$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: FNdZdWEuWx0Sox6P3q/sLdbL1kpENDGqVDXuEtubaRY= Subject key identifier: 0C:6F:72:04:65:B6:93:4F:8C:91:C5:6B:0A:F3:3C:2A:5F:97:35:28 Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: D7 Signing time: Mon 05 May 2025 04:25:36 +0000 Manifest this update: Mon 05 May 2025 04:25:35 +0000 Manifest next update: Mon 12 May 2025 04:25:35 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: CfKPlO0wulSlM+W3mvwNKSHcX4hYfc+14PyrRzX/pF0=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: May 5 04:25:35 2025 GMT Not After : May 12 04:25:35 2025 GMT Subject: CN=68183dbf-4010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:27:c9:7b:0e:d6:ec:fe:fa:63:e3:35:52: 9f:fb:19:11:67:b2:aa:b0:29:1b:4b:97:36:a0:ec: b2:47:fb:7a:97:18:f6:bf:f8:32:a9:28:c8:87:c7: af:6e:13:95:60:ae:c9:02:7b:fd:65:fa:0b:b0:5d: a2:61:91:96:fb:7d:17:17:c5:3d:a1:17:66:73:89: ae:9a:ef:e5:02:eb:fd:e2:31:8d:40:a5:21:ef:ba: dc:80:4f:36:26:73:f4:c6:85:7f:e4:c6:49:fc:9a: 9f:3a:c5:99:96:9b:44:18:b3:36:c2:b8:ef:8d:a5: 66:41:a6:dd:67:c6:70:b1:24:91:3b:4a:0e:5d:aa: 85:35:b3:c8:d5:3b:54:71:d1:60:bd:16:14:a2:8b: 77:ab:b0:be:4b:24:90:3c:19:b0:7d:4e:39:0e:cb: 97:87:3a:a0:ac:55:7f:19:67:4d:8f:40:13:6d:8c: 00:98:0c:fd:58:70:37:49:85:08:24:85:5d:bb:84: 1b:d6:2e:4e:d7:e7:99:f0:3e:9a:6d:2c:fc:18:1e: e9:26:b1:e5:43:9a:dd:3b:95:a3:bf:c3:1f:bc:3d: 4a:37:58:01:de:d7:62:9d:66:f7:27:17:df:b2:6c: 29:2e:18:94:3e:2b:69:79:62:c6:db:00:48:1a:d2: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:72:04:65:B6:93:4F:8C:91:C5:6B:0A:F3:3C:2A:5F:97:35:28 X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e1:4c:fb:d4:7a:93:70:cb:e6:f8:1b:1c:f1:1a:90:9c:19: cc:68:32:99:55:5b:f2:58:de:b6:33:17:88:c2:95:39:fb:31: 4c:02:4c:44:17:f5:e1:83:0d:ac:eb:09:6c:fd:e7:90:7e:4e: c8:4f:75:3f:48:b6:f6:2a:58:3f:60:50:96:94:99:1a:10:d7: c8:95:21:35:9c:32:7a:08:b8:d0:8c:64:fe:39:63:bc:39:2b: ea:01:94:ac:38:36:d5:d0:33:01:0a:27:50:51:2a:87:8a:47: f7:6e:55:83:0f:ae:71:9d:f1:21:74:a0:bd:72:de:50:a5:d3: 11:42:b4:88:0d:cb:45:14:2c:e4:9b:b4:46:63:67:13:1b:93: b6:b2:53:9e:ff:06:13:44:d4:fc:cf:3f:6d:34:3e:02:bd:e9: f0:69:12:96:48:eb:c9:10:e4:1f:84:11:7e:72:83:b0:6f:cc: 31:0e:f0:e6:3c:d9:69:be:84:f1:0c:a9:9b:f0:67:5a:16:63: 8b:26:fe:f0:90:c6:af:69:6e:7a:80:69:34:b6:da:d1:f0:5c: 3d:5b:ae:9d:0a:5c:a6:d1:f9:dc:f2:0c:60:e3:20:25:72:d5: 2e:48:a9:a0:8b:7c:4b:78:51:5b:50:99:a9:f4:98:ff:d6:8e: 46:8b:24:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3OEIxMTAvBgNVBAUTKDMxODU1M0VEMDlDMjAwOTU4Q0IxNURDQ0UyNzdDQzQ4 QUE0MkEzODgwHhcNMjUwNTA1MDQyNTM1WhcNMjUwNTEyMDQyNTM1WjAYMRYwFAYD VQQDEw02ODE4M2RiZi00MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS4nyXsO1uz++mPjNVKf+xkRZ7KqsCkbS5c2oOyyR/t6lxj2v/gyqSjIh8ev bhOVYK7JAnv9ZfoLsF2iYZGW+30XF8U9oRdmc4mumu/lAuv94jGNQKUh77rcgE82 JnP0xoV/5MZJ/JqfOsWZlptEGLM2wrjvjaVmQabdZ8ZwsSSRO0oOXaqFNbPI1TtU cdFgvRYUoot3q7C+SySQPBmwfU45DsuXhzqgrFV/GWdNj0ATbYwAmAz9WHA3SYUI JIVdu4Qb1i5O1+eZ8D6abSz8GB7pJrHlQ5rdO5Wjv8MfvD1KN1gB3tdinWb3Jxff smwpLhiUPitpeWLG2wBIGtIrcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxvcgRl tpNPjJHFawrzPCpflzUoMB8GA1UdIwQYMBaAFDGFU+0JwgCVjLFdzOJ3zEiqQqOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzc4Qi9DMTNBQTc3NkUw NTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FKV01zVjNNNG5mTVNLcENv NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzc4Qi9DMTNBQTc3NkUwNTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FK V01zVjNNNG5mTVNLcENvNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq4Uz71HqTcMvm+Bsc8RqQnBnMaDKZVVvyWN62MxeIwpU5+zFMAkxE F/Xhgw2s6wls/eeQfk7IT3U/SLb2Klg/YFCWlJkaENfIlSE1nDJ6CLjQjGT+OWO8 OSvqAZSsODbV0DMBCidQUSqHikf3blWDD65xnfEhdKC9ct5QpdMRQrSIDctFFCzk m7RGY2cTG5O2slOe/wYTRNT8zz9tND4CvenwaRKWSOvJEOQfhBF+coOwb8wxDvDm PNlpvoTxDKmb8GdaFmOLJv7wkMavaW56gGk0ttrR8Fw9W66dClym0fnc8gxg4yAl ctUuSKmgi3xLeFFbUJmp9Jj/1o5GiyRM -----END CERTIFICATE-----Generated at Mon May 5 15:47:50 2025 by rpki-client