$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: fIhr5O7JYga0fQ3J0eiEXYNU4lsv9PZNjJn2k7eRsTU= Subject key identifier: 13:B9:51:99:CA:EA:A9:24:E6:EB:CC:4D:AF:7E:7D:CA:D5:4E:C5:EC Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A31 Signing time: Fri 30 May 2025 19:57:08 +0000 Manifest this update: Fri 30 May 2025 19:57:08 +0000 Manifest next update: Fri 06 Jun 2025 19:57:08 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: F+cNP42fQY6nfabDpme6opiOftu+wLcyGrgtKMvkg6k=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: May 30 19:57:08 2025 GMT Not After : Jun 6 19:57:08 2025 GMT Subject: CN=683a0d94-0a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:95:21:e9:ab:4d:06:ad:00:44:5a:29:82: 8c:f4:15:da:c9:89:dd:d0:dd:dd:57:5c:c8:0e:f1: 36:a2:45:57:c6:16:32:70:ff:1f:76:fd:e3:3e:24: e4:79:ee:e0:f1:a9:d2:1c:bd:0d:bb:83:be:44:30: d8:2c:eb:95:7f:76:a1:88:a9:be:aa:56:4f:f0:ca: f4:13:e3:57:bd:c6:f7:61:06:e4:f2:f3:35:84:ae: 3b:cb:9d:59:f0:dd:38:1e:e1:dc:32:b6:9c:09:c1: 3d:d3:aa:00:f1:f0:ac:11:c4:2a:d8:2a:db:2d:86: 8b:8f:5e:e3:d3:05:08:54:a5:bb:97:8b:80:4c:d8: e1:53:7c:62:1e:a5:0d:18:ed:6e:20:4d:c4:8e:a6: 3c:35:93:bc:69:af:99:79:6b:fa:78:2e:f4:c6:89: 31:e8:ea:6c:9d:6b:2b:2c:07:d8:70:3c:b1:9d:7a: b0:1a:7c:70:fe:d1:e5:50:17:de:ae:9c:c9:ce:2e: dc:96:29:b4:de:9e:11:9b:3d:18:28:cd:d4:5d:e6: 86:e8:12:54:0a:22:0c:2b:93:34:54:f3:31:7b:69: ad:cb:6c:ae:54:5b:25:dd:2f:33:98:d1:9d:3e:34: ea:66:dd:5d:7a:32:bb:a9:b2:2e:71:ec:bf:e1:a6: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:51:99:CA:EA:A9:24:E6:EB:CC:4D:AF:7E:7D:CA:D5:4E:C5:EC X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:50:85:5c:e5:36:ce:8d:ac:b2:51:12:45:07:c1:8a:5d:a4: 98:f9:63:0e:e0:aa:2b:c4:27:7e:d7:d0:73:fb:34:8b:65:8e: 95:99:d2:93:1f:39:04:bb:d3:70:3b:c7:2b:30:50:5d:03:73: 6c:9f:7f:dd:72:a1:8d:35:b3:7a:ee:22:7c:87:d7:49:12:0e: 42:02:2c:b5:1a:89:31:1c:87:df:51:85:40:af:e0:56:2e:2f: 9f:74:a5:81:c7:32:e0:78:17:25:52:d1:ce:13:9c:66:21:b7: 72:b9:75:52:ef:c0:1d:2b:26:1c:23:fe:e0:e0:c4:bd:27:5e: c4:df:d6:2d:af:d5:ef:ed:9b:4a:e6:7c:d3:ac:09:d8:b2:11: 32:66:77:4c:6c:43:db:b4:2f:05:b2:7e:f4:81:17:8e:b9:55: 14:9e:73:56:e1:4e:32:1f:97:53:f9:4e:3e:08:f2:49:d8:f7: eb:66:94:85:c7:0e:9c:56:4d:4c:3b:00:17:c4:f4:e4:cd:54: e0:36:7e:49:d3:f3:6b:8b:a5:1d:37:76:4a:20:6f:37:36:bd: 98:63:bb:3d:f6:34:74:98:ef:86:eb:2f:15:3d:6c:8d:fd:f7: 79:45:de:5e:fa:a4:3c:8d:ba:c9:18:41:2d:df:85:b4:85:47: 1e:ee:9b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUwNTMwMTk1NzA4WhcNMjUwNjA2MTk1NzA4WjAYMRYwFAYD VQQDEw02ODNhMGQ5NC0wYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznKVIemrTQatAERaKYKM9BXayYnd0N3dV1zIDvE2okVXxhYycP8fdv3jPiTk ee7g8anSHL0Nu4O+RDDYLOuVf3ahiKm+qlZP8Mr0E+NXvcb3YQbk8vM1hK47y51Z 8N04HuHcMracCcE906oA8fCsEcQq2CrbLYaLj17j0wUIVKW7l4uATNjhU3xiHqUN GO1uIE3EjqY8NZO8aa+ZeWv6eC70xokx6OpsnWsrLAfYcDyxnXqwGnxw/tHlUBfe rpzJzi7clim03p4Rmz0YKM3UXeaG6BJUCiIMK5M0VPMxe2mty2yuVFsl3S8zmNGd PjTqZt1dejK7qbIucey/4abQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO5UZnK 6qkk5uvMTa9+fcrVTsXsMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmUIVc5TbOjayyURJFB8GKXaSY+WMO4KorxCd+19Bz+zSLZY6VmdKT HzkEu9NwO8crMFBdA3Nsn3/dcqGNNbN67iJ8h9dJEg5CAiy1GokxHIffUYVAr+BW Li+fdKWBxzLgeBclUtHOE5xmIbdyuXVS78AdKyYcI/7g4MS9J17E39Ytr9Xv7ZtK 5nzTrAnYshEyZndMbEPbtC8Fsn70gReOuVUUnnNW4U4yH5dT+U4+CPJJ2PfrZpSF xw6cVk1MOwAXxPTkzVTgNn5J0/Nri6UdN3ZKIG83Nr2YY7s99jR0mO+G6y8VPWyN /fd5Rd5e+qQ8jbrJGEEt34W0hUce7psF -----END CERTIFICATE-----Generated at Sat May 31 16:35:02 2025 by rpki-client