$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: jwKmkNGpw18GSSkNiq7s1etZMVqzyccW//ZBmG/sgak= Subject key identifier: 3B:A8:12:5F:37:C7:E5:5D:C3:45:B3:2D:59:E0:30:64:A7:02:0D:65 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 0117 Signing time: Sat 17 May 2025 04:24:49 +0000 Manifest this update: Sat 17 May 2025 04:24:48 +0000 Manifest next update: Sat 24 May 2025 04:24:48 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: sLGtNpNmQ7oe6A7B2Xu7UOg9b8PdvdtcHY8LToEQdQU=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: WhOLdJmONFcVyaVlMrHX886HXRKh0RLcsl55SUDqRa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: May 17 04:24:48 2025 GMT Not After : May 24 04:24:48 2025 GMT Subject: CN=68280f91-eb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:0c:6f:23:52:10:cf:c6:34:21:de:75:db: 20:47:8a:e5:f0:a0:9d:20:91:44:54:a8:2a:fa:92: cf:d4:47:16:78:07:d5:41:b0:6e:bc:f4:47:64:ba: 65:ed:48:93:54:dc:1d:7e:82:cd:00:2d:8e:34:3d: 5c:b5:2b:a9:0a:bc:1f:8a:cc:43:f7:bc:48:17:c8: 60:b9:ce:75:ad:84:74:e4:72:71:96:66:15:80:2c: 7f:af:f5:21:ae:59:f7:b3:b3:d2:da:45:64:99:83: 4f:3a:0b:1a:d3:88:9f:48:dc:80:f8:07:93:28:79: 94:59:24:4e:8d:44:48:ae:76:72:c6:d2:e4:60:1b: 40:0f:b9:71:ab:27:5f:5a:9a:7b:05:a0:5a:c8:59: 73:f7:47:e9:dc:67:63:c8:74:25:9b:6d:bf:24:9a: 63:98:0d:26:cb:d3:d0:fc:82:aa:7c:1c:7a:0d:1e: e7:96:51:7c:48:e9:2d:af:97:d0:ce:6f:06:cc:a0: d1:e6:d5:4d:20:29:6e:1d:62:79:c4:77:69:56:ef: 9b:45:0a:a1:ee:32:1f:a3:77:b6:95:03:48:08:48: 0e:b9:ae:85:88:81:88:96:74:51:32:e9:2e:1f:fb: ec:ed:ec:89:70:eb:01:b3:d6:2e:e6:0f:2e:10:b8: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:12:5F:37:C7:E5:5D:C3:45:B3:2D:59:E0:30:64:A7:02:0D:65 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:89:6f:6a:42:68:65:8b:70:57:fd:2e:5d:18:e1:87:55:6e: bd:07:52:d9:ed:69:f2:e0:b8:80:c7:f3:da:89:5b:ba:a8:2d: d4:d9:ff:72:1a:4d:98:b1:84:8d:47:f1:51:c9:6d:d0:d0:a2: 3b:36:81:d7:f2:6b:17:88:37:64:7e:0a:5c:14:f6:af:52:47: 29:e2:69:08:d3:a2:4f:43:d4:69:93:d3:c4:5b:7a:7a:6d:83: 24:64:15:52:81:c0:9e:5b:15:9b:eb:58:ed:62:34:3b:42:db: 17:cd:9f:8c:49:cc:2d:6c:63:e7:d2:fd:a3:cd:77:5d:0e:74: 4d:d7:bc:04:79:d4:39:a6:e2:99:c4:7f:b1:55:ab:2c:b1:df: cd:17:d4:6a:65:44:9c:29:38:7f:dd:bd:bb:43:90:b5:20:0c: ba:3a:21:58:c7:4d:34:e2:db:a3:b2:02:04:13:b6:c1:4a:4c: ad:90:76:68:35:f1:31:11:d5:01:e3:50:7a:c0:98:08:ba:33: 16:81:42:62:44:5a:93:88:04:dd:25:25:df:2b:7f:0f:06:ee: a4:a2:bb:0f:d9:7f:90:b8:4b:2c:c5:c4:e7:b9:ba:89:4c:c9: d9:65:40:ce:9e:90:ca:55:8f:8b:7c:d1:e6:b7:10:29:2a:a3: 31:a0:08:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUwNTE3MDQyNDQ4WhcNMjUwNTI0MDQyNDQ4WjAYMRYwFAYD VQQDEw02ODI4MGY5MS1lYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI8MbyNSEM/GNCHeddsgR4rl8KCdIJFEVKgq+pLP1EcWeAfVQbBuvPRHZLpl 7UiTVNwdfoLNAC2OND1ctSupCrwfisxD97xIF8hguc51rYR05HJxlmYVgCx/r/Uh rln3s7PS2kVkmYNPOgsa04ifSNyA+AeTKHmUWSROjURIrnZyxtLkYBtAD7lxqydf Wpp7BaBayFlz90fp3GdjyHQlm22/JJpjmA0my9PQ/IKqfBx6DR7nllF8SOktr5fQ zm8GzKDR5tVNICluHWJ5xHdpVu+bRQqh7jIfo3e2lQNICEgOua6FiIGIlnRRMuku H/vs7eyJcOsBs9Yu5g8uELjpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuoEl83 x+Vdw0WzLVngMGSnAg1lMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfiW9qQmhli3BX/S5dGOGHVW69B1LZ7Wny4LiAx/PaiVu6qC3U2f9y Gk2YsYSNR/FRyW3Q0KI7NoHX8msXiDdkfgpcFPavUkcp4mkI06JPQ9Rpk9PEW3p6 bYMkZBVSgcCeWxWb61jtYjQ7QtsXzZ+MScwtbGPn0v2jzXddDnRN17wEedQ5puKZ xH+xVasssd/NF9RqZUScKTh/3b27Q5C1IAy6OiFYx0004tujsgIEE7bBSkytkHZo NfExEdUB41B6wJgIujMWgUJiRFqTiATdJSXfK38PBu6korsP2X+QuEssxcTnubqJ TMnZZUDOnpDKVY+LfNHmtxApKqMxoAhG -----END CERTIFICATE-----Generated at Sat May 17 07:15:06 2025 by rpki-client