$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: rwEMH3Sgp4h5hIsyZEsjZ8StkvxHLP59JIPF1iuMN1c= Subject key identifier: AA:68:32:E5:74:61:C8:8A:55:D5:C1:B8:FA:B0:6F:2D:C2:1B:3F:44 Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 03D9 Signing time: Sat 17 May 2025 00:54:42 +0000 Manifest this update: Sat 17 May 2025 00:54:42 +0000 Manifest next update: Sat 24 May 2025 00:54:42 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: vaLrgptuAnjAzbYnarnEdAmrp62UGvqg05K2jg8T25w=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: HVGi2lUwCQZWcIQSfZT0TZMTdiphqEIo5eAKaq0V4N8=) 3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294 Validity Not Before: May 17 00:54:42 2025 GMT Not After : May 24 00:54:42 2025 GMT Subject: CN=6827de52-2d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:ee:02:b2:5b:18:aa:eb:d1:7a:ae:61:d2: d6:d2:74:4d:31:c3:bf:e8:34:a0:ef:5f:18:e6:93: 30:66:47:98:2f:b0:6f:64:e2:82:7f:97:ad:02:bc: 31:ed:41:51:5a:0a:2d:1e:98:0e:3c:eb:b5:e6:94: b0:e2:df:60:aa:fd:26:bb:b0:a8:01:ea:38:78:3a: d2:cc:58:fe:2d:cc:63:c7:22:1e:d9:bb:04:60:b6: ff:a3:15:47:2a:23:5e:41:92:4e:9e:05:2b:a0:34: b9:7d:23:cb:13:a0:4b:b4:cb:b4:c2:da:f4:98:a7: 5d:04:43:a8:f1:4a:ac:9d:ee:6e:ec:bc:07:d2:cc: c8:08:d9:ce:36:88:9d:0b:a1:1b:f9:c9:79:05:c2: 12:2d:6f:40:53:ed:60:a3:f8:c2:b0:c9:7f:9d:fe: e5:f4:7b:0b:4a:04:4f:de:9c:da:26:c3:72:36:eb: b8:92:56:7e:f5:54:40:f6:15:0b:93:aa:fe:bf:a6: 5b:41:a1:84:5b:cf:5a:55:0b:c8:7b:12:66:49:36: 4f:06:17:b7:57:b9:b4:0b:b9:1c:52:c3:00:36:0c: 6a:01:75:f8:cc:b9:a5:87:fd:2e:0d:dd:57:6a:66: af:5b:f7:93:2e:47:a2:a9:25:4c:9a:7b:40:08:de: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:68:32:E5:74:61:C8:8A:55:D5:C1:B8:FA:B0:6F:2D:C2:1B:3F:44 X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:04:2c:a8:bf:fd:71:64:6d:50:c9:7c:72:63:df:f4:d8:d8: a5:c4:0c:c4:38:93:10:ec:a5:8f:2b:0e:57:58:f1:ae:8d:aa: f3:ea:4b:c5:07:4b:28:91:1d:e6:bb:d8:9f:13:1d:7d:b3:fd: d1:e4:02:2f:41:26:7b:95:4f:3c:ae:4c:32:78:b2:95:17:ca: 9f:15:54:59:86:fa:1b:4b:32:90:7e:50:cf:c8:29:47:8f:6f: 27:72:bc:4e:71:3b:cc:12:72:a7:c9:34:dd:0c:95:04:27:98: 6b:77:71:2c:74:d7:10:22:78:b9:09:fb:d5:76:e6:7f:9d:c8: 12:81:8e:58:98:6f:5d:9c:06:ec:61:1a:6a:75:52:08:23:58: f8:5b:5e:ff:94:ad:2a:54:6f:f7:67:b5:9e:d5:22:3e:3c:51: 34:2e:21:d9:af:4e:ca:1a:db:17:f5:02:e0:df:f8:f0:dd:f1: ac:d2:31:e8:ba:eb:18:af:7c:94:6e:9f:f0:67:88:cf:be:fc: ab:d5:98:d8:aa:48:90:ae:39:f7:96:20:84:1e:73:ba:a0:3a: f4:6e:bf:1b:3e:e6:61:8e:05:d6:b4:10:08:06:aa:ea:ab:dd: f0:1b:1a:b3:8f:32:5c:11:43:27:8c:b1:a0:04:df:3d:5b:71: bd:7d:d7:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjUwNTE3MDA1NDQyWhcNMjUwNTI0MDA1NDQyWjAYMRYwFAYD VQQDEw02ODI3ZGU1Mi0yZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/vuArJbGKrr0XquYdLW0nRNMcO/6DSg718Y5pMwZkeYL7BvZOKCf5etArwx 7UFRWgotHpgOPOu15pSw4t9gqv0mu7CoAeo4eDrSzFj+LcxjxyIe2bsEYLb/oxVH KiNeQZJOngUroDS5fSPLE6BLtMu0wtr0mKddBEOo8Uqsne5u7LwH0szICNnONoid C6Eb+cl5BcISLW9AU+1go/jCsMl/nf7l9HsLSgRP3pzaJsNyNuu4klZ+9VRA9hUL k6r+v6ZbQaGEW89aVQvIexJmSTZPBhe3V7m0C7kcUsMANgxqAXX4zLmlh/0uDd1X amavW/eTLkeiqSVMmntACN52twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpoMuV0 YciKVdXBuPqwby3CGz9EMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7BCyov/1xZG1QyXxyY9/02NilxAzEOJMQ7KWPKw5XWPGujarz6kvF B0sokR3mu9ifEx19s/3R5AIvQSZ7lU88rkwyeLKVF8qfFVRZhvobSzKQflDPyClH j28ncrxOcTvMEnKnyTTdDJUEJ5hrd3EsdNcQIni5CfvVduZ/ncgSgY5YmG9dnAbs YRpqdVIII1j4W17/lK0qVG/3Z7We1SI+PFE0LiHZr07KGtsX9QLg3/jw3fGs0jHo uusYr3yUbp/wZ4jPvvyr1ZjYqkiQrjn3liCEHnO6oDr0br8bPuZhjgXWtBAIBqrq q93wGxqzjzJcEUMnjLGgBN89W3G9fdeO -----END CERTIFICATE-----Generated at Sun May 18 02:16:34 2025 by rpki-client