$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: q3x6uyNOU1JVDt0CHYxcXlrG3iTy8dgA3YtnQYZMKV0= Subject key identifier: DC:8F:9C:12:5C:A5:4B:50:3E:37:07:12:CA:E2:E6:77:BD:C4:A2:75 Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: 015A Signing time: Fri 09 May 2025 03:10:39 +0000 Manifest this update: Fri 09 May 2025 03:10:39 +0000 Manifest next update: Fri 16 May 2025 03:10:39 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: gBBKrHgJv4fdAOvcWhwGC0SY+m02wc1okcKfeC1Ajjg=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: ZCVYghnlBBULLQqokv1P6cracGy0h9WOzePiXeVHY4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: May 9 03:10:39 2025 GMT Not After : May 16 03:10:39 2025 GMT Subject: CN=681d722f-db65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:d0:92:fc:bf:39:ce:f1:12:79:22:db:05: af:59:e1:99:bb:71:95:b7:09:b4:d4:24:5f:df:0c: 55:c8:47:88:d1:d0:b3:95:4e:ea:e1:1e:9d:17:90: 7a:32:1c:f9:c5:b8:24:fd:35:72:d0:b6:7d:4b:88: c2:4a:f5:c3:0b:03:60:01:7c:46:bd:8f:41:5c:4f: b6:ab:11:ea:d7:7c:16:b3:15:72:2a:ff:96:be:5f: dd:1f:54:fc:a3:6d:21:ec:a4:7f:95:24:c5:70:d6: 56:38:3d:10:23:5e:b1:fc:f4:d6:21:22:75:66:0f: 0a:88:73:15:27:48:9c:d3:ff:53:5e:45:e0:0b:c7: e0:e4:94:32:a0:93:d3:d9:74:ea:90:fb:d7:39:cb: 41:da:50:d9:bc:49:f2:c7:80:e7:e9:d4:3f:a7:70: 6e:95:50:2d:71:f3:4c:07:08:8d:cd:35:29:ae:7c: 3a:3b:6a:cb:c0:0c:f9:8a:ac:1c:7f:ff:a4:e5:1d: a2:de:5e:cb:75:32:51:7f:30:05:9c:a1:f4:30:91: 0d:7a:41:9f:ad:8b:e2:96:f9:f1:d7:bc:af:7c:07: cf:91:cd:96:da:d1:12:26:bc:6a:b3:77:7c:6c:38: 55:b7:1a:c9:2c:9e:f8:03:06:32:31:38:b7:86:59: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:9C:12:5C:A5:4B:50:3E:37:07:12:CA:E2:E6:77:BD:C4:A2:75 X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3c:52:84:07:68:0f:ff:2e:60:68:2e:77:e2:2b:76:6e:8d: 1d:cd:2b:86:5d:3f:0c:dc:03:c7:f8:e3:fb:2d:dd:97:6c:f8: 60:c0:0b:dc:92:11:52:fd:77:6b:eb:27:b5:bf:37:6e:46:26: 0f:2b:51:92:a2:74:79:f5:64:f8:24:f0:ba:13:31:59:0e:53: 44:cb:c7:a4:28:02:87:f9:bb:d2:c1:1f:c9:ee:ee:db:fb:4c: a4:c8:2b:fc:bb:07:b3:aa:05:c5:45:4d:28:9d:1b:11:76:27: 03:c7:a7:df:15:2f:4e:0b:eb:0c:96:e4:77:98:ff:e2:17:45: 01:eb:c2:d7:3d:c3:84:56:4e:dd:88:64:aa:54:8d:c7:7e:97: 06:89:9e:30:bf:ad:71:55:59:fb:d7:8c:d5:38:80:33:6e:db: d2:64:2b:d7:35:e8:e0:52:ea:dd:71:61:34:2f:5d:08:3e:0c: e1:44:fc:f2:5b:d8:96:21:c1:e1:dc:db:08:83:eb:92:c0:91: fb:a8:f0:a7:e5:6e:e5:b7:a1:8c:b6:0d:16:b5:1e:d7:08:4c: 6b:aa:49:90:a1:f0:5c:8c:70:c7:7f:99:b5:95:c4:bb:14:94: f0:c0:0c:3e:c6:f8:cc:c4:60:f9:9a:ec:4a:73:c8:18:b0:a2: b9:a9:fe:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjUwNTA5MDMxMDM5WhcNMjUwNTE2MDMxMDM5WjAYMRYwFAYD VQQDEw02ODFkNzIyZi1kYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmXQkvy/Oc7xEnki2wWvWeGZu3GVtwm01CRf3wxVyEeI0dCzlU7q4R6dF5B6 Mhz5xbgk/TVy0LZ9S4jCSvXDCwNgAXxGvY9BXE+2qxHq13wWsxVyKv+Wvl/dH1T8 o20h7KR/lSTFcNZWOD0QI16x/PTWISJ1Zg8KiHMVJ0ic0/9TXkXgC8fg5JQyoJPT 2XTqkPvXOctB2lDZvEnyx4Dn6dQ/p3BulVAtcfNMBwiNzTUprnw6O2rLwAz5iqwc f/+k5R2i3l7LdTJRfzAFnKH0MJENekGfrYvilvnx17yvfAfPkc2W2tESJrxqs3d8 bDhVtxrJLJ74AwYyMTi3hll0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyPnBJc pUtQPjcHEsri5ne9xKJ1MB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgPFKEB2gP/y5gaC534it2bo0dzSuGXT8M3APH+OP7Ld2XbPhgwAvc khFS/Xdr6ye1vzduRiYPK1GSonR59WT4JPC6EzFZDlNEy8ekKAKH+bvSwR/J7u7b +0ykyCv8uwezqgXFRU0onRsRdicDx6ffFS9OC+sMluR3mP/iF0UB68LXPcOEVk7d iGSqVI3HfpcGiZ4wv61xVVn714zVOIAzbtvSZCvXNejgUurdcWE0L10IPgzhRPzy W9iWIcHh3NsIg+uSwJH7qPCn5W7lt6GMtg0WtR7XCExrqkmQofBcjHDHf5m1lcS7 FJTwwAw+xvjMxGD5muxKc8gYsKK5qf79 -----END CERTIFICATE-----Generated at Sun May 11 02:02:43 2025 by rpki-client