$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: hMdahLVU4Gl5MGvQ5JsmJo/dwPsgNdcucjkzNY4XZ0Y= Subject key identifier: EC:E5:5D:06:EC:6D:88:F3:E6:81:10:7B:EF:0B:84:F8:9A:7C:FE:0F Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 65 Signing time: Tue 13 May 2025 06:14:36 +0000 Manifest this update: Tue 13 May 2025 06:14:35 +0000 Manifest next update: Tue 20 May 2025 06:14:35 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: t3jaH/YcEA0aKXfCNnEKI8ycid5mmtlGRg2698zBYcM=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: May 13 06:14:35 2025 GMT Not After : May 20 06:14:35 2025 GMT Subject: CN=6822e34b-76d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:98:30:9c:48:cb:72:29:55:0c:c0:e9:99: 5e:4a:0d:f4:cc:10:59:3b:b3:e2:ea:8f:35:84:a0: a4:6d:d1:24:8a:84:e2:bf:f0:24:01:5f:89:44:77: 4d:ad:25:ac:18:2f:7f:61:49:13:12:69:d1:3b:61: 88:85:d4:87:f2:31:05:69:00:93:45:d2:6d:71:c7: f6:db:67:54:a2:d9:03:72:b3:38:7e:e9:29:d6:50: 52:42:30:ad:55:df:51:f7:1c:4f:f8:d2:2d:8d:b4: d6:9e:e3:0f:69:73:f0:a5:f5:f4:18:df:cb:4a:c1: 41:f0:07:0d:a5:02:68:87:fd:52:3a:e2:22:4c:eb: 31:3d:b0:03:1b:47:f3:36:77:d9:2a:b6:27:b1:0d: fd:83:ef:13:c8:d4:94:72:6c:90:e7:07:44:34:1f: 1f:74:98:98:5d:c5:44:5a:f6:86:ce:ac:f9:cf:28: 44:13:12:9d:1d:13:a4:ab:89:e6:f0:44:dc:4e:24: 0a:64:9c:d0:2a:2c:8f:78:79:34:53:6b:b6:f5:6e: ba:56:19:6d:fc:ae:2d:d4:db:6b:f1:e5:36:7d:7a: 33:2c:10:85:ac:a7:f1:89:9e:fe:19:b6:a7:25:19: ae:f3:a2:e0:ad:e4:bf:7f:af:dc:4f:a1:8a:3d:30: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:5D:06:EC:6D:88:F3:E6:81:10:7B:EF:0B:84:F8:9A:7C:FE:0F X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ef:3d:e6:8b:b8:87:26:16:89:c9:ac:a5:31:8e:79:26:8d: af:03:39:e5:c1:c7:14:2a:c4:c7:c1:dc:84:3f:f4:36:b0:12: c7:74:58:82:98:8f:80:6e:e7:3b:45:42:68:1f:02:f3:81:d9: 56:5c:be:ff:5c:c9:2b:5e:d2:58:3c:0e:b1:3f:4e:72:59:95: 20:bc:8e:09:8a:ea:1b:22:13:c2:65:29:41:09:9b:60:f0:25: 88:30:a4:78:e1:a6:3b:a3:87:91:37:09:08:73:a2:7b:c3:0d: 2a:c9:69:03:dc:41:fc:3a:63:72:44:50:88:e5:31:00:bb:e1: 47:84:82:9a:bb:51:a3:81:09:7a:77:24:7e:8e:24:c9:f6:5b: 2c:21:b8:eb:9c:04:39:e4:22:69:21:31:1a:2e:3c:fb:42:18: 8f:03:4d:db:90:f3:ff:74:b7:fe:28:10:f3:5c:22:52:3f:ce: 9d:e9:c3:81:64:8a:29:b0:3f:36:53:07:55:65:d7:d9:c5:f2: 9f:b6:c5:5c:43:17:58:51:48:f8:d6:7c:94:43:ce:14:1d:72: b9:4c:65:06:3a:23:d2:88:db:fa:7b:4c:17:5a:92:e3:f6:b7: 48:73:ea:88:4c:0c:87:38:ac:ee:78:65:79:5b:05:07:9b:fc: e3:6e:5e:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNTA1MTMwNjE0MzVaFw0yNTA1MjAwNjE0MzVaMBgxFjAUBgNV BAMTDTY4MjJlMzRiLTc2ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuu5gwnEjLcilVDMDpmV5KDfTMEFk7s+LqjzWEoKRt0SSKhOK/8CQBX4lEd02t JawYL39hSRMSadE7YYiF1IfyMQVpAJNF0m1xx/bbZ1Si2QNyszh+6SnWUFJCMK1V 31H3HE/40i2NtNae4w9pc/Cl9fQY38tKwUHwBw2lAmiH/VI64iJM6zE9sAMbR/M2 d9kqtiexDf2D7xPI1JRybJDnB0Q0Hx90mJhdxURa9obOrPnPKEQTEp0dE6Sriebw RNxOJApknNAqLI94eTRTa7b1brpWGW38ri3U22vx5TZ9ejMsEIWsp/GJnv4Ztqcl Ga7zouCt5L9/r9xPoYo9MD1fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7OVdBuxt iPPmgRB77wuE+Jp8/g8wHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKzvPeaLuIcmFonJrKUxjnkmja8DOeXBxxQqxMfB3IQ/9DawEsd0WIKY j4Bu5ztFQmgfAvOB2VZcvv9cySte0lg8DrE/TnJZlSC8jgmK6hsiE8JlKUEJm2Dw JYgwpHjhpjujh5E3CQhzonvDDSrJaQPcQfw6Y3JEUIjlMQC74UeEgpq7UaOBCXp3 JH6OJMn2WywhuOucBDnkImkhMRouPPtCGI8DTduQ8/90t/4oEPNcIlI/zp3pw4Fk iimwPzZTB1Vl19nF8p+2xVxDF1hRSPjWfJRDzhQdcrlMZQY6I9KI2/p7TBdakuP2 t0hz6ohMDIc4rO54ZXlbBQeb/ONuXuY= -----END CERTIFICATE-----Generated at Wed May 14 11:25:22 2025 by rpki-client