$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: qeCaAjQNaf4/E3qcsVboaGQobL5Tjeq8H7bUDG8YMxQ= Subject key identifier: 8A:75:27:AB:0A:92:9F:F9:FA:72:EF:4C:7D:BC:97:FD:19:85:13:35 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 2F Signing time: Sun 11 May 2025 06:24:56 +0000 Manifest this update: Sun 11 May 2025 06:24:55 +0000 Manifest next update: Sun 18 May 2025 06:24:55 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: yoCm0Qr4qMYCoYgo65ruVbENthmzp3rt22tu682GSmI=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: wZLv0x5Ye2YsFJ9ksDDY7rn+/yu0V//tFuTwHUih6i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: May 11 06:24:55 2025 GMT Not After : May 18 06:24:55 2025 GMT Subject: CN=682042b7-a93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:f5:6e:3e:2a:af:bd:e7:bd:53:f9:e7:f0: 56:4f:68:f5:55:25:2b:af:44:ba:93:ad:ff:fa:72: ba:59:ef:73:08:49:fc:28:87:53:5b:9d:7b:10:2b: e1:d3:9d:bf:7f:28:0a:82:18:7b:71:e4:80:1d:7d: 8e:02:45:72:02:24:54:be:26:cf:2f:0f:19:b3:ff: cb:66:2d:cd:be:02:43:32:91:be:4e:c1:1e:55:23: 86:8a:3e:df:d6:6f:e4:8d:b9:e2:96:f6:57:13:fe: a5:99:47:a0:c6:f9:e6:ec:a0:be:b2:a3:57:25:60: 93:95:52:6f:68:20:8a:98:a9:e8:a9:6d:5c:96:4d: 59:0e:63:73:46:da:7d:b6:a0:e1:24:40:b8:39:fc: 9a:01:a4:6b:c5:2c:30:33:14:db:52:d0:28:ed:97: f2:1c:60:d8:a9:d9:46:ce:72:fb:5f:01:16:c2:e6: 0f:e0:76:a9:da:c4:f8:79:28:90:49:0f:fd:5d:7a: 61:1c:9e:2b:91:69:5a:ec:39:7a:73:07:1c:ab:96: 81:66:4c:08:bd:d1:47:60:07:2f:86:73:22:d4:46: 81:3c:fc:2e:1f:4b:20:cd:53:4d:b6:b1:7b:90:09: d8:fc:de:99:5b:e0:78:da:ee:c9:84:ea:01:60:dc: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:75:27:AB:0A:92:9F:F9:FA:72:EF:4C:7D:BC:97:FD:19:85:13:35 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:51:14:8c:bd:fc:f0:b5:19:10:32:fe:e2:ea:45:af:f3: c2:4c:6b:03:eb:8b:ea:7b:9f:40:38:4a:2e:3e:f0:ca:da:a0: 20:d6:bf:c0:66:f1:f6:2e:73:83:84:a6:ba:50:b9:c6:11:cf: f4:71:62:39:ea:54:13:e3:34:38:3e:b8:b0:4d:6b:84:65:e7: c6:5a:61:61:0b:09:10:35:36:cb:97:5e:7f:19:26:5e:2f:ff: 7d:bf:74:b8:98:1f:26:01:7c:c8:4b:55:fb:b8:d2:b5:11:d0: 54:a3:f0:30:74:d0:19:0c:82:25:fc:72:48:50:e5:0e:66:c1: 60:8f:18:6e:b4:d5:46:cd:4c:41:a2:19:08:8f:79:e7:94:fe: 2f:0c:82:8d:70:19:db:29:94:16:7d:7b:89:52:3d:c1:be:47: 4f:b0:3b:56:50:fc:34:fe:13:ce:45:8c:95:bc:7d:fe:be:52: 3c:a4:a2:01:a9:76:84:c2:71:17:52:21:7a:a5:d4:ac:4e:be: 4a:59:18:c7:de:9b:90:f6:be:37:0b:57:90:ff:2a:4c:ae:c1: 98:b0:98:02:b9:0f:a1:ce:3f:1a:db:f6:6f:84:84:8c:12:d1: 34:a7:13:14:bb:2b:77:d8:24:95:b1:21:f1:b9:da:29:1f:4f: 38:05:37:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA1MTEwNjI0NTVaFw0yNTA1MTgwNjI0NTVaMBgxFjAUBgNV BAMTDTY4MjA0MmI3LWE5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDce/VuPiqvvee9U/nn8FZPaPVVJSuvRLqTrf/6crpZ73MISfwoh1NbnXsQK+HT nb9/KAqCGHtx5IAdfY4CRXICJFS+Js8vDxmz/8tmLc2+AkMykb5OwR5VI4aKPt/W b+SNueKW9lcT/qWZR6DG+ebsoL6yo1clYJOVUm9oIIqYqeipbVyWTVkOY3NG2n22 oOEkQLg5/JoBpGvFLDAzFNtS0Cjtl/IcYNip2UbOcvtfARbC5g/gdqnaxPh5KJBJ D/1demEcniuRaVrsOXpzBxyrloFmTAi90UdgBy+GcyLURoE8/C4fSyDNU022sXuQ Cdj83plb4Hja7smE6gFg3KZPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUinUnqwqS n/n6cu9MfbyX/RmFEzUwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEWPURSMvfzwtRkQMv7i6kWv88JMawPri+p7n0A4Si4+8MraoCDWv8Bm 8fYuc4OEprpQucYRz/RxYjnqVBPjNDg+uLBNa4Rl58ZaYWELCRA1NsuXXn8ZJl4v /32/dLiYHyYBfMhLVfu40rUR0FSj8DB00BkMgiX8ckhQ5Q5mwWCPGG601UbNTEGi GQiPeeeU/i8Mgo1wGdsplBZ9e4lSPcG+R0+wO1ZQ/DT+E85FjJW8ff6+UjykogGp doTCcRdSIXql1KxOvkpZGMfem5D2vjcLV5D/KkyuwZiwmAK5D6HOPxrb9m+EhIwS 0TSnExS7K3fYJJWxIfG52ikfTzgFN3w= -----END CERTIFICATE-----Generated at Mon May 12 16:13:29 2025 by rpki-client