$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: ApVmUrMJQ8TbdhsWUZflhp13UC+qPZdQWVZqOEVPaok= Subject key identifier: 16:F7:2F:86:5C:4B:DC:0F:2F:51:4D:8E:9E:05:C1:9C:C8:64:06:88 Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 1611 Signing time: Wed 14 May 2025 17:41:23 +0000 Manifest this update: Wed 14 May 2025 17:41:23 +0000 Manifest next update: Wed 21 May 2025 17:41:23 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: o3jmh7ToB8Q3xU+/CYHXBruK9Pz//sbOb5sQmi9XmV4=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: May 14 17:41:23 2025 GMT Not After : May 21 17:41:23 2025 GMT Subject: CN=6824d5c3-ffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:cb:77:86:6a:a9:18:73:bb:fe:ac:12:e4: b2:92:8a:8d:a9:d8:e0:e9:79:12:17:9e:14:dd:57: 09:e5:6c:57:70:10:ff:d1:a8:8a:5f:34:47:cf:a7: 0f:aa:1f:6b:e4:fe:d0:9a:17:b6:8a:3b:2d:5b:42: 14:44:f0:48:f3:07:27:0c:fa:af:19:66:02:5f:0f: b0:25:7d:b7:47:b8:cf:79:99:18:36:73:3f:fe:b8: 89:5c:51:51:b9:18:8e:d4:4e:91:58:0a:00:5f:e4: 4a:40:83:dc:53:b4:cb:f4:08:32:9c:0c:ed:57:c5: 92:4a:d7:b0:07:9b:a4:f5:0f:8a:94:f5:22:83:34: 4a:fe:9b:ad:18:3e:9b:b5:a3:56:1e:9f:f3:8d:f4: 5c:cf:2a:77:2d:19:95:fb:34:a1:b6:6e:58:19:57: a7:2e:df:46:cb:c4:72:c0:c8:45:37:91:a7:7d:18: 3d:81:e8:07:8c:fe:74:28:75:7c:a0:54:9d:3e:df: 93:fb:c5:b2:45:76:f9:01:20:4f:a6:22:16:14:f4: 96:82:9a:ef:7b:81:8f:53:5d:f1:78:d7:96:b3:d7: dd:14:9b:cd:11:73:0d:71:40:d7:b3:21:52:fe:d3: 49:86:0a:d5:58:f0:4d:b6:97:d8:8a:1c:2e:d5:97: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F7:2F:86:5C:4B:DC:0F:2F:51:4D:8E:9E:05:C1:9C:C8:64:06:88 X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:12:c3:c2:c8:4c:dd:bd:d9:72:04:bc:d1:45:9b:73:6c:94: 2b:4c:dd:5e:11:b4:f3:a7:2f:51:ae:36:ad:2e:9c:30:a8:87: 6b:e4:5e:19:95:53:bc:7c:b3:6a:61:3f:7d:f5:ae:47:8c:e8: 5a:59:21:da:ab:f7:d2:12:3f:9e:05:df:2d:48:85:ab:b2:99: ab:5e:55:a7:e0:ac:82:19:91:75:24:9c:85:a2:40:cc:7e:37: 65:ff:d3:9e:fd:c2:39:03:24:e3:c1:f1:8c:2b:70:8b:19:3b: 77:43:4e:ea:6d:d1:1a:10:8f:f1:d9:d8:d1:79:39:58:db:d6: 89:ff:67:8a:71:dd:69:82:54:72:5f:03:f1:7a:05:20:6c:b4: 8a:4e:eb:dc:52:a9:0a:fd:82:a3:95:5d:3a:00:1b:17:4a:ef: 2d:ae:9f:9a:03:6a:80:47:50:b4:c8:2f:1c:6b:df:7a:8a:36: 7e:33:94:ea:1a:cd:2a:8f:dc:c2:18:9e:65:31:86:eb:74:f1: 9d:d0:15:3b:d5:1e:f9:88:8b:1e:ce:6c:dd:37:f9:d8:f7:8c: ba:73:a2:6a:03:ae:98:78:31:ff:65:32:8a:26:45:7c:52:ec: 5a:db:e2:55:9d:81:dd:64:aa:13:e2:7d:e8:65:8b:de:01:3d: 5c:69:e8:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwNTE0MTc0MTIzWhcNMjUwNTIxMTc0MTIzWjAYMRYwFAYD VQQDEw02ODI0ZDVjMy1mZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCDLd4ZqqRhzu/6sEuSykoqNqdjg6XkSF54U3VcJ5WxXcBD/0aiKXzRHz6cP qh9r5P7Qmhe2ijstW0IURPBI8wcnDPqvGWYCXw+wJX23R7jPeZkYNnM//riJXFFR uRiO1E6RWAoAX+RKQIPcU7TL9AgynAztV8WSStewB5uk9Q+KlPUigzRK/putGD6b taNWHp/zjfRczyp3LRmV+zShtm5YGVenLt9Gy8RywMhFN5GnfRg9gegHjP50KHV8 oFSdPt+T+8WyRXb5ASBPpiIWFPSWgprve4GPU13xeNeWs9fdFJvNEXMNcUDXsyFS /tNJhgrVWPBNtpfYihwu1Zdu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb3L4Zc S9wPL1FNjp4FwZzIZAaIMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmEsPCyEzdvdlyBLzRRZtzbJQrTN1eEbTzpy9RrjatLpwwqIdr5F4Z lVO8fLNqYT999a5HjOhaWSHaq/fSEj+eBd8tSIWrspmrXlWn4KyCGZF1JJyFokDM fjdl/9Oe/cI5AyTjwfGMK3CLGTt3Q07qbdEaEI/x2djReTlY29aJ/2eKcd1pglRy XwPxegUgbLSKTuvcUqkK/YKjlV06ABsXSu8trp+aA2qAR1C0yC8ca996ijZ+M5Tq Gs0qj9zCGJ5lMYbrdPGd0BU71R75iIsezmzdN/nY94y6c6JqA66YeDH/ZTKKJkV8 Uuxa2+JVnYHdZKoT4n3oZYveAT1caeg7 -----END CERTIFICATE-----Generated at Fri May 16 18:09:16 2025 by rpki-client