$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: STwapMDKONKZoPsAwt7HSYXFV/t0rs9OT6b6C0IUnK4= Subject key identifier: F7:D1:05:CF:4B:D8:B3:5B:BC:39:DC:ED:48:D2:9C:31:87:E9:70:1F Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: 3A Signing time: Sun 11 May 2025 06:17:43 +0000 Manifest this update: Sun 11 May 2025 06:17:42 +0000 Manifest next update: Sun 18 May 2025 06:17:42 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: PgDiDaW2Ev6gq91WJmkL63hPVkzTcaJtdMMa5BT45bQ=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: 8l/PjgYxr+ZXAJadh6qG9Ww6HDPSsDKK/vON5gDczs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: May 11 06:17:42 2025 GMT Not After : May 18 06:17:42 2025 GMT Subject: CN=68204107-8645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:06:4a:35:15:36:f9:60:fa:4c:47:1d:99: 2d:69:5a:9c:0e:69:15:b8:cf:26:5d:d2:77:43:a2: 9c:76:fd:be:b9:5f:a5:35:d3:32:25:3e:ca:bc:b4: 2b:7e:49:dd:88:35:22:f0:cd:be:64:10:22:bf:95: c1:91:79:1a:c9:11:a7:02:97:e7:20:ba:90:b4:36: d0:a0:85:70:94:4b:2e:12:98:89:f8:61:b9:d5:75: 4d:1b:38:a7:5d:82:86:ef:1f:20:67:4c:92:87:4c: fb:c1:ac:cb:ac:4a:ad:32:22:18:97:a2:a8:15:e2: c8:d2:7b:bb:85:ee:51:3b:e7:b7:a1:97:e9:cf:8a: de:63:1d:84:74:d7:79:5b:14:84:f5:31:5c:d9:d5: d9:51:fc:65:6c:3d:86:31:48:d5:b8:4e:43:93:4d: db:6c:0b:18:b4:f6:28:d6:d6:ab:89:d5:8e:30:3c: 7b:d7:74:14:ab:f4:f1:1c:46:7f:9f:bb:6a:9f:ae: ab:81:28:88:10:5a:70:94:44:c8:7c:64:f4:d2:61: 5f:08:c5:eb:3b:e6:d1:83:2f:54:4c:c6:73:20:ae: 8c:d4:fd:4a:0d:c4:36:76:f1:a9:66:31:86:7b:59: f0:0b:a6:03:2a:a0:d1:7f:2b:95:04:4c:2b:28:a9: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D1:05:CF:4B:D8:B3:5B:BC:39:DC:ED:48:D2:9C:31:87:E9:70:1F X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:cc:93:80:ea:4c:e8:a2:54:0f:60:57:55:8a:d2:de:fd:5d: 87:b3:d0:d5:1d:30:5b:b1:18:04:82:86:e7:3e:e3:ad:c3:33: 95:1f:8f:6f:98:d9:f3:f1:5c:09:cf:bb:77:2f:08:88:cc:4c: 78:8a:c2:98:a1:a0:f3:86:32:ef:ac:d3:d7:fe:41:6f:1a:98: 1c:36:d3:47:c6:18:f7:8d:1c:76:5d:b4:cc:ed:f9:03:85:89: 6f:0a:3d:42:90:d0:89:88:32:50:9b:38:e0:a8:46:64:c7:47: f1:f9:c2:07:f2:bb:00:ad:20:3e:0f:6f:42:da:54:de:ad:96: 63:f8:ab:4e:2f:2b:06:eb:06:f5:c6:25:fc:20:d0:09:05:15: d8:52:5a:e8:14:cb:3a:fd:5f:8d:13:98:4e:76:f0:a9:fa:31: d5:fa:51:6d:d2:c1:a3:c0:16:3d:81:e3:1c:a7:1f:a8:4b:4b: f8:9b:f9:b5:18:f4:3f:3b:dd:64:54:12:5c:c6:0f:6d:3f:1e: f6:5c:a9:54:a4:7d:09:50:1d:86:33:aa:c8:fb:4d:9b:52:29: 9e:73:8a:36:36:25:bf:23:be:c9:fa:74:01:33:fb:d5:ca:60: c1:ed:b4:6e:44:64:4a:29:8e:da:96:96:58:25:d4:24:17:5c: f8:d2:a2:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkQ3QjExMC8GA1UEBRMoNjE0RDFFQzhCNjkzRTdCQjVGMzJDRkE1MjdCNTAyODMy NjlERkUyQjAeFw0yNTA1MTEwNjE3NDJaFw0yNTA1MTgwNjE3NDJaMBgxFjAUBgNV BAMTDTY4MjA0MTA3LTg2NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtvgZKNRU2+WD6TEcdmS1pWpwOaRW4zyZd0ndDopx2/b65X6U10zIlPsq8tCt+ Sd2INSLwzb5kECK/lcGReRrJEacCl+cgupC0NtCghXCUSy4SmIn4YbnVdU0bOKdd gobvHyBnTJKHTPvBrMusSq0yIhiXoqgV4sjSe7uF7lE757ehl+nPit5jHYR013lb FIT1MVzZ1dlR/GVsPYYxSNW4TkOTTdtsCxi09ijW1quJ1Y4wPHvXdBSr9PEcRn+f u2qfrquBKIgQWnCURMh8ZPTSYV8Ixes75tGDL1RMxnMgrozU/UoNxDZ28almMYZ7 WfALpgMqoNF/K5UETCsoqagTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU99EFz0vY s1u8OdztSNKcMYfpcB8wHwYDVR0jBBgwFoAUYU0eyLaT57tfMs+lJ7UCgyad/isw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRDdCL0E3NEY1RURDRDg3 MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9p cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVUwZXlMYVQ1N3RmTXMtbEo3VUNneWFkX2lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RDdCL0E3NEY1RURDRDg3MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0 Zk1zLWxKN1VDZ3lhZF9pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnMk4DqTOiiVA9gV1WK0t79XYez0NUdMFuxGASChuc+463DM5Ufj2+Y 2fPxXAnPu3cvCIjMTHiKwpihoPOGMu+s09f+QW8amBw200fGGPeNHHZdtMzt+QOF iW8KPUKQ0ImIMlCbOOCoRmTHR/H5wgfyuwCtID4Pb0LaVN6tlmP4q04vKwbrBvXG Jfwg0AkFFdhSWugUyzr9X40TmE528Kn6MdX6UW3SwaPAFj2B4xynH6hLS/ib+bUY 9D873WRUElzGD20/HvZcqVSkfQlQHYYzqsj7TZtSKZ5zijY2Jb8jvsn6dAEz+9XK YMHttG5EZEopjtqWllgl1CQXXPjSoi4= -----END CERTIFICATE-----Generated at Tue May 13 05:26:26 2025 by rpki-client