$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: Yq7RQexSPvQUwmcihTae/AHSh4ccRjW9i5fHchm7DEc= Subject key identifier: ED:3F:B0:6B:99:BB:6D:01:4F:F4:47:0A:26:99:D4:93:20:01:BE:42 Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: A1 Signing time: Thu 15 May 2025 05:33:00 +0000 Manifest this update: Thu 15 May 2025 05:32:59 +0000 Manifest next update: Thu 22 May 2025 05:32:59 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: /RCL/z9MOnne8sq9utXrh+cIDy+aP/esxY3TxJQQ76M=) 2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=) 3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: RWKYaNgfk7P7N5uSJ3tE2gik3mua1Il7oXxrRLWnbWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: May 15 05:32:59 2025 GMT Not After : May 22 05:32:59 2025 GMT Subject: CN=68257c8b-5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:b3:0a:78:21:f0:6f:1a:81:2c:22:e4:bd: d4:23:9a:49:14:c0:c5:9a:2f:bc:06:c1:40:f6:29: be:53:11:78:75:ee:19:cb:9a:5f:0d:30:cc:79:26: 9b:0f:10:b5:fd:55:ac:f2:7b:43:cd:c1:3f:25:5e: a2:41:f1:cf:16:46:0b:6a:2b:53:af:4e:d3:23:25: ab:28:17:7a:ea:55:62:40:e6:47:f1:fe:2e:ac:97: e1:bb:a7:0a:f0:50:0e:0d:d4:84:d4:32:92:10:7b: 86:da:96:64:28:e5:70:82:8a:aa:13:ea:99:4b:cb: fa:8f:e8:1f:ed:6a:fb:ea:fe:12:8d:3b:0b:1e:6a: e9:e4:4e:63:68:aa:79:79:02:6e:28:9d:a1:7f:5d: 02:4d:fe:34:37:db:51:27:a8:79:2d:9f:bc:41:ed: 36:12:81:40:da:de:08:ef:5b:d6:5b:00:cd:9e:08: b3:a3:0d:e5:83:19:62:7f:7c:80:22:63:4c:d4:02: 2a:2c:97:3b:dd:ea:43:2b:12:a1:1b:26:d3:bb:22: c5:9e:8e:2b:92:f7:7b:6f:db:fe:df:c2:c7:dc:1e: 3b:55:34:27:03:05:e4:f5:ec:ba:57:c4:ed:b7:37: 56:9b:3b:99:a4:e8:db:6c:ca:14:6a:d6:0b:61:c1: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3F:B0:6B:99:BB:6D:01:4F:F4:47:0A:26:99:D4:93:20:01:BE:42 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:28:97:5c:01:09:46:7e:98:3e:56:11:8d:03:1b:d6:49: d1:da:58:48:2f:fa:05:61:81:50:51:6c:d8:51:9c:e3:e7:da: b4:b6:39:9b:bb:e4:71:e3:e0:0c:3a:d1:bb:f0:7a:04:43:b1: b4:96:f0:ba:d5:72:8e:0b:62:14:44:17:b2:4c:20:95:bf:ce: 51:a1:91:6f:d2:da:17:91:eb:3b:9d:45:bc:da:5c:81:b5:54: 9e:27:37:a8:02:b2:6f:c9:6a:fc:3a:18:2e:fd:7d:5c:6b:c5: e7:b3:da:16:03:15:d2:9b:46:e0:d9:b8:b5:16:62:80:06:cb: 96:7a:e8:5a:c0:a8:fc:f8:4a:2e:45:23:ea:24:dc:26:de:77: 90:d2:ec:11:56:88:3d:8d:91:7a:27:05:11:85:53:e8:c3:d7: f3:d4:49:29:89:33:0d:ec:c6:29:21:4a:c2:30:af:19:5f:61: cf:f8:38:30:87:d8:ff:26:28:3e:4e:3a:3a:e8:02:61:44:7d: 9b:93:6b:54:c1:73:f9:a9:4f:67:22:f8:51:7b:4f:91:54:d6: 3a:7a:9d:f7:bf:fe:d9:dc:10:6c:82:15:79:6a:03:7a:fe:0a: d8:2e:f6:e2:5c:6b:82:12:86:a5:57:dd:d9:a6:77:34:d7:da: 1a:48:6f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwNTE1MDUzMjU5WhcNMjUwNTIyMDUzMjU5WjAYMRYwFAYD VQQDEw02ODI1N2M4Yi01NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycKzCngh8G8agSwi5L3UI5pJFMDFmi+8BsFA9im+UxF4de4Zy5pfDTDMeSab DxC1/VWs8ntDzcE/JV6iQfHPFkYLaitTr07TIyWrKBd66lViQOZH8f4urJfhu6cK 8FAODdSE1DKSEHuG2pZkKOVwgoqqE+qZS8v6j+gf7Wr76v4SjTsLHmrp5E5jaKp5 eQJuKJ2hf10CTf40N9tRJ6h5LZ+8Qe02EoFA2t4I71vWWwDNngizow3lgxlif3yA ImNM1AIqLJc73epDKxKhGybTuyLFno4rkvd7b9v+38LH3B47VTQnAwXk9ey6V8Tt tzdWmzuZpOjbbMoUatYLYcEbMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0/sGuZ u20BT/RHCiaZ1JMgAb5CMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ICiXXAEJRn6YPlYRjQMb1knR2lhIL/oFYYFQUWzYUZzj59q0tjmb u+Rx4+AMOtG78HoEQ7G0lvC61XKOC2IURBeyTCCVv85RoZFv0toXkes7nUW82lyB tVSeJzeoArJvyWr8Ohgu/X1ca8Xns9oWAxXSm0bg2bi1FmKABsuWeuhawKj8+Eou RSPqJNwm3neQ0uwRVog9jZF6JwURhVPow9fz1EkpiTMN7MYpIUrCMK8ZX2HP+Dgw h9j/Jig+Tjo66AJhRH2bk2tUwXP5qU9nIvhRe0+RVNY6ep33v/7Z3BBsghV5agN6 /grYLvbiXGuCEoalV93Zpnc019oaSG/t -----END CERTIFICATE-----Generated at Thu May 15 22:37:35 2025 by rpki-client