$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json) Hash identifier: tOIT8EwSRz5vVJ9Ln+6m3tikrgKqSoSl+h0ogs74P0M= Subject key identifier: B7:1F:AD:52:51:77:5F:13:96:99:00:C0:F6:81:60:76:88:2E:B4:C4 Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft Manifest number: 058F Signing time: Sat 10 May 2025 22:50:18 +0000 Manifest this update: Sat 10 May 2025 22:50:18 +0000 Manifest next update: Sat 17 May 2025 22:50:18 +0000 Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: M6rkMnC3CRCluB/RCVOzIr/168PFtgv2e1IV6jbcrdc=) 2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: zqhHb4EuNxIhj0MsDdGRZBLgZ5b4JdLttiLWNXtELcI=) 3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: May 10 22:50:18 2025 GMT Not After : May 17 22:50:18 2025 GMT Subject: CN=681fd82a-3635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:70:a5:5e:24:85:6e:a1:b8:8d:a1:46:83: 46:e8:39:3a:39:e9:3b:88:36:1b:84:a8:c5:70:6f: 5b:72:3a:6e:63:e8:ef:21:83:8e:50:66:0a:fd:f9: 8d:18:44:2d:a9:ed:99:ff:24:de:7f:ad:09:79:4c: fd:d8:3b:75:88:b0:ba:3c:02:df:a0:e0:32:2d:af: 21:3a:36:d3:f7:f5:f0:d2:f5:b3:47:63:7a:87:df: fa:3e:b8:14:10:ed:8c:86:be:db:fd:04:30:57:cd: 6a:68:2b:5e:44:f6:eb:41:a5:ce:d8:f1:ba:50:9f: 8a:bb:03:e1:22:23:b3:2d:36:6e:5d:01:33:9a:10: b5:cc:30:6d:45:53:cb:ed:10:1b:ab:7a:53:8d:b6: bf:5d:8e:79:2b:b4:ec:8f:39:a6:88:90:f2:fe:10: 77:ea:bb:46:6c:ea:d4:83:cc:69:c4:b7:27:4e:54: 6b:9a:43:f3:aa:45:b4:c6:2f:32:23:37:a9:e2:39: b5:f1:e3:f6:42:64:34:9d:a0:01:c6:50:42:4a:4e: 0e:6d:81:d8:f9:c7:92:95:21:e9:41:66:c0:02:0d: ce:6f:ab:70:a1:d6:44:25:85:73:9d:78:f0:f1:7a: 71:0e:b3:60:d4:93:dc:ff:0b:73:9a:70:28:f3:a1: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:AD:52:51:77:5F:13:96:99:00:C0:F6:81:60:76:88:2E:B4:C4 X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9d:6b:b9:4c:c3:57:ed:fb:46:12:df:37:d2:83:82:e4:e1: 3d:f7:56:5c:93:9b:2b:7e:df:07:86:b5:6b:a9:9c:fc:1d:74: 25:0a:ea:c7:c5:95:a6:be:0d:1c:30:aa:90:0b:17:48:11:c8: 1d:94:7d:3e:85:dc:b2:6f:db:27:19:fc:bd:94:6e:fb:fe:b9: 15:c3:ff:c6:38:6f:04:1f:d3:c0:8d:38:19:46:4f:4f:88:0b: f0:a1:bd:3a:8c:0b:04:83:f2:1d:c5:b6:8f:c5:3c:f4:63:c0: 5d:b6:f5:f3:78:cb:d0:2e:47:bf:76:94:18:c1:89:4d:4f:1a: 60:89:a6:50:e1:14:01:77:76:69:e5:0f:b6:c8:71:c3:69:a7: 04:19:58:36:66:a7:92:2c:1f:56:27:75:31:e2:08:69:9d:8e: 78:74:95:fa:68:a5:b5:07:d5:8b:df:43:01:56:c6:ca:f3:d5: 5f:0f:fa:3c:a6:25:91:c3:9d:fd:fc:23:c8:aa:cb:1a:23:5a: c1:6a:c2:14:ba:64:43:99:3b:59:25:e6:f7:98:d3:fe:da:84: 40:9d:a5:2b:d2:fe:c6:b2:94:36:41:9b:81:6c:d6:87:01:df: d8:4c:06:0c:6b:d3:99:1c:f8:2d:8b:94:22:23:87:34:da:78: 3c:48:0c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjUwNTEwMjI1MDE4WhcNMjUwNTE3MjI1MDE4WjAYMRYwFAYD VQQDEw02ODFmZDgyYS0zNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCZwpV4khW6huI2hRoNG6Dk6Oek7iDYbhKjFcG9bcjpuY+jvIYOOUGYK/fmN GEQtqe2Z/yTef60JeUz92Dt1iLC6PALfoOAyLa8hOjbT9/Xw0vWzR2N6h9/6PrgU EO2Mhr7b/QQwV81qaCteRPbrQaXO2PG6UJ+KuwPhIiOzLTZuXQEzmhC1zDBtRVPL 7RAbq3pTjba/XY55K7TsjzmmiJDy/hB36rtGbOrUg8xpxLcnTlRrmkPzqkW0xi8y Izep4jm18eP2QmQ0naABxlBCSk4ObYHY+ceSlSHpQWbAAg3Ob6twodZEJYVznXjw 8XpxDrNg1JPc/wtzmnAo86EYGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcfrVJR d18TlpkAwPaBYHaILrTEMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0 RzdjQzREaUNveVgtdV82YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqnWu5TMNX7ftGEt830oOC5OE991Zck5srft8HhrVrqZz8HXQlCurH xZWmvg0cMKqQCxdIEcgdlH0+hdyyb9snGfy9lG77/rkVw//GOG8EH9PAjTgZRk9P iAvwob06jAsEg/IdxbaPxTz0Y8BdtvXzeMvQLke/dpQYwYlNTxpgiaZQ4RQBd3Zp 5Q+2yHHDaacEGVg2ZqeSLB9WJ3Ux4ghpnY54dJX6aKW1B9WL30MBVsbK89VfD/o8 piWRw539/CPIqssaI1rBasIUumRDmTtZJeb3mNP+2oRAnaUr0v7GspQ2QZuBbNaH Ad/YTAYMa9OZHPgti5QiI4c02ng8SAyC -----END CERTIFICATE-----Generated at Sun May 11 04:20:48 2025 by rpki-client