$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json) Hash identifier: pSbGHeACErnXiV3Y9TJjkhHwBqlAwFcNYAgLYBL0QNk= Subject key identifier: 7F:0F:B7:0E:BD:39:E3:BE:41:E9:26:CC:04:44:9E:D0:3E:97:A7:41 Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft Manifest number: 39 Signing time: Sun 11 May 2025 06:18:55 +0000 Manifest this update: Sun 11 May 2025 06:18:54 +0000 Manifest next update: Sun 18 May 2025 06:18:54 +0000 Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: edhCea3KRLqqPeElpqFww6dGEIX0ito4MopZvs8nKSY=) 2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: May 11 06:18:54 2025 GMT Not After : May 18 06:18:54 2025 GMT Subject: CN=6820414f-0a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:1f:fb:b6:b6:e5:ee:66:e6:3f:e8:2c:ce: 5e:06:98:d2:fe:38:10:b4:f9:ff:89:bc:37:2e:d9: 72:0e:25:46:41:02:f3:71:fc:a3:32:e0:98:33:d0: 01:c3:bf:7a:9a:aa:88:63:6f:7b:af:80:0d:69:a0: b0:49:db:64:f3:dd:71:7d:5b:95:c9:0a:e6:91:1a: 7a:56:ea:7e:55:df:1d:6b:c8:1c:05:20:52:dd:3d: 7d:49:db:d5:6c:39:8c:f0:71:2e:db:1b:4d:e0:ee: 49:1e:f3:c4:a9:9b:62:80:49:8c:6c:0e:cb:55:1f: 5d:3a:95:37:33:0b:73:32:c0:22:65:36:9e:52:96: 71:0f:f3:bd:c1:bd:df:cd:42:65:e6:c7:45:3a:1a: ba:b6:8e:a7:2c:5b:10:22:ed:d2:42:66:44:5e:e1: b4:47:e5:c2:2f:2b:dc:07:79:5c:dc:ea:12:cd:38: a9:2f:71:dc:97:2e:85:d7:fc:7b:db:a2:2f:0e:6b: 4e:56:8c:e1:d8:a6:ee:14:22:3d:f3:b7:d0:2e:fe: 56:05:6b:c9:41:7c:64:d5:a2:b7:c0:13:e9:cc:89: 88:96:b3:82:93:1a:93:1b:66:34:50:18:eb:3f:63: e7:cc:5c:7c:01:2e:b6:5a:3e:f3:56:c0:14:0f:f2: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0F:B7:0E:BD:39:E3:BE:41:E9:26:CC:04:44:9E:D0:3E:97:A7:41 X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f6:88:2b:22:b2:aa:73:ec:15:03:03:8b:e6:71:97:6b:4d: 61:17:43:8e:0f:6e:b4:58:1b:7f:0e:2c:d5:8c:6e:9e:06:f9: 21:ac:13:5b:74:01:75:9e:db:f8:ba:7b:9b:3d:b3:eb:fd:ae: 88:dc:6f:97:35:4c:09:20:d3:c3:08:17:09:69:f9:70:66:6d: 66:34:15:23:71:2c:5e:83:1e:7f:09:3e:3f:3e:0f:cd:32:46: 59:1f:26:69:c1:0c:d3:46:40:85:d0:52:98:04:c0:60:62:e0: 3a:93:b0:fb:04:13:fd:37:b1:5e:86:b1:03:a9:61:db:23:e4: 8b:61:04:79:c5:06:be:d5:48:ef:2b:15:a0:95:cd:29:54:c2: f9:35:eb:a7:aa:50:90:0a:e3:99:09:77:f4:c0:8e:43:85:b3: c0:db:93:a9:ce:bb:4b:31:66:f5:86:6d:02:b0:ea:85:1d:5c: ce:42:a5:69:05:c9:1c:c9:d9:7a:50:93:41:e3:7e:36:f5:07: 38:8f:d2:63:3a:e6:92:8b:c3:e8:5c:b7:f5:1d:4c:70:5b:12: 16:5e:72:55:ba:2f:09:c8:0f:2f:a0:f5:39:3d:61:96:89:c9: 5f:72:21:0d:49:05:b2:ec:91:b5:9c:1e:85:4b:09:ef:60:41: ac:45:8d:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy RUI3RkEyMDAeFw0yNTA1MTEwNjE4NTRaFw0yNTA1MTgwNjE4NTRaMBgxFjAUBgNV BAMTDTY4MjA0MTRmLTBhMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzaR/7trbl7mbmP+gszl4GmNL+OBC0+f+JvDcu2XIOJUZBAvNx/KMy4Jgz0AHD v3qaqohjb3uvgA1poLBJ22Tz3XF9W5XJCuaRGnpW6n5V3x1ryBwFIFLdPX1J29Vs OYzwcS7bG03g7kke88Spm2KASYxsDstVH106lTczC3MywCJlNp5SlnEP873Bvd/N QmXmx0U6Grq2jqcsWxAi7dJCZkRe4bRH5cIvK9wHeVzc6hLNOKkvcdyXLoXX/Hvb oi8Oa05WjOHYpu4UIj3zt9Au/lYFa8lBfGTVorfAE+nMiYiWs4KTGpMbZjRQGOs/ Y+fMXHwBLrZaPvNWwBQP8uHtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfw+3Dr05 475B6SbMBESe0D6Xp0EwHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAX2iCsisqpz7BUDA4vmcZdrTWEXQ44PbrRYG38OLNWMbp4G+SGsE1t0 AXWe2/i6e5s9s+v9rojcb5c1TAkg08MIFwlp+XBmbWY0FSNxLF6DHn8JPj8+D80y RlkfJmnBDNNGQIXQUpgEwGBi4DqTsPsEE/03sV6GsQOpYdsj5IthBHnFBr7VSO8r FaCVzSlUwvk166eqUJAK45kJd/TAjkOFs8Dbk6nOu0sxZvWGbQKw6oUdXM5CpWkF yRzJ2XpQk0Hjfjb1BziP0mM65pKLw+hct/UdTHBbEhZeclW6LwnIDy+g9Tk9YZaJ yV9yIQ1JBbLskbWcHoVLCe9gQaxFjco= -----END CERTIFICATE-----Generated at Sun May 11 09:03:55 2025 by rpki-client