$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: qnct4CW6wruuemWAAJouxCZ0BJeGOqXyI1a09ARMXis= Subject key identifier: 78:86:12:11:EF:8F:0E:CF:09:0D:26:A0:D9:58:C0:00:5A:7C:98:0C Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: E9 Signing time: Tue 13 May 2025 04:36:40 +0000 Manifest this update: Tue 13 May 2025 04:36:39 +0000 Manifest next update: Tue 20 May 2025 04:36:39 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: c3zlscT3rBZDxE6iFlxyubEdaoBjrps3AY6h1xsodl8=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: May 13 04:36:39 2025 GMT Not After : May 20 04:36:39 2025 GMT Subject: CN=6822cc58-9ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:6f:d4:ce:25:fc:3c:22:6d:03:af:6b:5f: 47:34:f8:cf:92:1d:42:be:df:f2:74:bb:51:13:19: 41:ab:de:11:16:7f:30:97:d2:7d:c8:ca:43:37:5d: 83:51:00:e0:92:86:42:85:94:e7:55:0e:26:10:1f: 0e:aa:fa:be:80:dc:e4:dd:d0:eb:c7:33:c6:48:7f: 54:1a:2d:ec:b1:5a:6f:aa:28:71:11:97:e2:d9:2d: c4:11:a4:54:13:f4:62:0b:ce:67:a6:67:35:32:02: 3a:a9:2d:84:70:98:92:bd:ac:95:50:05:5f:a1:8d: 74:0e:74:86:ab:2a:43:7b:87:d9:82:50:70:59:ce: 60:36:3f:28:4b:60:74:d1:9d:22:c9:be:ce:88:79: ec:62:3a:c9:67:50:2d:61:c8:a3:d8:81:cf:68:97: 32:66:b0:15:58:c0:0a:e2:cc:41:a9:d3:59:c6:71: b8:21:c3:bb:e7:d2:19:8d:83:84:9d:c3:95:f7:b7: 9b:4d:2b:fd:b5:05:51:22:f0:71:99:f2:62:28:41: 63:71:19:bd:28:2a:12:af:0f:6d:a3:41:8d:cb:f9: d2:b9:83:cb:8f:6e:6c:80:f3:60:c8:04:be:76:68: fb:dc:2a:73:35:d7:80:de:42:83:af:1a:d2:86:75: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:12:11:EF:8F:0E:CF:09:0D:26:A0:D9:58:C0:00:5A:7C:98:0C X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:be:46:49:2b:9a:78:fd:83:ed:c3:ab:d9:7e:81:b7:de:13: c2:7f:78:96:7f:58:d0:09:99:73:ee:e7:57:cc:71:f3:9f:25: ce:b2:52:31:a7:07:42:05:63:b0:d8:ff:38:c8:2e:cd:48:b6: 74:c0:24:7c:64:38:bd:f2:68:21:20:f5:37:ae:19:fc:97:6d: 4a:6f:5f:83:16:7f:ee:6d:ab:2b:4c:21:66:de:28:4f:b9:b5: a1:b5:21:76:09:1d:97:75:eb:1b:d7:1c:c5:97:5f:5a:90:21: d6:24:c7:72:0e:88:4c:18:32:70:d7:14:aa:cd:c7:ba:bd:23: 5d:4b:20:76:17:a0:75:8e:3e:62:a9:95:9c:fd:8f:97:f6:2c: 8d:7b:ef:e4:5d:d1:7a:97:79:ed:36:6d:cf:6c:6f:ae:df:a6: 4c:a0:f8:64:26:24:6f:0f:9d:71:10:0f:2f:0c:09:ad:b3:2a: 79:96:46:8f:ae:67:ee:f5:94:88:97:16:29:d9:75:48:fd:7f: 8b:3d:05:a3:8d:1e:4b:f3:ce:18:34:78:2f:1d:c4:d8:fd:39: 9f:c9:45:34:c3:21:e4:e1:f5:bf:a4:92:51:68:84:d1:bf:30: c9:e5:c6:6a:05:d5:d7:c5:9e:69:64:b8:c0:da:5f:74:e3:75: 20:f2:90:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwNTEzMDQzNjM5WhcNMjUwNTIwMDQzNjM5WjAYMRYwFAYD VQQDEw02ODIyY2M1OC05YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nlv1M4l/DwibQOva19HNPjPkh1Cvt/ydLtRExlBq94RFn8wl9J9yMpDN12D UQDgkoZChZTnVQ4mEB8Oqvq+gNzk3dDrxzPGSH9UGi3ssVpvqihxEZfi2S3EEaRU E/RiC85npmc1MgI6qS2EcJiSvayVUAVfoY10DnSGqypDe4fZglBwWc5gNj8oS2B0 0Z0iyb7OiHnsYjrJZ1AtYcij2IHPaJcyZrAVWMAK4sxBqdNZxnG4IcO759IZjYOE ncOV97ebTSv9tQVRIvBxmfJiKEFjcRm9KCoSrw9to0GNy/nSuYPLj25sgPNgyAS+ dmj73CpzNdeA3kKDrxrShnUYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiGEhHv jw7PCQ0moNlYwABafJgMMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWvkZJK5p4/YPtw6vZfoG33hPCf3iWf1jQCZlz7udXzHHznyXOslIx pwdCBWOw2P84yC7NSLZ0wCR8ZDi98mghIPU3rhn8l21Kb1+DFn/ubasrTCFm3ihP ubWhtSF2CR2Xdesb1xzFl19akCHWJMdyDohMGDJw1xSqzce6vSNdSyB2F6B1jj5i qZWc/Y+X9iyNe+/kXdF6l3ntNm3PbG+u36ZMoPhkJiRvD51xEA8vDAmtsyp5lkaP rmfu9ZSIlxYp2XVI/X+LPQWjjR5L884YNHgvHcTY/TmfyUU0wyHk4fW/pJJRaITR vzDJ5cZqBdXXxZ5pZLjA2l9043Ug8pDN -----END CERTIFICATE-----Generated at Wed May 14 14:53:05 2025 by rpki-client