw1E4w Zt3eMMjeqHuwpzWxiKKwwG85/B1oQdl0EPvsnWMePwLKmXK8jesNzmBkxz+Hghao 1HQW4npDYg43MBHTvaLzOeProPtpvWpVbtLmraCJhPYJsnPqsUDoHu2A20k9jQ1U b+JK8WYP2W86/YjtMIp8hEwwcrtlRU5ayQIA5bTfAVW4fSr2C75q5DtDSntFiJX4 hjO6Grg+K5f5YLcXWsC6eoXogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcqRd3v WIY2SxaKVyLv2Hqg00pYMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7Fa9jQhwALOvE9APDBHbZ3juiKYgDJZ7t47Hc4Et9iVI3lSeK+aO F3JwhEG4ZjFbinQpTM0WbmpqA2Lgm7y6f1zbYVQOjkuoGMGLvZ82zQ/b/UNh/3L0 Sb15JiQQTfYmss6aItU7wB67OoGGAXjrNUIyWzZtNPTfhMg+cKlER87IJuUYAsZO JE4hCozs0PFwfcSQTEOVaG8VzycU7Sfyj0f6lhzBx6RDIa5lZ5IRPubWvdeL7AmX NI8hVRS5JynEKJ0FuVEeoB1hELZfz+JauavTw4ifJ2/8CBlcGBOlw+ADB2srsuTV 0i7ElxYbw3cFtCfdFMDhylXadJIsZ0vk -----END CERTIFICATE-----Generated at Mon May 12 18:57:37 2025 by rpki-client