$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: vayb5cIUCDuAVOzwQE4/W/ocEdqVS8TZBm85GxsRCZ0= Subject key identifier: 11:75:83:8F:81:A5:FD:A5:96:D3:59:96:10:9F:06:D7:42:17:36:22 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0DED Signing time: Sat 10 May 2025 17:43:30 +0000 Manifest this update: Sat 10 May 2025 17:43:30 +0000 Manifest next update: Sat 17 May 2025 17:43:30 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 5d9RinsSoUw9oAH6Lwpk35rUU1byxkWAzPOBGD3JHLY=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: May 10 17:43:30 2025 GMT Not After : May 17 17:43:30 2025 GMT Subject: CN=681f9042-f5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:a5:fb:70:55:32:03:ea:de:8d:b0:67:02: eb:3b:9f:6c:29:de:cd:bb:c2:ce:5f:dc:81:9d:ba: 5b:ba:65:7e:10:db:8f:0c:92:a9:b8:df:89:1b:89: 0f:a4:2b:5e:6e:ed:9f:47:15:f2:85:04:c6:77:77: 8e:55:fc:51:6a:62:ca:19:7d:41:98:05:b4:cb:19: 4f:64:aa:2e:9d:de:fa:03:9a:51:6f:19:00:2d:ed: ba:a1:fb:19:62:c3:14:9e:47:32:7b:86:87:b9:d9: 55:74:9d:d5:aa:c9:a2:3d:04:f2:b5:86:cc:3b:c8: 54:6c:3a:72:67:6e:52:2f:b5:a7:65:de:07:68:84: 6a:66:d7:6d:88:d8:1c:fb:7e:35:a6:50:92:28:11: 9d:c4:64:30:73:2a:5d:8e:07:70:65:7c:4d:46:2b: 05:89:e1:14:6f:e6:3f:d3:6a:16:0d:e9:5d:68:30: 75:ad:04:2b:d0:4d:35:f6:e9:ca:40:e2:16:7c:fb: 10:1f:ac:74:60:ff:8e:22:a8:cf:7f:3a:a8:a5:95: 5e:81:b9:07:22:64:d6:d8:4d:fa:b8:63:f9:a8:d0: 4d:a4:96:0a:af:e3:4c:24:26:e0:f8:b8:26:48:69: 90:81:51:88:e2:e3:bf:d9:9d:7d:a8:33:a6:dc:73: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:75:83:8F:81:A5:FD:A5:96:D3:59:96:10:9F:06:D7:42:17:36:22 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2e:dd:8e:db:37:78:f5:a6:42:ee:78:6b:4a:6f:3e:0b:e1: 87:00:53:6e:ae:97:58:a4:eb:6f:d7:ac:dc:7b:de:78:43:0f: 93:f2:07:e1:8d:f8:14:b0:10:f2:6c:91:91:5e:3f:f5:24:25: 5b:88:e4:e7:72:96:9c:d0:f6:31:8d:ed:dc:c7:3b:a4:ed:ed: 82:12:cc:28:bb:3b:36:56:04:bd:76:6d:7a:f5:34:87:aa:73: 28:b6:6a:dd:3c:96:ef:4f:7f:4f:6f:0b:94:80:bc:49:48:c3: d5:7f:46:6a:ff:7d:e7:0c:c6:55:73:66:70:cc:81:41:0c:b3: 7a:e2:a8:9d:53:fd:74:58:f2:a7:41:db:54:4d:ea:d4:d0:e3: ed:4b:0a:86:3b:5c:dd:3e:ee:e9:bf:16:af:d4:6e:31:63:4f: 04:de:15:78:a2:01:c5:57:7f:7d:39:41:df:b7:07:f4:12:21: a4:37:11:df:6f:ac:bd:a9:ec:fd:77:b5:67:b0:75:70:39:d8: df:40:97:5a:84:72:73:bc:6a:e0:aa:79:dd:9a:2d:31:58:a6: 08:21:1d:06:39:4d:bb:fb:e0:c7:07:e8:ea:36:53:9c:51:be: ac:43:49:b4:f5:04:1c:f9:97:8a:5c:c3:36:83:78:cc:3f:5e: 23:3e:4b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwNTEwMTc0MzMwWhcNMjUwNTE3MTc0MzMwWjAYMRYwFAYD VQQDEw02ODFmOTA0Mi1mNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdul+3BVMgPq3o2wZwLrO59sKd7Nu8LOX9yBnbpbumV+ENuPDJKpuN+JG4kP pCtebu2fRxXyhQTGd3eOVfxRamLKGX1BmAW0yxlPZKound76A5pRbxkALe26ofsZ YsMUnkcye4aHudlVdJ3VqsmiPQTytYbMO8hUbDpyZ25SL7WnZd4HaIRqZtdtiNgc +341plCSKBGdxGQwcypdjgdwZXxNRisFieEUb+Y/02oWDeldaDB1rQQr0E019unK QOIWfPsQH6x0YP+OIqjPfzqopZVegbkHImTW2E36uGP5qNBNpJYKr+NMJCbg+Lgm SGmQgVGI4uO/2Z19qDOm3HMLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF1g4+B pf2lltNZlhCfBtdCFzYiMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHLt2O2zd49aZC7nhrSm8+C+GHAFNurpdYpOtv16zce954Qw+T8gfh jfgUsBDybJGRXj/1JCVbiOTncpac0PYxje3cxzuk7e2CEswouzs2VgS9dm169TSH qnMotmrdPJbvT39PbwuUgLxJSMPVf0Zq/33nDMZVc2ZwzIFBDLN64qidU/10WPKn QdtUTerU0OPtSwqGO1zdPu7pvxav1G4xY08E3hV4ogHFV399OUHftwf0EiGkNxHf b6y9qez9d7VnsHVwOdjfQJdahHJzvGrgqnndmi0xWKYIIR0GOU27++DHB+jqNlOc Ub6sQ0m09QQc+ZeKXMM2g3jMP14jPkty -----END CERTIFICATE-----Generated at Sun May 11 09:56:18 2025 by rpki-client