$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: tfI5yF389R+R7FbrHfPBHMpghXT+WEUQ0/vn3hjK720= Subject key identifier: F2:A6:26:E7:8B:0B:D5:34:B6:4E:4A:23:19:7F:C6:6C:A6:9B:22:5A Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0D48 Signing time: Mon 12 May 2025 17:53:30 +0000 Manifest this update: Mon 12 May 2025 17:53:30 +0000 Manifest next update: Mon 19 May 2025 17:53:30 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: hlzKYvdkFj897kLZyJf/R/eoScV8729p6IuekSEwnso=) 2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=) 3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=) 4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: May 12 17:53:30 2025 GMT Not After : May 19 17:53:30 2025 GMT Subject: CN=6822359a-995a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:71:79:26:49:c4:e2:0c:c2:17:03:51:22: a9:59:79:51:6d:7d:0e:8f:0c:4d:ef:9d:7b:d2:68: a3:c4:3a:00:26:bd:07:47:f9:f3:5f:88:74:9d:5e: c5:10:47:17:ea:0b:91:c9:41:12:af:9f:7b:9d:c2: 47:f3:08:d0:03:fb:97:04:b3:6d:f9:df:b2:aa:bf: 7c:13:62:14:f4:6c:b2:55:95:90:ab:0d:f6:2f:f6: 09:97:07:5a:75:05:fe:39:64:72:ee:37:a5:0c:3b: 69:f0:06:06:e1:0d:7c:a4:c3:0a:28:5d:60:7c:28: 93:aa:ab:d3:25:05:85:d4:38:ed:5c:c3:80:de:40: 10:83:dd:43:6e:62:58:59:31:07:f0:83:35:4a:15: 93:29:8e:e4:e3:ce:b3:c6:23:1e:52:85:b1:47:0b: 50:76:66:43:f1:f2:ea:f0:bd:d4:6e:c4:9d:50:94: 88:7f:da:d3:75:23:c7:f6:9f:2d:36:11:e9:9f:cf: 5d:53:e3:62:ab:f5:a8:d6:fb:16:82:d6:8b:bb:e9: fe:db:a7:6a:aa:e3:a5:f4:4a:68:7c:fd:16:a7:86: 96:85:e5:4b:26:0f:87:dd:0d:eb:78:a2:90:24:68: e7:20:c5:40:3a:b7:6d:05:dc:af:5c:5b:d8:00:fa: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:26:E7:8B:0B:D5:34:B6:4E:4A:23:19:7F:C6:6C:A6:9B:22:5A X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d2:26:e6:3f:2f:f3:e5:61:59:87:20:ee:84:27:32:eb:ed: bc:9a:13:1f:39:f9:cd:83:30:4c:81:84:ff:1e:5e:ea:f6:e0: 8d:e0:6a:f9:66:25:f9:5c:e7:30:2a:58:c8:71:08:7c:87:bb: 5e:58:ee:ce:fd:b6:48:dd:10:ed:89:d1:e4:1f:b7:da:36:a7: f6:5f:9c:b1:3a:0b:53:3c:0d:a8:0d:1e:2b:77:8d:22:c4:79: a6:ac:46:e3:d1:92:d0:21:ed:4b:59:57:96:92:98:b9:22:fc: f4:aa:f1:1e:44:26:6b:f9:58:ea:f5:2b:54:02:4a:2e:94:91: c6:3f:af:dd:67:3a:1f:11:27:36:1a:e8:0b:94:44:36:82:ef: 31:21:7f:f3:56:57:53:94:e4:f6:4c:fa:a8:f6:6a:8f:2f:2d: b2:ce:da:da:fa:f2:eb:14:89:6f:18:30:98:f3:b3:2a:db:26: a0:50:04:df:d3:65:96:e0:8e:53:5a:75:85:a6:06:8d:00:d1: 1f:58:aa:f7:e2:b8:ea:dc:b0:df:44:c9:e8:6d:d0:6d:2d:64: 0e:64:09:8f:20:14:79:24:e1:8d:e9:07:03:d6:c9:06:7c:c8: ce:28:7f:84:76:1d:6b:e5:c6:42:a9:70:f8:18:0a:8a:11:4f: d7:6a:9a:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjUwNTEyMTc1MzMwWhcNMjUwNTE5MTc1MzMwWjAYMRYwFAYD VQQDEw02ODIyMzU5YS05OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOtxeSZJxOIMwhcDUSKpWXlRbX0OjwxN75170mijxDoAJr0HR/nzX4h0nV7F EEcX6guRyUESr597ncJH8wjQA/uXBLNt+d+yqr98E2IU9GyyVZWQqw32L/YJlwda dQX+OWRy7jelDDtp8AYG4Q18pMMKKF1gfCiTqqvTJQWF1DjtXMOA3kAQg91DbmJY WTEH8IM1ShWTKY7k486zxiMeUoWxRwtQdmZD8fLq8L3UbsSdUJSIf9rTdSPH9p8t NhHpn89dU+Niq/Wo1vsWgtaLu+n+26dqquOl9EpofP0Wp4aWheVLJg+H3Q3reKKQ JGjnIMVAOrdtBdyvXFvYAPpr3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKmJueL C9U0tk5KIxl/xmymmyJaMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG0ibmPy/z5WFZhyDuhCcy6+28mhMfOfnNgzBMgYT/Hl7q9uCN4Gr5 ZiX5XOcwKljIcQh8h7teWO7O/bZI3RDtidHkH7faNqf2X5yxOgtTPA2oDR4rd40i xHmmrEbj0ZLQIe1LWVeWkpi5Ivz0qvEeRCZr+Vjq9StUAkoulJHGP6/dZzofESc2 GugLlEQ2gu8xIX/zVldTlOT2TPqo9mqPLy2yztra+vLrFIlvGDCY87Mq2yagUATf 02WW4I5TWnWFpgaNANEfWKr34rjq3LDfRMnobdBtLWQOZAmPIBR5JOGN6QcD1skG fMjOKH+Edh1r5cZCqXD4GAqKEU/Xappp -----END CERTIFICATE-----Generated at Wed May 14 01:47:36 2025 by rpki-client