$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: xhAzlcVJLXdr7OWJGHzOeF0ioCjWjws5amKFe4ahiC0= Subject key identifier: 81:BE:AE:4F:35:AF:3B:A9:0D:5F:60:D2:E0:A6:F7:F2:03:F2:1D:A3 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 98 Signing time: Thu 15 May 2025 05:37:48 +0000 Manifest this update: Thu 15 May 2025 05:37:48 +0000 Manifest next update: Thu 22 May 2025 05:37:48 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: xh0pBAA2M+pBU0HWWCWh4to+7tuTS88aDeAZSUGvzoc=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: May 15 05:37:48 2025 GMT Not After : May 22 05:37:48 2025 GMT Subject: CN=68257dac-c9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:8c:c3:12:a6:f4:c8:e4:f4:a4:44:e0:d2: 9b:b7:e8:67:0d:df:29:60:9a:80:aa:5e:bb:1b:f5: 92:ac:46:de:ce:b7:26:c1:5e:06:86:cd:1a:7c:7b: c5:b3:84:30:f7:3c:62:67:87:a9:4a:9b:34:7d:06: 1a:9b:1c:18:e7:1f:af:a5:c6:6a:f2:26:d3:25:5a: 60:08:f1:36:ee:79:e2:f9:3d:e7:20:f9:05:22:60: 9a:37:ea:3c:11:d8:7c:14:28:58:7e:1e:c6:58:4b: 94:00:67:ad:f1:5e:31:4f:e1:44:5f:1b:74:0b:fa: b6:a1:55:60:15:6a:f1:31:1d:8f:b4:5d:5e:64:1e: 0d:75:eb:b6:0a:a1:7f:c1:8e:cc:c3:e7:c9:b3:8a: 0f:56:f8:08:e9:e2:97:e8:9c:70:d9:ca:25:c8:22: 35:c5:37:41:53:45:b7:fa:df:5c:94:30:32:1e:17: 76:62:af:09:29:3b:69:65:f8:da:a2:c5:4d:e2:32: d9:03:6a:1b:ea:c7:a1:2f:75:9d:9a:74:ba:f4:cc: 8f:e4:fa:47:b8:a7:90:1b:e2:ad:a6:21:54:0f:1d: 57:41:66:c9:ab:c3:0a:ac:e9:af:01:18:1b:7c:bc: 9a:3c:38:53:f3:2a:24:02:4c:10:d7:93:3e:cc:7d: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:AE:4F:35:AF:3B:A9:0D:5F:60:D2:E0:A6:F7:F2:03:F2:1D:A3 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:27:dd:8a:c8:e3:a7:71:d0:d3:91:06:98:05:14:c5:80:98: d2:88:dd:ba:07:24:b7:2d:8b:3f:0b:17:ef:26:eb:24:ef:ac: f3:0c:db:ba:b5:dc:b7:d7:85:30:84:cf:f6:2f:9f:6b:82:f7: b8:9e:d1:9a:3a:d7:d6:53:cb:5e:9f:6e:14:8c:ce:e7:79:61: b1:1e:df:2d:8a:02:50:7a:44:71:2e:a9:c5:12:3d:35:68:35: 1a:f0:41:3d:a9:9a:4a:ec:0f:d5:5d:60:86:e2:7e:21:23:62: 75:a7:c8:8e:12:4d:7a:88:a9:19:5b:e0:95:c6:78:41:0d:7a: c9:fe:de:c8:d2:61:d2:fb:21:a5:1a:d9:4d:e0:5c:af:de:e4: 7e:02:90:67:0a:8e:e3:7f:9e:1e:d1:df:42:dd:53:0f:c8:13: ff:4b:9f:46:3c:99:0c:81:b5:4f:cb:76:62:f5:29:db:6c:90: ba:55:ba:f7:c3:82:23:a1:f7:eb:2d:93:3d:88:5d:ec:aa:ac: 34:cc:0a:28:db:82:fb:10:b0:fa:73:67:c4:f5:30:10:bc:95: 0c:e7:7f:45:39:28:02:a4:17:23:7c:85:98:7c:a3:08:16:41: 0a:35:42:c7:6a:f8:c5:b3:5c:bc:53:0f:50:da:c4:77:38:6b: 4c:03:90:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwNTE1MDUzNzQ4WhcNMjUwNTIyMDUzNzQ4WjAYMRYwFAYD VQQDEw02ODI1N2RhYy1jOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/OMwxKm9Mjk9KRE4NKbt+hnDd8pYJqAql67G/WSrEbezrcmwV4Ghs0afHvF s4Qw9zxiZ4epSps0fQYamxwY5x+vpcZq8ibTJVpgCPE27nni+T3nIPkFImCaN+o8 Edh8FChYfh7GWEuUAGet8V4xT+FEXxt0C/q2oVVgFWrxMR2PtF1eZB4Ndeu2CqF/ wY7Mw+fJs4oPVvgI6eKX6Jxw2colyCI1xTdBU0W3+t9clDAyHhd2Yq8JKTtpZfja osVN4jLZA2ob6sehL3WdmnS69MyP5PpHuKeQG+KtpiFUDx1XQWbJq8MKrOmvARgb fLyaPDhT8yokAkwQ15M+zH36hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG+rk81 rzupDV9g0uCm9/ID8h2jMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzJ92KyOOncdDTkQaYBRTFgJjSiN26ByS3LYs/CxfvJusk76zzDNu6 tdy314UwhM/2L59rgve4ntGaOtfWU8ten24UjM7neWGxHt8tigJQekRxLqnFEj01 aDUa8EE9qZpK7A/VXWCG4n4hI2J1p8iOEk16iKkZW+CVxnhBDXrJ/t7I0mHS+yGl GtlN4Fyv3uR+ApBnCo7jf54e0d9C3VMPyBP/S59GPJkMgbVPy3Zi9SnbbJC6Vbr3 w4IjoffrLZM9iF3sqqw0zAoo24L7ELD6c2fE9TAQvJUM539FOSgCpBcjfIWYfKMI FkEKNULHavjFs1y8Uw9Q2sR3OGtMA5CI -----END CERTIFICATE-----Generated at Sat May 17 01:07:13 2025 by rpki-client