$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: h8CVMC0Reiv87aWBIUPaEAR1LfvkbvPOLHMq4Jja13A= Subject key identifier: 58:84:FB:EA:A7:4E:E0:E0:D4:C8:F0:6C:34:39:27:20:C0:73:9A:4D Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0618 Signing time: Wed 14 May 2025 22:53:12 +0000 Manifest this update: Wed 14 May 2025 22:53:12 +0000 Manifest next update: Wed 21 May 2025 22:53:12 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: gShX64nP9OfNuT+G7WcTlm4lBCKrLeqb++2i2ZVpesg=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: May 14 22:53:12 2025 GMT Not After : May 21 22:53:12 2025 GMT Subject: CN=68251ed8-795c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:59:d5:03:0f:a1:ae:24:28:52:79:a4:3a: 02:03:77:41:b2:06:f7:2a:08:91:6a:78:db:d7:87: 4b:7c:cf:fb:f1:2b:49:b0:53:44:b1:ec:9a:88:a7: 75:0e:4a:8c:f7:89:53:fd:a0:83:61:85:9f:66:cc: f7:fb:e7:d0:64:77:2f:35:2b:00:f2:ac:47:3b:17: 4c:c4:e5:33:f9:9a:48:ae:8b:80:51:a6:53:3a:58: 30:95:de:b8:df:dd:53:e5:a1:8b:a7:69:d0:0c:21: ce:7f:3d:3c:3b:5f:9c:95:ee:d1:3c:b8:ca:5c:da: 61:a7:00:83:10:ab:9e:78:66:c5:11:e2:18:4a:58: cb:7f:68:4c:19:ea:ef:92:40:35:b9:84:c2:5d:6b: 92:84:e2:c2:b6:a7:c4:d3:45:86:c1:c2:73:6a:80: 0c:dd:46:4c:52:79:53:52:79:46:54:b0:88:63:45: 74:d2:91:6a:bd:f2:67:94:e6:56:e6:4b:ff:0e:74: 22:02:27:b7:c0:c4:e0:aa:97:11:e4:f3:8e:f4:d4: 9e:2c:39:58:52:11:96:3d:16:96:8e:6b:79:b5:14: 5a:a9:f8:e7:e1:44:50:c1:08:62:41:72:f9:d2:89: fb:89:2a:3c:c8:0a:4a:b2:a3:4e:56:70:bf:2b:0a: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:FB:EA:A7:4E:E0:E0:D4:C8:F0:6C:34:39:27:20:C0:73:9A:4D X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:32:93:cd:32:58:cd:30:84:01:ce:8d:45:b7:39:80:e5: 7e:53:06:bd:1f:5e:33:2c:da:d5:5d:fc:fd:b2:24:f0:6a:84: b9:61:16:40:b2:c3:dc:ba:f2:37:42:5b:dc:8a:b4:8d:3b:5f: 25:5c:5c:08:df:f4:8f:f0:8e:b1:a8:95:dc:a8:bb:af:e7:17: dd:c6:70:5e:7f:ff:cd:b8:3a:ed:24:de:ac:26:f1:66:5e:0a: 6e:31:c4:13:e7:21:5d:6a:34:78:56:27:ea:a4:90:56:f6:5d: ab:8b:84:c8:0b:72:8d:cf:ba:20:70:08:37:fa:dd:66:3c:03: 04:f8:d6:15:0f:68:76:20:4f:8f:2a:3a:2f:38:af:42:a7:5b: cd:f2:ea:61:b8:42:b2:a4:fe:47:24:74:df:ba:eb:b6:e4:3c: 13:5f:5a:79:a4:68:76:ff:88:7e:d5:3d:ee:b7:3b:f5:64:54: 7d:2f:95:64:b7:83:10:a3:f4:9d:cf:0e:73:30:48:25:83:ec: a4:c9:dc:4d:ef:2d:2c:68:e5:58:fd:35:21:a1:11:82:1c:31: b9:2f:26:8b:1c:44:08:ec:75:c4:5e:58:87:5e:32:8f:55:a8: 9f:bb:3a:3a:42:ce:ac:64:7c:6e:1f:50:1d:db:99:38:67:c2: b0:2c:63:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUwNTE0MjI1MzEyWhcNMjUwNTIxMjI1MzEyWjAYMRYwFAYD VQQDEw02ODI1MWVkOC03OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37FZ1QMPoa4kKFJ5pDoCA3dBsgb3KgiRanjb14dLfM/78StJsFNEseyaiKd1 DkqM94lT/aCDYYWfZsz3++fQZHcvNSsA8qxHOxdMxOUz+ZpIrouAUaZTOlgwld64 391T5aGLp2nQDCHOfz08O1+cle7RPLjKXNphpwCDEKueeGbFEeIYSljLf2hMGerv kkA1uYTCXWuShOLCtqfE00WGwcJzaoAM3UZMUnlTUnlGVLCIY0V00pFqvfJnlOZW 5kv/DnQiAie3wMTgqpcR5POO9NSeLDlYUhGWPRaWjmt5tRRaqfjn4URQwQhiQXL5 0on7iSo8yApKsqNOVnC/KwpWAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiE++qn TuDg1MjwbDQ5JyDAc5pNMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsnzKTzTJYzTCEAc6NRbc5gOV+Uwa9H14zLNrVXfz9siTwaoS5YRZA ssPcuvI3QlvcirSNO18lXFwI3/SP8I6xqJXcqLuv5xfdxnBef//NuDrtJN6sJvFm XgpuMcQT5yFdajR4VifqpJBW9l2ri4TIC3KNz7ogcAg3+t1mPAME+NYVD2h2IE+P KjovOK9Cp1vN8uphuEKypP5HJHTfuuu25DwTX1p5pGh2/4h+1T3utzv1ZFR9L5Vk t4MQo/Sdzw5zMEglg+ykydxN7y0saOVY/TUhoRGCHDG5LyaLHEQI7HXEXliHXjKP Vaifuzo6Qs6sZHxuH1Ad25k4Z8KwLGMo -----END CERTIFICATE-----Generated at Fri May 16 23:35:41 2025 by rpki-client