$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: CigjJ8iGtlMbQez3t9Sg4gug4mI09kYCqXq+OTmwjtg= Subject key identifier: BF:E3:56:D8:AA:53:41:F0:73:63:0A:D3:8D:67:C2:22:AB:45:BE:5B Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 029B Signing time: Sun 11 May 2025 01:04:48 +0000 Manifest this update: Sun 11 May 2025 01:04:47 +0000 Manifest next update: Sun 18 May 2025 01:04:47 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: S3HEwzoG5hEHuuas8UMB4oN5NqH97JSxA+GyOki+3ZU=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: May 11 01:04:47 2025 GMT Not After : May 18 01:04:47 2025 GMT Subject: CN=681ff7af-dbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:15:c1:18:3c:c3:22:a6:ee:33:be:cb:a8: 98:a9:43:41:86:86:7f:2b:62:88:a7:5a:b6:bb:ae: 18:da:e3:98:df:8f:cc:98:ad:47:56:dd:7f:64:7b: 7b:12:3f:4a:9e:8c:83:71:96:24:88:7a:c5:3a:b4: fb:2e:3a:9a:53:3e:b7:b3:73:02:2f:cb:be:c5:62: bc:be:96:ec:5d:0f:bb:b8:6a:7e:12:b6:ff:2b:92: 36:95:c0:28:3c:43:3c:27:ea:62:30:fa:16:12:9d: e0:09:a7:e7:fc:b4:86:61:95:0d:ca:3d:d9:7c:8b: 96:ac:20:81:b0:8b:b9:5d:1a:10:ff:ed:ba:11:4c: 6a:f6:8c:5b:d2:b0:de:c4:00:85:a4:eb:99:0b:ee: d8:04:32:aa:a3:eb:1a:59:5a:18:e1:33:48:ec:02: fe:1c:dc:77:3c:07:1a:1f:78:02:0c:0c:6c:49:0c: 9b:02:c3:f1:eb:c0:60:ab:38:69:e1:02:29:97:7b: a3:96:d9:1e:84:71:93:02:99:35:d0:80:c4:26:3c: df:7a:45:4e:94:7b:05:8f:af:c4:9a:fa:7b:6c:38: 94:2c:40:63:aa:c4:2d:6b:6e:03:07:c5:67:00:e7: 8e:48:4d:d1:d7:b1:56:12:97:f0:4a:14:d4:d2:7b: f8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:56:D8:AA:53:41:F0:73:63:0A:D3:8D:67:C2:22:AB:45:BE:5B X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a5:6a:86:8a:d8:a5:ed:da:bb:61:2b:a6:f4:d8:dd:69:e9: 8d:6a:27:b0:44:c3:ec:22:9e:cb:10:80:8e:5c:f3:ba:2b:ae: 91:f4:3e:25:e7:c5:d6:8c:66:1b:d7:46:51:96:73:c1:ed:53: 83:a8:03:d0:c6:5f:2a:00:7c:d3:22:1b:3a:c7:11:18:ee:33: b6:ed:44:e3:d5:34:74:69:aa:f3:0e:b0:f0:4a:5b:b6:3c:dc: 1c:b9:1b:85:97:c3:59:9a:9b:b3:87:51:97:e9:0f:f1:67:cf: b0:79:76:f7:2a:7a:38:54:67:3b:f8:5b:4a:95:f0:b7:19:ff: 3c:7a:da:b3:a6:ab:7e:8a:8e:29:9e:01:ec:17:d5:78:3b:45: 08:60:40:7d:5c:f1:94:e7:d8:d3:7b:e0:a3:ae:cd:fd:93:11: 46:6d:76:02:f4:cc:93:a3:88:e7:0e:f3:a5:19:6a:ff:32:60: 4c:39:c2:b4:16:bd:3a:70:ba:2d:0c:d5:7c:42:f6:5b:4a:de: bc:3f:dd:b7:fa:a1:be:42:ef:32:7e:37:9b:e9:d9:be:f8:39: c6:13:47:2c:6b:e6:73:cd:8f:a7:44:0f:dd:5f:84:ae:f2:5e: 31:63:b3:c3:82:f5:af:bd:4b:fc:21:a0:92:22:73:96:62:b5: 7a:82:dd:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwNTExMDEwNDQ3WhcNMjUwNTE4MDEwNDQ3WjAYMRYwFAYD VQQDEw02ODFmZjdhZi1kYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jIVwRg8wyKm7jO+y6iYqUNBhoZ/K2KIp1q2u64Y2uOY34/MmK1HVt1/ZHt7 Ej9KnoyDcZYkiHrFOrT7LjqaUz63s3MCL8u+xWK8vpbsXQ+7uGp+Erb/K5I2lcAo PEM8J+piMPoWEp3gCafn/LSGYZUNyj3ZfIuWrCCBsIu5XRoQ/+26EUxq9oxb0rDe xACFpOuZC+7YBDKqo+saWVoY4TNI7AL+HNx3PAcaH3gCDAxsSQybAsPx68Bgqzhp 4QIpl3ujltkehHGTApk10IDEJjzfekVOlHsFj6/Emvp7bDiULEBjqsQta24DB8Vn AOeOSE3R17FWEpfwShTU0nv47wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/jVtiq U0Hwc2MK041nwiKrRb5bMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4pWqGitil7dq7YSum9NjdaemNaiewRMPsIp7LEICOXPO6K66R9D4l 58XWjGYb10ZRlnPB7VODqAPQxl8qAHzTIhs6xxEY7jO27UTj1TR0aarzDrDwSlu2 PNwcuRuFl8NZmpuzh1GX6Q/xZ8+weXb3Kno4VGc7+FtKlfC3Gf88etqzpqt+io4p ngHsF9V4O0UIYEB9XPGU59jTe+Cjrs39kxFGbXYC9MyTo4jnDvOlGWr/MmBMOcK0 Fr06cLotDNV8QvZbSt68P923+qG+Qu8yfjeb6dm++DnGE0csa+ZzzY+nRA/dX4Su 8l4xY7PDgvWvvUv8IaCSInOWYrV6gt04 -----END CERTIFICATE-----Generated at Mon May 12 12:53:32 2025 by rpki-client