$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: pA2TenyBu/EfMYcNwq/Dzn25tnDQNY0nuEyPwz8synI= Subject key identifier: E4:C6:F0:99:46:69:DB:6D:FE:FA:0A:0F:5A:69:5B:20:E7:E7:73:A7 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 55 Signing time: Thu 15 May 2025 06:32:30 +0000 Manifest this update: Thu 15 May 2025 06:32:30 +0000 Manifest next update: Thu 22 May 2025 06:32:30 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: ptoSsenD6KBD/hbF3KwzSKOsqQuW/khn64Bpcw26b4c=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: May 15 06:32:30 2025 GMT Not After : May 22 06:32:30 2025 GMT Subject: CN=68258a7e-5f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:76:74:d3:05:74:90:20:d5:9d:ae:4a:d0: f3:8d:dd:12:37:47:80:20:f1:8a:19:39:6d:3d:b4: fb:9f:2b:69:ff:2e:dd:0d:97:2b:66:85:a2:6c:73: 0d:05:b3:66:9f:cf:f3:ac:40:e7:d8:91:5f:12:67: c1:e9:07:79:26:6a:a7:a8:d2:4d:54:2e:b6:13:80: 07:f8:38:75:3a:47:f1:31:b2:9a:b3:4e:ce:a6:8f: e2:46:46:60:37:c6:82:f5:6e:58:de:9d:b2:10:c6: 5c:f0:2f:bd:d3:9b:93:dc:6f:94:52:59:7a:94:05: ae:6a:8a:b6:1d:d7:f2:34:8b:36:90:5c:47:5b:1c: b7:bc:02:ac:82:88:3d:a7:ec:e8:26:c5:8b:bb:c8: 21:36:9c:b0:94:55:12:22:28:a7:5e:a1:ee:21:7c: 39:4d:c4:a2:75:43:ca:a0:d6:e4:69:98:2a:4b:a8: 70:e2:98:8e:33:87:34:64:b0:d3:ac:af:60:73:f4: dd:05:ad:c4:c5:cc:75:97:4e:a7:46:f4:38:a1:1f: 5f:9a:a7:09:d3:e9:e7:2e:06:ce:95:f8:12:6b:1c: 36:37:f8:37:6a:ce:d5:64:fe:ed:f5:f6:e1:fa:e8: 0d:2f:22:e8:46:81:53:13:cb:b7:2c:93:04:17:da: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:F0:99:46:69:DB:6D:FE:FA:0A:0F:5A:69:5B:20:E7:E7:73:A7 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a7:86:77:a0:82:c1:0f:29:24:f9:1a:67:c5:15:47:70:ed: ad:27:dc:3a:98:46:67:92:18:9c:81:c3:b5:1e:0c:7d:ba:c8: da:f2:93:0f:05:87:c7:5d:b2:a8:f1:e4:86:ab:77:dc:64:c3: 24:01:83:1e:10:4c:9d:3f:95:e1:6c:2b:87:6d:94:0a:de:dd: af:fd:1f:3e:7a:71:61:38:87:91:60:61:7b:f8:ad:64:93:9d: 61:5d:52:95:be:c0:3d:d5:d6:e9:7f:2c:25:be:97:3d:98:fd: 5c:3b:19:e0:43:9d:50:d2:e3:61:1e:40:09:91:bf:e3:12:e8: 32:aa:ff:db:34:9a:c8:b2:d6:63:3c:af:02:f8:ce:65:12:94: 79:fe:20:92:e6:52:f6:db:12:ae:da:6b:8a:d8:58:bc:b7:9a: 74:93:a1:ac:ae:6e:7a:e2:45:a6:d0:04:74:3c:4d:97:4a:af: 24:ef:23:cb:ac:de:f0:66:33:81:c6:2e:8d:44:44:86:df:45: eb:4b:4a:f3:96:e9:e5:96:71:e0:61:ed:5e:85:3a:a7:be:55: 0a:2e:45:7b:79:26:c9:67:d4:3d:c7:a4:6b:54:aa:5b:12:18: 1c:b9:9c:cb:a0:cc:fb:f7:de:e2:70:9b:17:c4:c8:44:dc:43: cd:4a:5c:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA1MTUwNjMyMzBaFw0yNTA1MjIwNjMyMzBaMBgxFjAUBgNV BAMTDTY4MjU4YTdlLTVmNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqPHZ00wV0kCDVna5K0PON3RI3R4Ag8YoZOW09tPufK2n/Lt0NlytmhaJscw0F s2afz/OsQOfYkV8SZ8HpB3kmaqeo0k1ULrYTgAf4OHU6R/ExspqzTs6mj+JGRmA3 xoL1bljenbIQxlzwL73Tm5Pcb5RSWXqUBa5qirYd1/I0izaQXEdbHLe8AqyCiD2n 7OgmxYu7yCE2nLCUVRIiKKdeoe4hfDlNxKJ1Q8qg1uRpmCpLqHDimI4zhzRksNOs r2Bz9N0FrcTFzHWXTqdG9DihH1+apwnT6ecuBs6V+BJrHDY3+DdqztVk/u319uH6 6A0vIuhGgVMTy7cskwQX2pinAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5MbwmUZp 223++goPWmlbIOfnc6cwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGnhneggsEPKST5GmfFFUdw7a0n3DqYRmeSGJyBw7UeDH26yNrykw8F h8ddsqjx5Iard9xkwyQBgx4QTJ0/leFsK4dtlAre3a/9Hz56cWE4h5FgYXv4rWST nWFdUpW+wD3V1ul/LCW+lz2Y/Vw7GeBDnVDS42EeQAmRv+MS6DKq/9s0msiy1mM8 rwL4zmUSlHn+IJLmUvbbEq7aa4rYWLy3mnSToayubnriRabQBHQ8TZdKryTvI8us 3vBmM4HGLo1ERIbfRetLSvOW6eWWceBh7V6FOqe+VQouRXt5Jsln1D3HpGtUqlsS GBy5nMugzPv33uJwmxfEyETcQ81KXMM= -----END CERTIFICATE-----Generated at Fri May 16 06:09:54 2025 by rpki-client