$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: JoRY8QEUteveX+VfAhV6kV6+aKsS/TD6sIV6n1XsEjY= Subject key identifier: 50:53:8C:21:06:D3:46:94:3E:F3:DB:2D:42:45:CE:9D:54:4A:82:E4 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 0674 Signing time: Sat 10 May 2025 21:55:00 +0000 Manifest this update: Sat 10 May 2025 21:54:59 +0000 Manifest next update: Sat 17 May 2025 21:54:59 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: pbRcOlT32iQFUYk9OSDnHJpxaUAhU3U6EsC0NGS0Qhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: May 10 21:54:59 2025 GMT Not After : May 17 21:54:59 2025 GMT Subject: CN=681fcb33-8ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:c4:b6:93:d7:e4:4f:d5:f6:82:7a:ad:d2: ac:04:6e:26:6e:37:ea:58:1c:15:18:d3:6f:47:d5: 19:b6:d9:c9:da:9e:36:bc:21:84:32:ef:c3:ef:c3: d7:3b:5f:59:0f:a9:bd:db:a6:b9:b4:59:28:ce:a1: c4:e5:2f:37:40:4b:ae:87:cc:1f:d8:ae:f3:82:9a: f0:5b:ad:6a:92:22:eb:4a:17:97:31:c1:fa:af:58: 21:a1:7f:c8:8c:b8:55:61:8f:3a:4f:96:96:63:1f: 68:23:d8:85:2d:75:aa:33:ba:38:4a:b7:0c:e5:18: 1c:f0:02:0d:21:42:f6:30:be:d9:c7:a1:b8:6e:a6: 6c:6d:7c:75:c9:f3:7c:68:ab:1c:ce:14:68:93:bf: 11:4f:27:dd:7a:65:36:be:43:9b:f6:d1:2a:69:98: 48:49:96:88:df:46:67:28:41:95:22:1f:4a:7a:68: 3a:88:6f:69:85:fd:40:5f:6f:21:a8:44:5f:4a:1f: d5:b7:df:82:a3:64:0d:c5:6b:1d:44:d5:18:22:ba: bb:14:d0:89:9a:92:32:b7:99:41:38:2a:80:0c:e9: 3e:44:78:30:5e:e3:c0:4c:13:d1:8d:67:f0:80:d1: 71:0c:7e:62:9e:b3:64:c9:67:ce:2b:ef:a5:d6:f5: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:8C:21:06:D3:46:94:3E:F3:DB:2D:42:45:CE:9D:54:4A:82:E4 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:40:f1:aa:bc:9e:2c:25:16:aa:f5:77:9c:d3:55:77:70: e7:f8:7d:3c:38:b7:7c:4e:15:85:ca:2f:7c:fa:ad:e1:25:31: 7b:ec:45:c6:be:e1:ff:dc:a6:8b:9b:b6:48:a8:b9:b7:86:76: f0:fa:74:87:13:17:56:05:16:a8:a6:ef:dd:29:b3:e6:62:31: b6:07:80:32:3a:3b:a9:ce:f7:cf:52:5e:d5:10:4b:c6:b3:7e: 70:ab:1b:44:c6:06:55:e0:b0:37:21:f2:d8:79:5e:ef:08:48: a4:ce:44:d5:3d:38:a1:e6:24:72:ec:0d:34:a6:06:c8:c0:6b: be:59:c0:a4:a2:a5:e6:f0:c0:62:f4:55:d9:89:ac:82:e4:e2: 3d:27:4a:35:ef:eb:e5:be:62:69:c2:d8:3b:46:52:ee:ed:e1: 96:89:9d:6d:71:fe:a5:e9:ac:49:d0:aa:f3:d7:44:5b:f1:e7: 6a:a0:f0:cf:98:d8:ed:e7:e1:99:3b:23:78:ad:1f:d2:ef:51: 54:f1:5f:a0:fb:fa:30:3b:87:a3:d1:c4:15:29:fa:5b:fd:4e: 32:4b:ee:c5:09:00:4d:74:41:4d:72:b0:b3:df:85:a9:4e:74: 99:14:d4:2a:07:c1:95:11:74:3c:d3:12:3c:3e:71:19:39:2d: cb:9b:cb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwNTEwMjE1NDU5WhcNMjUwNTE3MjE1NDU5WjAYMRYwFAYD VQQDEw02ODFmY2IzMy04ZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7XEtpPX5E/V9oJ6rdKsBG4mbjfqWBwVGNNvR9UZttnJ2p42vCGEMu/D78PX O19ZD6m926a5tFkozqHE5S83QEuuh8wf2K7zgprwW61qkiLrSheXMcH6r1ghoX/I jLhVYY86T5aWYx9oI9iFLXWqM7o4SrcM5Rgc8AINIUL2ML7Zx6G4bqZsbXx1yfN8 aKsczhRok78RTyfdemU2vkOb9tEqaZhISZaI30ZnKEGVIh9Kemg6iG9phf1AX28h qERfSh/Vt9+Co2QNxWsdRNUYIrq7FNCJmpIyt5lBOCqADOk+RHgwXuPATBPRjWfw gNFxDH5inrNkyWfOK++l1vWf3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBTjCEG 00aUPvPbLUJFzp1USoLkMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAwEDxqryeLCUWqvV3nNNVd3Dn+H08OLd8ThWFyi98+q3hJTF77EXG vuH/3KaLm7ZIqLm3hnbw+nSHExdWBRaopu/dKbPmYjG2B4AyOjupzvfPUl7VEEvG s35wqxtExgZV4LA3IfLYeV7vCEikzkTVPTih5iRy7A00pgbIwGu+WcCkoqXm8MBi 9FXZiayC5OI9J0o17+vlvmJpwtg7RlLu7eGWiZ1tcf6l6axJ0Krz10Rb8edqoPDP mNjt5+GZOyN4rR/S71FU8V+g+/owO4ej0cQVKfpb/U4yS+7FCQBNdEFNcrCz34Wp TnSZFNQqB8GVEXQ80xI8PnEZOS3Lm8tf -----END CERTIFICATE-----Generated at Sun May 11 16:13:22 2025 by rpki-client