$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: 0zkHU9hpVsJeVSrAHg+qCr5OD9KVjk3Fg/VQUwEIVs0= Subject key identifier: C7:F0:E8:05:BC:DE:1A:E1:FB:16:E1:75:74:28:1F:C8:82:E1:53:BB Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0F98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0F92 Signing time: Fri 16 May 2025 17:47:02 +0000 Manifest this update: Fri 16 May 2025 17:47:02 +0000 Manifest next update: Fri 23 May 2025 17:47:02 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: ZeT9m1DxmnFkSClq5Ddjw7lb7dAo2N5z/jvqJYNU1Yg=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: X/citOv1Ggn8GInkQClxSFdoCzSDhLVJCA7AtRBk39U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: May 16 17:47:02 2025 GMT Not After : May 23 17:47:02 2025 GMT Subject: CN=68277a16-f48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:00:94:19:17:8a:64:0c:d1:6d:e0:57:17: 62:04:ab:43:a0:a9:ea:0d:71:76:d0:ed:0e:20:81: f6:2e:dc:44:c3:77:cb:88:79:fd:80:8a:d8:8b:3e: db:12:5e:d7:65:d7:20:a8:0c:31:95:d1:67:a0:30: 17:c5:86:bc:c0:cd:5f:96:c6:88:cd:be:57:2b:84: 8a:b1:2d:4b:e8:74:11:03:5f:54:74:19:5f:23:35: 44:57:14:ad:01:9d:b4:1e:78:af:07:f0:f9:0b:49: 0c:eb:4a:86:db:4b:94:80:3b:2e:16:65:98:f9:e6: df:5d:a8:ff:cc:31:01:70:a8:ba:78:f3:2a:0f:4b: 57:3d:31:73:5a:7c:c7:a0:74:64:aa:b9:cc:c9:a4: 07:ed:7a:56:8d:4c:ab:d2:2f:56:c5:28:32:46:15: f6:e7:df:82:94:e1:ae:51:6e:95:27:e6:ff:17:ea: 4c:c7:d8:a9:ef:3d:46:6d:60:79:8f:9a:60:ae:5a: e6:13:bf:ee:18:08:a2:60:27:2f:93:f0:e6:52:92: 26:e5:f7:3b:30:45:2e:a9:34:70:23:74:86:2a:6c: ca:78:af:a3:a1:89:41:eb:b0:57:38:74:2f:ce:89: d9:6c:92:ca:f0:36:33:24:68:35:47:f0:7c:ee:fc: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:E8:05:BC:DE:1A:E1:FB:16:E1:75:74:28:1F:C8:82:E1:53:BB X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:57:a0:c0:9a:d1:25:ab:ba:a4:2a:eb:46:42:d8:c7:09: 03:f6:de:28:14:74:43:50:c4:5c:3f:3d:52:b2:f9:a5:3d:75: 72:6d:3f:e9:df:57:a9:f8:bd:9c:94:5a:88:5c:27:f9:ff:8b: 24:94:bd:93:18:0b:02:bf:ff:17:f2:44:d7:b9:d6:17:c0:06: 6a:aa:f7:05:07:0a:53:bc:ca:9f:94:70:00:e2:4e:07:77:95: 2c:2e:72:fa:6a:75:d6:c1:ea:95:7f:fa:d7:2c:aa:24:b3:57: de:06:c9:98:20:5c:e0:c5:d8:b1:ef:f6:db:f1:55:86:9d:1f: c5:62:ee:fe:52:a2:16:ea:86:0f:0d:30:fb:db:4b:f5:07:57: ef:93:cc:1e:b6:a1:d7:a7:8d:27:6d:70:75:52:76:72:91:40: 5e:39:71:af:8c:4a:31:52:f2:62:c8:3e:6d:f4:0f:99:66:a5: c4:d1:5b:d6:70:72:e3:c1:3e:64:42:f5:fe:f5:3e:3c:e6:eb: b0:3f:6f:9c:9b:66:0b:c0:3c:8e:a7:6d:e6:d3:56:b1:a4:03: 20:38:fe:5e:61:3f:93:ee:a3:94:26:f0:1d:d1:77:5b:af:18: e0:92:b3:29:94:56:bc:33:a7:7b:c6:97:90:4d:38:37:8c:87: 26:b3:4f:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNTE2MTc0NzAyWhcNMjUwNTIzMTc0NzAyWjAYMRYwFAYD VQQDEw02ODI3N2ExNi1mNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkIAlBkXimQM0W3gVxdiBKtDoKnqDXF20O0OIIH2LtxEw3fLiHn9gIrYiz7b El7XZdcgqAwxldFnoDAXxYa8wM1flsaIzb5XK4SKsS1L6HQRA19UdBlfIzVEVxSt AZ20HnivB/D5C0kM60qG20uUgDsuFmWY+ebfXaj/zDEBcKi6ePMqD0tXPTFzWnzH oHRkqrnMyaQH7XpWjUyr0i9WxSgyRhX259+ClOGuUW6VJ+b/F+pMx9ip7z1GbWB5 j5pgrlrmE7/uGAiiYCcvk/DmUpIm5fc7MEUuqTRwI3SGKmzKeK+joYlB67BXOHQv zonZbJLK8DYzJGg1R/B87vz1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfw6AW8 3hrh+xbhdXQoH8iC4VO7MB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1olegwJrRJau6pCrrRkLYxwkD9t4oFHRDUMRcPz1SsvmlPXVybT/p 31ep+L2clFqIXCf5/4sklL2TGAsCv/8X8kTXudYXwAZqqvcFBwpTvMqflHAA4k4H d5UsLnL6anXWweqVf/rXLKoks1feBsmYIFzgxdix7/bb8VWGnR/FYu7+UqIW6oYP DTD720v1B1fvk8wetqHXp40nbXB1UnZykUBeOXGvjEoxUvJiyD5t9A+ZZqXE0VvW cHLjwT5kQvX+9T485uuwP2+cm2YLwDyOp23m01axpAMgOP5eYT+T7qOUJvAd0Xdb rxjgkrMplFa8M6d7xpeQTTg3jIcms08i -----END CERTIFICATE-----Generated at Sat May 17 11:29:31 2025 by rpki-client