$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: e9wroPLP1goWHaTcdmBlbJXftJ+V2WHMGLw3LSTDYk0= Subject key identifier: 97:C6:61:95:FA:02:51:B1:BB:20:D9:1D:1F:5F:AA:DE:77:53:BB:C0 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 0660 Signing time: Wed 14 May 2025 22:30:02 +0000 Manifest this update: Wed 14 May 2025 22:30:02 +0000 Manifest next update: Wed 21 May 2025 22:30:02 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: SoERe9elLIb7Scb5chds75XxC0cHvmvHdZMsoDP/x4o=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: macE2NFUWcDcrdQSGzCQPdT+j1HMD3PGg+S93KaJKT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: May 14 22:30:02 2025 GMT Not After : May 21 22:30:02 2025 GMT Subject: CN=6825196a-c106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:b7:a2:33:7f:8e:c2:4c:e4:1e:9d:ff:b9: 14:6f:ea:93:a8:25:a8:fa:81:74:30:fe:a3:e0:d2: e7:f8:96:68:d5:9e:21:66:4d:3c:f6:4d:f7:9c:19: ab:e5:de:a9:bb:a5:11:20:d7:ce:4b:b3:78:86:75: c2:49:e4:8b:4f:98:ab:af:4e:bd:3e:4a:a5:99:93: 75:88:ef:4e:36:c8:8a:7c:d8:51:b0:05:08:92:9f: f0:a1:a4:21:fa:d7:bc:ed:53:09:39:29:04:a3:11: 81:c3:05:cd:f8:81:96:01:40:45:a6:04:6a:17:da: 9a:99:ed:f4:4d:9c:2f:cf:a3:2d:34:ea:d3:a9:7d: 64:8f:1f:81:46:70:90:af:5d:14:fd:c4:1c:75:0b: 21:7a:67:dd:bd:b3:90:08:f1:8c:1c:0f:f3:de:bf: 34:fd:55:98:0f:42:93:94:9a:6e:d1:a5:86:94:99: 36:09:b3:bf:b6:b1:4f:64:5a:d8:c8:61:71:6d:1b: 99:46:ee:12:62:57:52:0d:00:d9:9b:f8:ff:93:4f: 5f:60:87:b6:23:ad:f5:71:42:ba:87:23:38:b6:d6: 22:ff:d4:49:e6:7c:84:8e:52:c6:9e:82:4d:37:a5: ed:19:f2:64:e6:c2:20:61:73:52:98:f6:e9:a7:3d: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:61:95:FA:02:51:B1:BB:20:D9:1D:1F:5F:AA:DE:77:53:BB:C0 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fc:fe:1c:1e:3e:e2:41:da:ef:0a:51:cc:85:4f:82:43:05: ec:bd:86:0f:0c:19:30:3b:02:63:82:1a:fd:1e:ab:61:c0:52: 2e:e6:f6:2f:f9:d2:68:f6:f0:e5:46:0c:a9:d1:c7:98:ce:3a: 27:7a:1e:65:9c:89:4b:a8:2b:39:15:27:6c:ab:5d:cc:cf:fc: 68:02:bf:30:9d:ba:dd:1f:3c:88:66:54:0b:de:ae:9f:8b:d4: 2d:82:c1:8e:d6:fe:1d:45:f3:ae:3d:d1:8d:3b:6e:41:62:51: b4:54:27:dd:a8:36:a4:62:eb:ef:42:d0:9c:1a:81:35:da:cc: 6f:ad:4a:13:50:3a:a5:d5:19:c2:43:67:21:a9:9a:09:85:c6: f5:4b:87:85:2e:5a:c5:de:c1:a8:f6:67:39:5d:94:ae:40:0d: 78:de:cc:36:1c:e8:7b:0c:5c:ed:ae:b6:ab:a1:b1:8c:9c:54: 75:32:f9:7d:e7:13:36:72:2e:77:e2:ef:18:ce:31:04:c5:e9: 1d:ca:f1:2b:71:0a:04:84:f9:cb:ca:d0:8a:c2:84:1d:03:65: 37:15:ef:87:98:cb:1c:c4:69:68:99:62:3a:a8:8e:39:5e:93: 42:c8:c3:0d:8e:fe:74:b7:09:b3:56:07:82:9e:37:c8:c7:98: 91:53:83:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwNTE0MjIzMDAyWhcNMjUwNTIxMjIzMDAyWjAYMRYwFAYD VQQDEw02ODI1MTk2YS1jMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqie3ojN/jsJM5B6d/7kUb+qTqCWo+oF0MP6j4NLn+JZo1Z4hZk089k33nBmr 5d6pu6URINfOS7N4hnXCSeSLT5irr069PkqlmZN1iO9ONsiKfNhRsAUIkp/woaQh +te87VMJOSkEoxGBwwXN+IGWAUBFpgRqF9qame30TZwvz6MtNOrTqX1kjx+BRnCQ r10U/cQcdQshemfdvbOQCPGMHA/z3r80/VWYD0KTlJpu0aWGlJk2CbO/trFPZFrY yGFxbRuZRu4SYldSDQDZm/j/k09fYIe2I631cUK6hyM4ttYi/9RJ5nyEjlLGnoJN N6XtGfJk5sIgYXNSmPbppz39LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfGYZX6 AlGxuyDZHR9fqt53U7vAMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/P4cHj7iQdrvClHMhU+CQwXsvYYPDBkwOwJjghr9HqthwFIu5vYv +dJo9vDlRgyp0ceYzjoneh5lnIlLqCs5FSdsq13Mz/xoAr8wnbrdHzyIZlQL3q6f i9QtgsGO1v4dRfOuPdGNO25BYlG0VCfdqDakYuvvQtCcGoE12sxvrUoTUDql1RnC Q2chqZoJhcb1S4eFLlrF3sGo9mc5XZSuQA143sw2HOh7DFztrrarobGMnFR1Mvl9 5xM2ci534u8YzjEExekdyvErcQoEhPnLytCKwoQdA2U3Fe+HmMscxGlomWI6qI45 XpNCyMMNjv50twmzVgeCnjfIx5iRU4Ng -----END CERTIFICATE-----Generated at Fri May 16 08:19:24 2025 by rpki-client