$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: V4Pp/MejZdNBCQ2kJ8wRWK9JT7sFeMGYDlVDGHEpWjk= Subject key identifier: E5:86:6B:15:AA:E1:DB:EA:4A:E4:44:48:E0:DE:85:B2:51:F5:C1:22 Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 091D Signing time: Sat 10 May 2025 20:00:52 +0000 Manifest this update: Sat 10 May 2025 20:00:51 +0000 Manifest next update: Sat 17 May 2025 20:00:51 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: Uyjq4oYTUKwc5N9t4HExFgPOkftRlCY9W6HcoZwoWE8=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: F/lUPKZHFm1sIOo7h73Lh8+bzw8LraoeACifeBa4ogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: May 10 20:00:51 2025 GMT Not After : May 17 20:00:51 2025 GMT Subject: CN=681fb073-25f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:ac:3d:a1:50:ec:f4:7a:ea:5f:66:89:8e: 0c:6c:71:bb:fc:14:b9:8c:0e:d5:fd:e1:6c:56:5e: 56:cb:65:6e:8b:4d:44:1d:5c:4a:8c:05:72:7e:55: 09:1b:e0:94:23:d4:c7:e4:26:4a:c9:6c:60:6a:c4: 4e:8c:1e:f2:91:a2:89:3c:f6:e0:09:3b:3f:fe:c1: 85:65:ed:fc:1f:2d:4e:06:ee:fa:f8:eb:da:12:5d: f0:81:aa:ba:53:10:49:7b:b3:57:a9:d4:c4:16:cf: 14:bb:39:1b:0b:cb:9a:9b:b1:38:fc:3c:f0:22:0d: 29:ef:b1:c3:30:67:e2:1b:50:2a:ab:43:8e:31:2f: 6a:ad:41:56:d0:10:38:7c:73:d9:14:a2:c3:d7:99: c8:fd:ba:76:85:6d:11:e2:17:ed:c9:c5:b7:20:38: aa:93:5f:73:14:e3:bb:2c:bc:8a:09:cb:04:31:b2: 9b:b5:d0:a4:af:7c:9c:13:83:b6:ea:69:40:f4:6d: 16:26:7b:c0:6a:64:11:6d:e3:c3:10:f4:52:34:95: 99:15:5c:ab:0b:9a:2e:70:4f:0c:a6:0a:c2:2a:21: fd:4d:aa:d4:43:0b:33:d4:c2:0e:04:53:55:b8:c3: 56:82:b7:30:04:f3:c8:db:e0:61:1f:3a:79:87:d3: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:6B:15:AA:E1:DB:EA:4A:E4:44:48:E0:DE:85:B2:51:F5:C1:22 X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:92:a5:4a:98:bb:51:4c:6c:0e:71:d2:59:ce:94:9a:78:5e: cc:84:0f:65:a4:65:ca:d3:1d:8d:0e:6e:82:19:b7:f7:84:19: 08:25:db:d9:4a:12:c6:94:98:5b:1a:11:c0:5e:64:0b:a7:43: 61:b6:d0:2f:2e:1c:04:71:b2:b9:3b:15:e0:cb:7e:0c:5c:9e: 20:a0:3f:2f:72:73:b4:e0:a4:d0:73:d5:d5:64:f5:f1:fc:ba: 2f:3c:b2:d5:d5:b1:0e:f1:2b:d6:65:b2:d1:35:8a:de:40:8a: 51:c4:1d:be:47:d1:49:5d:9e:d6:3c:e3:9b:73:57:0b:56:d2: 54:54:48:b8:ea:71:e5:b2:c6:f2:1a:4c:f9:5e:93:25:86:fe: 39:ee:81:7b:63:d3:6f:b6:8f:ae:f4:9a:a4:92:76:4b:d1:15: d5:69:60:3f:be:aa:98:6e:d1:21:07:2f:eb:12:4c:2c:78:ee: d8:ac:3e:8d:c0:6b:f0:97:e8:12:ff:1f:46:5c:89:b2:86:e5: 8b:c3:56:61:3b:27:06:dc:22:1a:20:9d:6c:af:16:43:d5:02: 7f:50:cb:d5:e9:36:e0:f4:29:ce:73:62:a9:1f:4b:93:db:ff: 29:77:3c:80:83:33:21:bb:0f:b3:2e:a5:e9:f1:77:9c:0b:b3: 51:0e:79:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjUwNTEwMjAwMDUxWhcNMjUwNTE3MjAwMDUxWjAYMRYwFAYD VQQDEw02ODFmYjA3My0yNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDWsPaFQ7PR66l9miY4MbHG7/BS5jA7V/eFsVl5Wy2Vui01EHVxKjAVyflUJ G+CUI9TH5CZKyWxgasROjB7ykaKJPPbgCTs//sGFZe38Hy1OBu76+OvaEl3wgaq6 UxBJe7NXqdTEFs8UuzkbC8uam7E4/DzwIg0p77HDMGfiG1Aqq0OOMS9qrUFW0BA4 fHPZFKLD15nI/bp2hW0R4hftycW3IDiqk19zFOO7LLyKCcsEMbKbtdCkr3ycE4O2 6mlA9G0WJnvAamQRbePDEPRSNJWZFVyrC5oucE8MpgrCKiH9TarUQwsz1MIOBFNV uMNWgrcwBPPI2+BhHzp5h9NTrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWGaxWq 4dvqSuRESODehbJR9cEiMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0kqVKmLtRTGwOcdJZzpSaeF7MhA9lpGXK0x2NDm6CGbf3hBkIJdvZ ShLGlJhbGhHAXmQLp0NhttAvLhwEcbK5OxXgy34MXJ4goD8vcnO04KTQc9XVZPXx /LovPLLV1bEO8SvWZbLRNYreQIpRxB2+R9FJXZ7WPOObc1cLVtJUVEi46nHlssby Gkz5XpMlhv457oF7Y9Nvto+u9JqkknZL0RXVaWA/vqqYbtEhBy/rEkwseO7YrD6N wGvwl+gS/x9GXImyhuWLw1ZhOycG3CIaIJ1srxZD1QJ/UMvV6Tbg9CnOc2KpH0uT 2/8pdzyAgzMhuw+zLqXp8XecC7NRDnm/ -----END CERTIFICATE-----Generated at Sun May 11 09:37:48 2025 by rpki-client