$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: XB94hcIHueL4zQUmxv8WdzftAFMMGYUt/chyHKbxUYU= Subject key identifier: E8:A7:C6:FA:90:28:74:9D:42:8E:DC:39:4E:D9:FC:C9:C3:32:B7:7C Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 3C Signing time: Thu 15 May 2025 06:51:35 +0000 Manifest this update: Thu 15 May 2025 06:51:34 +0000 Manifest next update: Thu 22 May 2025 06:51:34 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: AYRF99YAdbk2ZE1LviERxPCkBz9/wVkm472tQdH/laM=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: May 15 06:51:34 2025 GMT Not After : May 22 06:51:34 2025 GMT Subject: CN=68258ef7-4a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:cc:5b:c5:9a:fc:31:d9:80:9f:cb:04:87: a2:8d:ac:8b:e9:89:7f:97:b0:d1:86:c6:03:8b:95: 78:dd:db:ea:aa:12:7b:09:fe:59:15:76:38:63:9f: ba:d2:8c:db:6f:03:d3:7a:da:5e:48:8b:a1:88:62: ed:b7:e8:c0:90:00:e9:f3:95:5b:d5:f0:88:f3:f0: 4f:cf:97:a5:82:eb:99:f1:28:03:dc:67:54:cd:36: 93:6e:e6:11:e1:b2:a3:b3:c3:20:28:78:86:36:57: d3:a9:b3:29:00:c9:48:89:d8:85:27:0d:b3:a8:68: 88:b8:65:8a:64:d6:e6:c0:41:28:16:d5:20:d3:15: 71:72:f4:55:b5:18:a3:23:40:d8:4c:fc:e9:95:29: 1c:90:3c:1d:ea:96:0b:21:dd:c5:d4:fc:5b:c8:cf: 2d:45:0a:22:22:58:37:c6:d1:3b:39:db:82:db:bc: c8:1c:ec:e7:f0:79:6c:b6:fc:6d:8d:f9:6e:42:c4: 6e:05:15:03:2f:90:fb:c6:80:0b:ad:8d:0c:12:2d: 78:b9:a5:d2:dd:bb:c1:48:92:3c:30:ba:e7:73:8c: 34:bd:1b:a2:f7:56:ee:55:84:20:fb:2c:7c:f7:d7: 9b:c0:b9:d5:6d:ee:b3:d2:53:e1:4d:c8:25:17:ed: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:C6:FA:90:28:74:9D:42:8E:DC:39:4E:D9:FC:C9:C3:32:B7:7C X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:00:f1:8a:67:29:91:fa:de:a1:fa:e1:7b:68:66:23:3b: 42:8c:af:a3:fd:e7:37:22:09:0f:81:8c:3d:50:8d:59:44:4c: 00:1a:cd:bd:4f:fc:30:1e:1c:4a:6f:a5:9f:60:48:67:8e:51: f9:8d:5d:f7:f2:ee:8a:b9:09:6e:9f:76:bb:fc:4b:72:55:2d: 90:2b:aa:da:60:df:1b:ce:a6:92:5a:5e:96:15:b9:b4:c2:a3: 74:ae:ae:b6:11:7c:9b:02:86:1c:d5:68:a6:c4:fd:01:1b:ca: a4:07:82:98:6f:7e:bf:39:f9:9f:be:01:6d:d4:9d:91:0a:10: 0e:63:74:d6:86:0c:d2:fc:33:ee:95:9d:97:f3:8f:74:26:1c: 65:bd:d3:5a:da:68:a5:6a:65:01:01:91:b1:31:7c:f5:47:83: 68:fb:b5:2a:ff:10:a7:cd:eb:d9:d6:a6:d2:db:57:ee:2e:24: 33:9a:a8:60:c3:c1:54:dd:11:37:f8:2c:9f:f5:66:7d:b1:75: 89:6b:c9:30:04:7a:89:c9:0c:3e:f3:d8:8c:b9:ff:d1:67:ac: 2c:7b:06:33:71:2d:60:ff:ee:d7:86:cd:c1:5d:b4:db:a9:55: 72:31:bd:1f:eb:25:c1:8d:a0:27:dd:f3:1c:2f:e5:77:44:c0: 0a:1a:cc:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA1MTUwNjUxMzRaFw0yNTA1MjIwNjUxMzRaMBgxFjAUBgNV BAMTDTY4MjU4ZWY3LTRhNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMKsxbxZr8MdmAn8sEh6KNrIvpiX+XsNGGxgOLlXjd2+qqEnsJ/lkVdjhjn7rS jNtvA9N62l5Ii6GIYu236MCQAOnzlVvV8Ijz8E/Pl6WC65nxKAPcZ1TNNpNu5hHh sqOzwyAoeIY2V9OpsykAyUiJ2IUnDbOoaIi4ZYpk1ubAQSgW1SDTFXFy9FW1GKMj QNhM/OmVKRyQPB3qlgsh3cXU/FvIzy1FCiIiWDfG0Ts524LbvMgc7OfweWy2/G2N +W5CxG4FFQMvkPvGgAutjQwSLXi5pdLdu8FIkjwwuudzjDS9G6L3Vu5VhCD7LHz3 15vAudVt7rPSU+FNyCUX7b9NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6KfG+pAo dJ1Cjtw5Ttn8ycMyt3wwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJL8APGKZymR+t6h+uF7aGYjO0KMr6P95zciCQ+BjD1QjVlETAAazb1P /DAeHEpvpZ9gSGeOUfmNXffy7oq5CW6fdrv8S3JVLZArqtpg3xvOppJaXpYVubTC o3SurrYRfJsChhzVaKbE/QEbyqQHgphvfr85+Z++AW3UnZEKEA5jdNaGDNL8M+6V nZfzj3QmHGW901raaKVqZQEBkbExfPVHg2j7tSr/EKfN69nWptLbV+4uJDOaqGDD wVTdETf4LJ/1Zn2xdYlryTAEeonJDD7z2Iy5/9FnrCx7BjNxLWD/7teGzcFdtNup VXIxvR/rJcGNoCfd8xwv5XdEwAoazFY= -----END CERTIFICATE-----Generated at Fri May 16 18:58:57 2025 by rpki-client