$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: xUEGBABEeyzzlsIPuhwoMYRAzvwHLIKPZejsVcFG2/0= Subject key identifier: 85:2B:71:E3:21:EB:7D:85:90:CB:BB:D6:04:86:00:79:84:2F:EC:99 Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: F1 Signing time: Sun 01 Jun 2025 05:02:57 +0000 Manifest this update: Sun 01 Jun 2025 05:02:56 +0000 Manifest next update: Sun 08 Jun 2025 05:02:56 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: nVPEaz8qGwvKBI9E3rjPe8v8qSBgoNbffOL6x8LRmsI=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Jun 1 05:02:56 2025 GMT Not After : Jun 8 05:02:56 2025 GMT Subject: CN=683bdf00-aef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:ef:1a:88:35:42:f7:81:e9:cf:ae:10:d9: f6:07:46:8c:d5:fb:8c:22:26:b2:0c:ed:3c:78:35: ff:83:2e:1b:bc:03:eb:0f:15:48:74:bf:6b:d1:3b: aa:e2:47:3e:17:43:49:fb:2c:e3:8b:17:37:20:af: 13:d6:c2:c0:81:92:5f:10:1f:6f:6c:c1:4c:5b:01: 80:34:65:b3:75:93:49:a6:62:e6:b5:35:11:83:d7: 8b:d9:3e:36:96:f8:73:d3:69:4e:96:f3:96:96:e4: 0d:37:15:54:b2:94:bb:9e:bd:e5:79:97:71:f7:38: 6f:09:82:e9:52:ca:8d:6a:14:ff:4e:60:a9:18:0f: 24:f7:15:2d:d0:21:e4:66:cd:fe:67:ea:ed:50:2a: 90:02:19:dc:10:c2:13:11:61:a6:2a:a6:73:83:fa: df:b7:98:73:b5:d9:b8:19:a2:98:18:a2:1c:cc:b1: 9a:48:0c:5d:92:e6:8a:0f:1e:6e:f9:a1:f3:1a:87: da:37:6a:3c:68:ed:33:b1:97:f5:c2:b5:d9:03:15: 9a:3f:1f:35:1b:78:00:ef:84:d8:d3:ac:78:10:c6: ad:4a:a2:f4:da:58:a9:a8:1b:a9:a0:25:5d:cf:43: c4:35:19:3e:00:2b:17:1f:f4:f8:b8:3b:d5:59:7a: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2B:71:E3:21:EB:7D:85:90:CB:BB:D6:04:86:00:79:84:2F:EC:99 X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a0:35:38:a5:dc:22:89:eb:b5:ef:70:ed:94:dd:aa:a8:3e: 2b:de:e9:34:0d:74:f7:48:03:40:5a:1f:71:02:fd:a4:44:66: c6:8b:86:3c:50:50:49:7a:61:08:5b:c9:b2:62:90:7a:06:a4: 33:ee:a9:94:46:33:55:ed:79:84:a6:6e:e4:65:cf:13:7e:51: 28:a3:a2:e1:5a:aa:84:e4:be:12:71:b6:13:0c:5a:e7:69:12: f1:5f:19:9d:07:4e:57:78:55:53:d9:0b:cc:47:02:74:81:a2: 0d:38:a2:d9:aa:35:28:34:72:4e:48:81:e5:65:7a:de:06:30: 91:2b:f4:a0:63:5d:6d:15:23:3c:fc:9b:2f:49:9c:e4:b1:d7: 36:7a:96:64:96:dc:22:20:cb:8a:44:03:44:d1:05:55:b7:17: 41:5f:37:a6:8e:e7:55:f0:ee:78:7a:4e:09:1b:c7:31:d3:ba: 42:7a:32:69:61:9e:3c:3f:02:44:b1:95:03:ff:37:f6:10:31: c6:a8:d7:8a:b5:39:60:8e:0b:bb:a7:6b:91:bb:3b:94:ce:6f: 6a:5a:1e:d0:26:dc:17:b3:f7:ba:f7:10:34:f7:7a:94:c7:74: 24:29:21:54:61:5d:85:15:fd:ee:2a:b3:bf:13:4e:61:8f:75: 11:a8:32:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwNjAxMDUwMjU2WhcNMjUwNjA4MDUwMjU2WjAYMRYwFAYD VQQDEw02ODNiZGYwMC1hZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OXvGog1QveB6c+uENn2B0aM1fuMIiayDO08eDX/gy4bvAPrDxVIdL9r0Tuq 4kc+F0NJ+yzjixc3IK8T1sLAgZJfEB9vbMFMWwGANGWzdZNJpmLmtTURg9eL2T42 lvhz02lOlvOWluQNNxVUspS7nr3leZdx9zhvCYLpUsqNahT/TmCpGA8k9xUt0CHk Zs3+Z+rtUCqQAhncEMITEWGmKqZzg/rft5hztdm4GaKYGKIczLGaSAxdkuaKDx5u +aHzGofaN2o8aO0zsZf1wrXZAxWaPx81G3gA74TY06x4EMatSqL02lipqBupoCVd z0PENRk+ACsXH/T4uDvVWXriBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUrceMh 632FkMu71gSGAHmEL+yZMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtoDU4pdwiieu173DtlN2qqD4r3uk0DXT3SANAWh9xAv2kRGbGi4Y8 UFBJemEIW8myYpB6BqQz7qmURjNV7XmEpm7kZc8TflEoo6LhWqqE5L4ScbYTDFrn aRLxXxmdB05XeFVT2QvMRwJ0gaINOKLZqjUoNHJOSIHlZXreBjCRK/SgY11tFSM8 /JsvSZzksdc2epZkltwiIMuKRANE0QVVtxdBXzemjudV8O54ek4JG8cx07pCejJp YZ48PwJEsZUD/zf2EDHGqNeKtTlgjgu7p2uRuzuUzm9qWh7QJtwXs/e69xA093qU x3QkKSFUYV2FFf3uKrO/E05hj3URqDJF -----END CERTIFICATE-----Generated at Mon Jun 2 19:39:32 2025 by rpki-client