$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: yge6i0jeGPrW0NmoCmVkqgtjzOkGLMXO3/5IXtSEUes= Subject key identifier: BD:C4:6B:C4:6A:E2:4A:80:CA:C0:48:31:50:03:2D:00:BA:25:B8:E6 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 02D3 Signing time: Thu 15 May 2025 01:23:00 +0000 Manifest this update: Thu 15 May 2025 01:23:00 +0000 Manifest next update: Thu 22 May 2025 01:23:00 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: +cIgtgNVyuiZIy8eWS8YuD+upH6KtcRwEiI8A2Lgp0A=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: May 15 01:23:00 2025 GMT Not After : May 22 01:23:00 2025 GMT Subject: CN=682541f4-b972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:85:82:af:33:22:f9:3e:48:73:f6:b7:09: ad:52:c7:8d:c0:2c:d3:fa:45:a9:71:44:35:d4:21: 4e:c5:ca:45:94:c3:9a:fb:a5:87:96:5e:10:37:8c: 2b:81:da:d9:8e:61:1d:19:04:91:f2:0a:99:d4:c0: 5e:60:1d:88:29:17:07:d8:a9:73:5b:cb:36:67:d0: 7c:03:6f:cc:57:f6:e8:e5:70:6d:e9:25:15:2d:1e: 1a:79:99:4b:73:55:e3:a3:ae:26:b0:f5:a5:39:51: 2e:52:64:d0:a8:07:1e:53:cd:48:09:a1:19:a3:ca: c9:11:a6:94:ff:41:bb:38:bc:6d:7b:ca:7f:77:a0: 26:f7:6c:4a:a4:f9:7c:da:6b:8c:52:49:d6:0a:d3: c9:81:b0:e8:63:d6:69:07:00:07:d0:91:29:e9:42: 61:c2:cf:06:9a:02:06:b5:6e:dd:91:1c:bc:e8:f3: 6b:34:bf:02:02:76:91:e5:ab:3b:24:b2:db:ff:c7: 68:1c:1c:78:89:8f:7b:df:7f:4d:ac:8b:ca:f5:4f: a4:20:b2:fd:34:91:71:0d:09:8a:99:be:c1:e5:eb: 9e:9c:e2:f2:cd:f9:ca:13:84:78:b8:d8:15:a3:62: 56:b3:eb:1c:24:79:79:03:27:30:ef:08:ea:8b:a5: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C4:6B:C4:6A:E2:4A:80:CA:C0:48:31:50:03:2D:00:BA:25:B8:E6 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:74:26:5e:8c:76:aa:33:c4:63:7e:26:4e:13:d9:d8:f0:d8: b4:9c:44:b0:77:cd:93:69:4e:47:79:83:18:9a:18:fd:ee:2f: b7:23:2f:59:d9:1f:9b:f3:b3:67:eb:12:2c:42:ae:fe:bb:45: f7:ba:1b:29:8d:fd:6f:6c:f4:71:c5:94:a9:5b:64:05:23:9d: 69:f5:aa:02:46:4f:b5:42:ed:e8:14:72:04:63:53:06:06:39: 1b:e4:c0:b2:4b:c9:b9:6a:cd:ac:8e:f7:b4:ea:be:0a:c8:16: ea:ff:31:77:21:6d:4b:ae:4e:a8:42:00:3a:48:98:a1:af:55: 29:32:ea:af:8c:60:9c:b4:ff:2f:52:95:a8:31:6a:6c:36:8e: 2d:11:67:f6:8c:02:a1:22:69:f0:c5:3a:93:af:2a:1e:69:05: f9:8c:00:f1:4b:0d:27:fd:5b:56:25:c1:26:2b:ec:1f:a1:f4: bb:d8:a4:a3:26:27:a3:71:ce:04:68:e8:7f:ba:65:22:e2:ca: 04:ff:88:1e:43:52:f9:3d:aa:77:1f:c6:b9:f6:d3:cd:68:81: 8d:25:dd:28:ce:c5:d0:cc:f3:6c:e5:20:ec:da:bf:21:0e:19: 16:14:76:2d:86:f3:4d:83:ca:e2:d1:b2:98:63:06:1b:74:c1: 8a:92:89:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUwNTE1MDEyMzAwWhcNMjUwNTIyMDEyMzAwWjAYMRYwFAYD VQQDEw02ODI1NDFmNC1iOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3GFgq8zIvk+SHP2twmtUseNwCzT+kWpcUQ11CFOxcpFlMOa+6WHll4QN4wr gdrZjmEdGQSR8gqZ1MBeYB2IKRcH2KlzW8s2Z9B8A2/MV/bo5XBt6SUVLR4aeZlL c1Xjo64msPWlOVEuUmTQqAceU81ICaEZo8rJEaaU/0G7OLxte8p/d6Am92xKpPl8 2muMUknWCtPJgbDoY9ZpBwAH0JEp6UJhws8GmgIGtW7dkRy86PNrNL8CAnaR5as7 JLLb/8doHBx4iY97339NrIvK9U+kILL9NJFxDQmKmb7B5euenOLyzfnKE4R4uNgV o2JWs+scJHl5Aycw7wjqi6VWWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3Ea8Rq 4kqAysBIMVADLQC6JbjmMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBudCZejHaqM8RjfiZOE9nY8Ni0nESwd82TaU5HeYMYmhj97i+3Iy9Z 2R+b87Nn6xIsQq7+u0X3uhspjf1vbPRxxZSpW2QFI51p9aoCRk+1Qu3oFHIEY1MG Bjkb5MCyS8m5as2sjve06r4KyBbq/zF3IW1Lrk6oQgA6SJihr1UpMuqvjGCctP8v UpWoMWpsNo4tEWf2jAKhImnwxTqTryoeaQX5jADxSw0n/VtWJcEmK+wfofS72KSj Jiejcc4EaOh/umUi4soE/4geQ1L5Pap3H8a59tPNaIGNJd0ozsXQzPNs5SDs2r8h DhkWFHYthvNNg8ri0bKYYwYbdMGKkolL -----END CERTIFICATE-----Generated at Fri May 16 00:55:45 2025 by rpki-client