$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: qhggBeNRy0/z/fJEaQKFUjmcRBUPym4O4nVJvTw9b+g= Subject key identifier: AC:E0:AA:91:3D:8D:A6:A5:96:9C:30:45:E2:4F:7C:92:F0:3C:AB:14 Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 0619 Signing time: Mon 12 May 2025 22:34:36 +0000 Manifest this update: Mon 12 May 2025 22:34:36 +0000 Manifest next update: Mon 19 May 2025 22:34:36 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: ue2FbF6xMMNwf8svlClXFlr/CUI3IbHfB8jaq9j0L0g=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: May 12 22:34:36 2025 GMT Not After : May 19 22:34:36 2025 GMT Subject: CN=6822777c-785f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:c1:67:6b:19:6a:f0:12:98:77:ba:88:e5: 81:03:54:9b:4b:fb:21:3c:d9:31:78:b4:eb:47:35: 3f:8c:cc:88:d8:00:55:84:44:a3:d3:f4:46:12:66: e2:11:5d:38:75:8b:12:de:cf:04:6e:2b:95:1d:8d: b7:a3:21:fb:ca:f1:ae:1e:ca:31:c3:d2:e7:91:d9: c0:f7:f8:3b:cf:8c:29:54:76:fa:76:67:61:df:77: cc:2f:5b:78:91:ba:9f:06:7f:46:f0:aa:f5:09:fc: 47:31:39:d4:48:85:97:54:f2:e2:6f:8d:c6:ae:4f: bb:8d:3c:e0:0e:cd:43:4a:60:7c:fc:96:74:e6:75: 7f:22:16:08:9b:2d:0c:d0:0c:c6:54:ea:2e:d9:89: 44:01:d1:0c:d1:9a:cc:e2:f4:34:29:c6:dc:cd:21: e7:87:e9:ee:5b:d8:e0:74:e3:1e:25:6e:cb:2c:ff: 04:b0:ae:b8:6e:0e:b2:c5:08:4f:bf:a4:94:c0:e8: d9:be:37:4b:7d:8f:90:42:69:6a:a1:fd:ee:35:77: b5:6a:0e:5b:e9:f3:d2:5f:4c:54:76:d0:50:62:dd: 55:be:c9:0c:97:0f:dd:9f:05:0c:d0:07:75:12:ab: e9:88:33:4f:90:4d:18:e1:db:58:c2:48:9f:da:97: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:AA:91:3D:8D:A6:A5:96:9C:30:45:E2:4F:7C:92:F0:3C:AB:14 X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:b7:d1:18:a9:25:2e:34:51:32:56:31:fd:5d:25:b1:0f: 72:33:3d:a6:2c:77:d3:79:fc:7a:2f:fe:ac:5a:92:dc:f8:a7: 6c:1d:7f:1a:8c:08:af:85:82:8e:88:15:2d:a5:6a:4a:9b:b8: 7c:f3:d7:e9:05:06:af:cc:fd:75:c3:a4:4d:29:a8:bb:1b:14: 0b:0e:32:c5:b2:da:56:df:af:83:6b:c3:33:0d:c3:cf:03:18: 32:c3:83:11:b8:33:f5:5a:71:d0:18:9d:46:d0:ec:84:aa:79: 99:28:5a:09:70:01:55:48:d1:4d:4d:79:28:78:c2:5f:17:0d: 5d:ee:45:67:67:c3:0d:1d:da:58:9e:e9:e6:01:9c:04:a7:51: e9:8c:35:b2:68:98:6c:2b:24:72:b7:e8:32:3f:00:29:d8:ee: 4d:c6:3b:29:af:29:1e:8e:69:eb:de:be:61:42:f5:54:f9:2a: 26:ce:f3:e2:fe:57:32:0c:80:b6:e1:2b:5e:c8:15:60:82:ef: 9c:02:1b:5f:fb:51:26:2b:0f:a8:2a:41:0a:b9:ff:f2:77:08: 51:bc:d3:cb:be:b5:28:2e:d7:0f:b0:60:ad:6f:75:a0:51:0d: e8:ad:de:5c:fb:67:73:75:8f:65:64:08:04:6d:92:f9:a8:d2: 61:81:7f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUwNTEyMjIzNDM2WhcNMjUwNTE5MjIzNDM2WjAYMRYwFAYD VQQDEw02ODIyNzc3Yy03ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AzBZ2sZavASmHe6iOWBA1SbS/shPNkxeLTrRzU/jMyI2ABVhESj0/RGEmbi EV04dYsS3s8EbiuVHY23oyH7yvGuHsoxw9LnkdnA9/g7z4wpVHb6dmdh33fML1t4 kbqfBn9G8Kr1CfxHMTnUSIWXVPLib43Grk+7jTzgDs1DSmB8/JZ05nV/IhYImy0M 0AzGVOou2YlEAdEM0ZrM4vQ0KcbczSHnh+nuW9jgdOMeJW7LLP8EsK64bg6yxQhP v6SUwOjZvjdLfY+QQmlqof3uNXe1ag5b6fPSX0xUdtBQYt1VvskMlw/dnwUM0Ad1 EqvpiDNPkE0Y4dtYwkif2pfeSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzgqpE9 jaallpwwReJPfJLwPKsUMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArDrfRGKklLjRRMlYx/V0lsQ9yMz2mLHfTefx6L/6sWpLc+KdsHX8a jAivhYKOiBUtpWpKm7h889fpBQavzP11w6RNKai7GxQLDjLFstpW36+Da8MzDcPP Axgyw4MRuDP1WnHQGJ1G0OyEqnmZKFoJcAFVSNFNTXkoeMJfFw1d7kVnZ8MNHdpY nunmAZwEp1HpjDWyaJhsKyRyt+gyPwAp2O5Nxjsprykejmnr3r5hQvVU+SomzvPi /lcyDIC24SteyBVggu+cAhtf+1EmKw+oKkEKuf/ydwhRvNPLvrUoLtcPsGCtb3Wg UQ3ord5c+2dzdY9lZAgEbZL5qNJhgX95 -----END CERTIFICATE-----Generated at Wed May 14 14:50:34 2025 by rpki-client