$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: 5K5qXR6lo0P99K8DvGYgXXZxJn5EcdWb+JmuDG2V8uo= Subject key identifier: 95:49:62:8C:A1:60:25:C8:61:3F:4C:2F:19:51:34:68:EE:59:B2:FF Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 012C Signing time: Sat 31 May 2025 04:14:47 +0000 Manifest this update: Sat 31 May 2025 04:14:46 +0000 Manifest next update: Sat 07 Jun 2025 04:14:46 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: 4loKSIYqtN7D9iNO20bo8uC6pknBgxY/J5sKHjgJjIQ=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: zjnMnu7RY/dZWeqb3tnlHnJORJa1AYwPA3wCVz3+WfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: May 31 04:14:46 2025 GMT Not After : Jun 7 04:14:46 2025 GMT Subject: CN=683a8236-0c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:ec:32:75:4b:35:0b:60:9d:35:d5:75:2b: 64:de:43:c3:6b:6c:8a:60:36:5a:35:f4:c8:15:c5: 3c:aa:2b:4b:c4:3a:ed:80:27:d3:55:06:86:f9:f2: 70:10:12:bb:b4:81:ed:89:82:63:07:e6:3c:3b:58: fc:8d:0c:ff:b3:5b:13:4a:7d:4c:78:a0:5b:21:f1: 91:61:4b:56:d2:18:48:48:2e:3c:7f:ea:43:5e:00: 18:0c:e0:a9:a1:17:a7:29:4d:7e:e2:d1:56:f3:e5: 87:b0:b6:2f:41:1a:76:76:2f:ba:c0:7d:9b:89:ec: f3:9e:ce:8b:08:4c:0e:12:8f:eb:ab:ce:cb:0c:ec: 0b:f2:3e:21:a3:a5:9f:bb:27:7c:11:58:d2:58:22: 3e:fa:f4:2f:96:48:7a:41:44:47:80:aa:c3:67:bd: 96:3e:a8:2c:3b:0c:2e:a8:e9:ea:50:77:94:01:f7: 74:1b:6d:57:c7:5d:af:41:01:bf:51:43:ed:de:78: 89:16:cc:fb:9f:8c:be:ac:26:86:ca:66:77:db:e6: 7a:32:87:01:46:8e:4d:e8:e8:c4:7d:7a:55:fb:3d: 3c:ef:f1:24:09:42:68:b4:af:bd:58:86:29:3f:cb: d2:09:de:e2:13:b5:ea:fd:cf:37:39:da:87:74:a1: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:62:8C:A1:60:25:C8:61:3F:4C:2F:19:51:34:68:EE:59:B2:FF X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:91:94:43:f8:1d:ab:b3:1c:6f:e6:5b:ed:51:22:99:6f:7e: 50:60:09:88:56:35:b7:f7:dd:7a:28:2a:e1:d3:7a:70:5b:a8: 20:96:f9:45:42:f3:13:30:6a:7c:80:63:aa:13:32:88:55:73: 3c:c9:e9:e7:83:08:e4:0e:b2:d4:5d:fc:ad:60:0c:3f:80:42: e8:66:20:7e:35:3c:7c:25:75:91:bf:db:b1:51:b8:04:06:40: 52:41:43:e7:68:4d:ed:52:40:4a:fb:3f:b4:5c:f8:99:86:38: 2c:f8:de:4b:4b:1f:2f:ab:b7:0b:ea:87:e7:dd:91:ec:d6:d7: c9:57:a1:40:90:ac:ab:a5:84:3c:ee:11:e4:df:52:83:db:52: 1e:37:92:6b:d1:d1:a7:8d:f4:17:7f:45:a0:37:b8:e1:49:f6: 67:c7:cb:e6:51:e8:ef:62:aa:1f:eb:25:b7:89:85:e4:b5:6b: 40:8c:40:ac:ab:38:96:61:ca:9d:9a:33:90:36:bf:42:65:bd: 1a:2b:a3:5c:54:06:03:a9:fa:86:f7:d0:60:4f:3c:5f:9a:ea: 73:80:81:df:2c:49:2d:05:1d:ea:2e:4b:ea:f0:5a:ea:10:26: 24:48:8e:35:98:2d:a6:ba:e4:55:ae:d7:7a:da:e1:f7:43:86: 9f:f1:db:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjUwNTMxMDQxNDQ2WhcNMjUwNjA3MDQxNDQ2WjAYMRYwFAYD VQQDEw02ODNhODIzNi0wYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh7sMnVLNQtgnTXVdStk3kPDa2yKYDZaNfTIFcU8qitLxDrtgCfTVQaG+fJw EBK7tIHtiYJjB+Y8O1j8jQz/s1sTSn1MeKBbIfGRYUtW0hhISC48f+pDXgAYDOCp oRenKU1+4tFW8+WHsLYvQRp2di+6wH2biezzns6LCEwOEo/rq87LDOwL8j4ho6Wf uyd8EVjSWCI++vQvlkh6QURHgKrDZ72WPqgsOwwuqOnqUHeUAfd0G21Xx12vQQG/ UUPt3niJFsz7n4y+rCaGymZ32+Z6MocBRo5N6OjEfXpV+z087/EkCUJotK+9WIYp P8vSCd7iE7Xq/c83OdqHdKFwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVJYoyh YCXIYT9MLxlRNGjuWbL/MB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGkZRD+B2rsxxv5lvtUSKZb35QYAmIVjW39916KCrh03pwW6gglvlF QvMTMGp8gGOqEzKIVXM8yenngwjkDrLUXfytYAw/gELoZiB+NTx8JXWRv9uxUbgE BkBSQUPnaE3tUkBK+z+0XPiZhjgs+N5LSx8vq7cL6ofn3ZHs1tfJV6FAkKyrpYQ8 7hHk31KD21IeN5Jr0dGnjfQXf0WgN7jhSfZnx8vmUejvYqof6yW3iYXktWtAjECs qziWYcqdmjOQNr9CZb0aK6NcVAYDqfqG99BgTzxfmupzgIHfLEktBR3qLkvq8Frq ECYkSI41mC2muuRVrtd62uH3Q4af8dum -----END CERTIFICATE-----Generated at Sat May 31 17:37:50 2025 by rpki-client