$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: ZmkMTQ4Jjngvyq77z9pR4tmTjloFCHB5o/AHWkNl1zQ= Subject key identifier: C0:9E:29:F3:55:33:17:EF:F8:6F:8E:60:86:CC:31:E8:28:BD:E6:19 Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0C1C Signing time: Wed 14 May 2025 18:44:27 +0000 Manifest this update: Wed 14 May 2025 18:44:26 +0000 Manifest next update: Wed 21 May 2025 18:44:26 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: AlDK/V87IP/P9jWtzAtfdvR+qSzEWUo8RZ9jZS4U4Sg=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: May 14 18:44:26 2025 GMT Not After : May 21 18:44:26 2025 GMT Subject: CN=6824e48b-184c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:7e:6b:24:88:73:b4:7f:b6:41:5e:22:6d: 95:2a:d2:51:ef:8a:e8:3d:a1:ab:46:57:86:60:52: 8f:a0:7f:2f:a2:2f:62:4d:01:b2:83:37:5f:4c:14: e6:cf:cd:b7:d6:ea:3c:f7:bd:18:55:58:f3:d3:c5: 57:02:55:fa:62:ad:44:39:97:2e:3a:06:c2:ff:f3: 5b:ef:09:fd:6e:6c:75:84:b0:91:46:ce:65:86:30: b6:7a:58:cc:fd:2e:5a:90:d1:cf:3f:2f:43:7d:59: 5b:8b:f9:a5:8b:aa:37:5d:1b:b4:aa:24:0b:d5:7a: 82:bc:44:5c:77:4c:7b:ae:87:00:19:79:9e:d4:e3: bd:99:4b:fb:7f:8c:ad:72:d4:df:98:45:e2:7c:4f: 93:60:57:b8:81:18:f1:f0:27:77:66:4f:ae:74:b2: a2:d5:96:2d:23:ad:92:b9:2b:d0:f0:69:49:6e:44: 0b:ee:3f:26:ed:d0:13:56:27:21:b9:66:bb:22:8d: ce:45:88:57:61:fb:8f:ff:3b:d5:a4:4a:17:ff:01: ab:11:34:c2:5a:33:77:12:43:47:86:ca:05:7e:f5: b0:ae:46:05:96:24:f4:64:a4:5f:fb:74:e9:eb:6e: a6:f0:e3:f6:43:22:36:e5:63:17:d2:13:d0:3d:47: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:29:F3:55:33:17:EF:F8:6F:8E:60:86:CC:31:E8:28:BD:E6:19 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b6:6b:25:48:ef:54:d4:16:bc:ef:be:17:6d:d9:bb:7a:f1: 45:4a:1d:82:29:42:2f:ad:07:0a:81:ab:ca:d8:b2:e8:d7:fb: dc:2b:a7:03:c6:4c:56:05:c7:20:14:4d:52:fc:94:8b:72:77: 1c:78:ce:6a:8f:ad:19:49:f5:eb:e1:0d:e1:54:32:9e:74:b9: 93:26:43:ae:bf:66:de:13:dc:38:82:67:48:67:76:ed:29:8f: 45:90:c4:4a:f5:c6:d6:ee:ba:1e:50:52:6d:ae:bb:e8:a8:dc: 96:50:0a:ce:e3:69:3b:20:0b:9b:10:74:d5:b3:f0:02:b0:a9: d3:96:28:69:c8:4a:2c:05:78:d7:93:7e:d7:7b:73:37:93:0c: 5d:d0:aa:b1:f6:1b:1d:ec:a4:7c:c2:2a:27:42:73:62:c1:e0: 71:4f:96:10:79:45:54:44:7f:46:73:29:9c:38:e2:29:f3:d1: 80:78:92:61:70:1f:33:b7:61:f3:ed:eb:31:a6:95:1f:a7:b1: 97:9c:74:85:44:ad:99:83:a8:6c:51:11:1e:11:aa:fa:ad:7d: 54:30:5c:d6:eb:7b:a8:30:e1:96:a9:a6:4d:a4:02:7a:87:f8: 14:93:ea:a9:31:2b:9d:ca:d7:e5:69:6d:b9:59:f3:64:52:80: 2c:65:f2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjUwNTE0MTg0NDI2WhcNMjUwNTIxMTg0NDI2WjAYMRYwFAYD VQQDEw02ODI0ZTQ4Yi0xODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeB+aySIc7R/tkFeIm2VKtJR74roPaGrRleGYFKPoH8voi9iTQGygzdfTBTm z8231uo8970YVVjz08VXAlX6Yq1EOZcuOgbC//Nb7wn9bmx1hLCRRs5lhjC2eljM /S5akNHPPy9DfVlbi/mli6o3XRu0qiQL1XqCvERcd0x7rocAGXme1OO9mUv7f4yt ctTfmEXifE+TYFe4gRjx8Cd3Zk+udLKi1ZYtI62SuSvQ8GlJbkQL7j8m7dATVich uWa7Io3ORYhXYfuP/zvVpEoX/wGrETTCWjN3EkNHhsoFfvWwrkYFliT0ZKRf+3Tp 626m8OP2QyI25WMX0hPQPUekXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCeKfNV Mxfv+G+OYIbMMegoveYZMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGtmslSO9U1Ba8774Xbdm7evFFSh2CKUIvrQcKgavK2LLo1/vcK6cD xkxWBccgFE1S/JSLcncceM5qj60ZSfXr4Q3hVDKedLmTJkOuv2beE9w4gmdIZ3bt KY9FkMRK9cbW7roeUFJtrrvoqNyWUArO42k7IAubEHTVs/ACsKnTlihpyEosBXjX k37Xe3M3kwxd0Kqx9hsd7KR8wionQnNiweBxT5YQeUVURH9GcymcOOIp89GAeJJh cB8zt2Hz7esxppUfp7GXnHSFRK2Zg6hsUREeEar6rX1UMFzW63uoMOGWqaZNpAJ6 h/gUk+qpMSudytflaW25WfNkUoAsZfJe -----END CERTIFICATE-----Generated at Thu May 15 00:45:24 2025 by rpki-client