$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: YHy3b5DtuoD/PXuIaqCncJQFfDQ4BnEw/By9Acn6NWE= Subject key identifier: 24:6C:24:FA:F7:52:56:1E:B6:2B:58:22:B0:5C:FD:34:2A:7E:1E:79 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 349F Signing time: Mon 12 May 2025 15:01:02 +0000 Manifest this update: Mon 12 May 2025 15:01:02 +0000 Manifest next update: Mon 19 May 2025 15:01:02 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: R1kD9JEO6zaZuRUNL3irHEyrJ1YXRdHhiwBQlObmmzE=) 2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: BdwgkrEVvS7EaJMjyx021N1wHkcgwHBJVY8E6E534xQ=) 3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: 4i/7LdEU/T1ZHgOr95PKDKNxvTm/ZtFlmP55xUeSbB0=) 4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: c0Nj/EakD9jZWUmq6GYt4WJPzbB76p849p8VWNsKos4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: May 12 15:01:02 2025 GMT Not After : May 19 15:01:02 2025 GMT Subject: CN=68220d2e-3e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:bf:16:75:d2:bd:ca:6d:8c:d6:08:71:b7: 28:55:19:b9:6d:b1:5b:7b:cd:66:72:33:66:97:0a: 1a:54:98:74:4b:f5:0e:8b:9d:70:79:57:f9:d3:65: ef:43:ad:89:b6:65:f7:ac:07:91:e6:3d:ce:71:3d: ab:3a:5b:13:fa:eb:09:1c:7f:74:d9:d7:9d:76:53: b1:53:3d:9e:4a:ba:db:b1:05:8a:be:ce:79:1d:b7: b7:b6:ad:e6:ab:d8:4d:00:55:40:1a:9e:04:2a:a5: f1:6f:1c:47:59:17:79:f6:54:a0:79:3b:93:e5:84: 0e:56:67:77:d1:f3:ed:7f:3f:da:2e:fa:34:13:5d: 9e:97:22:4d:aa:65:91:14:af:4a:bf:f8:4b:55:71: ff:00:bd:c3:ad:bd:6d:03:a8:42:77:79:30:3d:b9: c3:9f:99:cd:c1:ed:0a:1e:da:45:15:31:b1:e4:ea: 95:48:97:bf:bf:23:76:d8:75:52:39:e5:17:0d:83: 0f:78:e7:97:b3:b5:b7:d9:30:75:c3:be:58:41:2e: fa:cf:5b:79:d0:f5:91:ab:66:a9:50:f5:b6:6e:74: a8:e9:a2:95:f8:0f:b4:0c:ba:d4:e5:99:99:46:3a: ee:10:7d:27:d0:61:12:d4:64:9b:92:a8:64:1e:ef: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:24:FA:F7:52:56:1E:B6:2B:58:22:B0:5C:FD:34:2A:7E:1E:79 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2a:8e:b2:61:6e:18:4d:1b:b1:b2:cb:c2:25:d4:b5:02:51: a6:4c:92:95:97:c2:15:dd:2a:e7:ff:dd:6e:24:03:13:0a:66: a1:68:a1:d4:75:c3:b6:f7:bd:ca:19:2c:cd:32:f3:48:96:a2: 97:9b:9e:bb:a0:6d:57:2d:50:ab:4a:43:a4:e2:14:92:67:9c: db:09:c9:b4:4a:f5:5b:e2:50:96:22:58:8c:75:8f:a6:30:fb: 06:2c:e6:13:e4:5b:27:a7:cf:f7:73:6a:94:9d:2d:1b:e1:5d: f5:bf:0a:d0:28:db:e4:1e:63:9d:96:b6:e7:ff:80:af:45:ff: 40:c6:33:d9:75:9e:02:06:c5:19:04:d4:f0:6f:b7:3e:1b:f2: 23:da:24:9a:38:a0:1d:0c:38:ee:14:01:21:83:7f:23:f0:09: f2:4e:5f:ea:31:19:69:54:99:b0:4d:67:92:6b:f4:7a:53:cb: 15:bb:b3:7c:49:d6:85:28:41:57:4f:6a:af:2d:9e:dc:3a:cc: 93:61:83:88:3c:6d:d9:c1:01:81:c1:3c:41:43:7d:da:84:0c: 7b:1b:5b:53:e9:f2:97:a3:60:85:32:e1:51:33:81:84:d1:cd: 43:77:19:08:16:62:99:4f:91:e4:f7:be:98:db:71:2f:d3:4d: a5:23:19:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjUwNTEyMTUwMTAyWhcNMjUwNTE5MTUwMTAyWjAYMRYwFAYD VQQDEw02ODIyMGQyZS0zZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7S/FnXSvcptjNYIcbcoVRm5bbFbe81mcjNmlwoaVJh0S/UOi51weVf502Xv Q62JtmX3rAeR5j3OcT2rOlsT+usJHH902deddlOxUz2eSrrbsQWKvs55Hbe3tq3m q9hNAFVAGp4EKqXxbxxHWRd59lSgeTuT5YQOVmd30fPtfz/aLvo0E12elyJNqmWR FK9Kv/hLVXH/AL3Drb1tA6hCd3kwPbnDn5nNwe0KHtpFFTGx5OqVSJe/vyN22HVS OeUXDYMPeOeXs7W32TB1w75YQS76z1t50PWRq2apUPW2bnSo6aKV+A+0DLrU5ZmZ RjruEH0n0GES1GSbkqhkHu8X+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRsJPr3 UlYetitYIrBc/TQqfh55MB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Ko6yYW4YTRuxssvCJdS1AlGmTJKVl8IV3Srn/91uJAMTCmahaKHU dcO2973KGSzNMvNIlqKXm567oG1XLVCrSkOk4hSSZ5zbCcm0SvVb4lCWIliMdY+m MPsGLOYT5Fsnp8/3c2qUnS0b4V31vwrQKNvkHmOdlrbn/4CvRf9AxjPZdZ4CBsUZ BNTwb7c+G/Ij2iSaOKAdDDjuFAEhg38j8AnyTl/qMRlpVJmwTWeSa/R6U8sVu7N8 SdaFKEFXT2qvLZ7cOsyTYYOIPG3ZwQGBwTxBQ33ahAx7G1tT6fKXo2CFMuFRM4GE 0c1DdxkIFmKZT5Hk976Y23Ev002lIxkt -----END CERTIFICATE-----Generated at Tue May 13 15:20:06 2025 by rpki-client