$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: ylDDfP0kuMyAbX4Hg9mbvg0gdUDWfHoJyA48H1zMqj0= Subject key identifier: D4:1C:B8:8C:29:42:72:97:00:C6:43:60:E4:E7:AB:A4:4A:D0:78:21 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 016E Signing time: Tue 13 May 2025 03:04:33 +0000 Manifest this update: Tue 13 May 2025 03:04:32 +0000 Manifest next update: Tue 20 May 2025 03:04:32 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: FY+9cccfoOmYj+d3PC5UjZCaxurTvU1CDagmIRhude8=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: May 13 03:04:32 2025 GMT Not After : May 20 03:04:32 2025 GMT Subject: CN=6822b6c0-78ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:a6:55:4a:fd:d2:c5:4c:01:b8:8e:5d:78: 49:17:a7:e3:4e:da:2d:bf:40:1a:c1:d8:40:f9:f4: 34:28:0d:10:df:cc:71:c1:9f:fb:00:c6:d0:db:18: 9b:28:be:29:f2:62:57:40:f1:e3:b3:d9:73:b7:e6: ea:c7:1e:b5:66:55:ab:36:af:5d:55:38:b5:6d:e7: f7:22:c5:d5:ae:3f:d4:3c:d5:f8:fc:e8:11:44:a8: d3:0f:22:fa:be:e6:1c:28:f3:51:96:f1:2b:6f:92: b4:81:b9:d8:1a:ed:1b:af:64:34:ab:ef:7e:97:3e: a8:fb:84:52:6e:cc:4c:f4:e5:27:58:67:1c:1f:10: df:c5:2b:f8:39:6f:d3:92:90:02:00:b3:95:74:55: 78:ca:d3:3e:da:c2:e3:09:ba:89:e9:75:ae:8a:bb: ed:ef:0c:35:b5:f1:fa:6d:b9:72:ec:ed:ec:48:c0: 96:c5:c8:83:50:97:56:ee:82:4d:e4:f4:3c:82:c3: 1e:07:dc:58:62:ec:10:59:e8:2c:78:d2:08:17:80: 36:e4:e0:7b:de:bf:66:0a:64:32:b5:72:a6:ea:e5: 6a:0e:b7:97:b2:9f:95:2b:d0:a2:d2:84:2e:02:89: 98:d1:b1:b4:5a:9c:74:d3:9d:b8:b6:ed:98:1f:b8: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1C:B8:8C:29:42:72:97:00:C6:43:60:E4:E7:AB:A4:4A:D0:78:21 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:62:fd:82:b9:cf:6e:8c:25:6d:5a:ef:81:bc:72:49:be:23: f3:d6:41:4b:d2:c6:dc:22:ef:7e:ea:30:39:11:c7:17:3c:c3: e4:c4:b0:31:92:95:f5:ef:c0:c3:45:01:50:ff:00:88:bc:e0: 6f:3a:1c:be:ad:a1:f2:2e:e7:c7:65:18:40:90:82:5f:c2:69: 6e:44:da:a8:b7:f7:19:a6:ee:d2:ee:c6:4a:ee:58:d4:ad:b4: 5b:cf:8c:9e:85:77:2a:2a:a2:8e:cd:5b:d9:ff:d6:ba:c2:78: d8:b9:4b:3a:09:93:4d:7c:0f:b8:24:d0:8b:5d:13:31:36:62: 74:f1:4c:92:ed:2b:de:56:9b:79:a3:aa:df:32:ca:03:19:9a: 9f:4d:93:02:b5:e2:35:c6:df:fd:51:cd:b8:53:1e:eb:8c:7f: ab:0c:1f:c1:6b:73:13:8f:56:37:06:a0:9b:ce:3b:15:70:09: 1f:cb:e4:eb:b8:df:11:b3:e3:b5:66:16:88:bf:f6:a8:50:4a: 93:b0:ab:95:ed:06:e3:b8:db:72:66:c7:7f:4e:7a:03:d9:54: b2:33:48:37:a3:d3:e4:3e:2b:e9:99:3c:12:94:e8:33:71:06: 52:17:24:d6:d7:2f:ce:5b:a0:5e:c1:63:6b:53:7a:32:74:dd: 5e:7f:91:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUwNTEzMDMwNDMyWhcNMjUwNTIwMDMwNDMyWjAYMRYwFAYD VQQDEw02ODIyYjZjMC03OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5WmVUr90sVMAbiOXXhJF6fjTtotv0AawdhA+fQ0KA0Q38xxwZ/7AMbQ2xib KL4p8mJXQPHjs9lzt+bqxx61ZlWrNq9dVTi1bef3IsXVrj/UPNX4/OgRRKjTDyL6 vuYcKPNRlvErb5K0gbnYGu0br2Q0q+9+lz6o+4RSbsxM9OUnWGccHxDfxSv4OW/T kpACALOVdFV4ytM+2sLjCbqJ6XWuirvt7ww1tfH6bbly7O3sSMCWxciDUJdW7oJN 5PQ8gsMeB9xYYuwQWegseNIIF4A25OB73r9mCmQytXKm6uVqDreXsp+VK9Ci0oQu AomY0bG0Wpx00524tu2YH7gjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQcuIwp QnKXAMZDYOTnq6RK0HghMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtYv2Cuc9ujCVtWu+BvHJJviPz1kFL0sbcIu9+6jA5EccXPMPkxLAx kpX178DDRQFQ/wCIvOBvOhy+raHyLufHZRhAkIJfwmluRNqot/cZpu7S7sZK7ljU rbRbz4yehXcqKqKOzVvZ/9a6wnjYuUs6CZNNfA+4JNCLXRMxNmJ08UyS7SveVpt5 o6rfMsoDGZqfTZMCteI1xt/9Uc24Ux7rjH+rDB/Ba3MTj1Y3BqCbzjsVcAkfy+Tr uN8Rs+O1ZhaIv/aoUEqTsKuV7QbjuNtyZsd/TnoD2VSyM0g3o9PkPivpmTwSlOgz cQZSFyTW1y/OW6BewWNrU3oydN1ef5Fi -----END CERTIFICATE-----Generated at Tue May 13 11:32:28 2025 by rpki-client