$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: gCAtEbpkwDCQSV8XDxDf0iZ1wohpTSYnr0dqEuWLWwY= Subject key identifier: 0C:EB:1D:C9:BA:19:EE:A2:43:97:2A:FD:0F:F6:7B:F9:AB:22:01:AC Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 47 Signing time: Sun 01 Jun 2025 07:09:38 +0000 Manifest this update: Sun 01 Jun 2025 07:09:37 +0000 Manifest next update: Sun 08 Jun 2025 07:09:37 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: GIEJLjXiO6kZ/zD9AhUZ18yIJyIulNbdPcMVIjg0vps=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Jun 1 07:09:37 2025 GMT Not After : Jun 8 07:09:37 2025 GMT Subject: CN=683bfcb1-621a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:49:3c:59:42:2a:e8:b1:5a:41:79:46:2a: 34:a0:d9:de:55:01:f7:fd:a2:38:ea:7b:a7:a4:a5: 2e:ff:4e:5d:72:40:2e:df:a0:92:b5:f9:80:41:de: 0e:fb:46:ab:00:fd:68:53:fb:f2:96:b6:9b:cc:88: b9:50:8d:f7:34:e9:d7:01:eb:6e:c8:1a:96:53:58: 1b:17:10:5f:d5:46:23:0b:9d:7c:99:9e:9a:4f:c1: 62:d9:5b:da:55:e6:ce:03:53:cc:c0:6e:8a:c3:c5: 5e:e5:95:1a:6f:8f:09:8c:f4:82:9a:dd:cd:25:8b: 71:95:2e:61:d0:71:28:0b:af:71:f8:e9:10:72:36: e6:76:02:01:81:48:c7:5d:63:7e:c4:00:d7:c5:de: f9:7a:bb:ec:0b:91:f1:90:ad:44:aa:c3:0a:cb:97: cb:bf:60:d1:fe:f8:3f:1e:58:45:08:64:0f:ea:6b: eb:e8:e0:0b:4b:e1:26:0f:43:4d:b5:2e:26:5e:5b: 02:a7:63:b5:fb:4e:9d:93:2e:4d:bb:fd:7b:01:54: 01:db:28:b2:3c:c2:dc:b1:6c:ea:6d:5e:f4:9c:64: c9:dc:5c:d9:3b:ed:0a:6f:30:1d:71:2a:4c:3f:50: 33:7a:ec:89:bb:fe:8f:be:e4:31:12:62:ad:69:3d: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:1D:C9:BA:19:EE:A2:43:97:2A:FD:0F:F6:7B:F9:AB:22:01:AC X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b2:5c:b3:bc:3c:10:9b:c0:0c:14:85:b8:44:d9:24:56:c5: f6:65:fd:7e:f1:88:cd:11:c7:53:25:54:3c:8d:95:e9:6a:cd: 38:6e:35:ce:b3:f1:02:b4:30:1c:75:e5:40:3e:8b:1e:6f:c8: 8a:61:e7:2d:e1:1b:7e:b7:77:5e:6c:64:7b:61:05:6b:fb:06: 78:15:98:20:b6:5b:7d:75:18:27:4c:36:74:78:33:8f:80:0c: 16:65:d8:52:41:fe:b8:7d:e6:c0:c0:f4:3e:dc:19:24:f3:5e: 4a:46:d5:6a:4a:2c:33:f0:83:1b:bb:81:4b:96:fb:d3:ae:15: e2:82:ea:0a:84:44:22:4a:d5:ae:5f:1b:b5:fa:7d:fe:ac:de: 78:5c:7e:d5:ce:4c:ca:8f:f0:45:b7:db:a7:c5:d0:5b:71:1e: a5:74:ae:33:4e:aa:b7:9c:b3:26:1f:3b:ee:b6:86:3d:fc:77: eb:ab:9e:7b:f1:5a:61:7c:ff:76:af:31:2d:16:b4:2e:09:02: af:4c:4d:6b:19:c9:31:e6:de:76:d8:08:47:ac:a1:1c:3e:95: 87:bf:72:57:98:90:5a:bf:ef:5d:b8:7c:fa:d9:99:58:29:46: 78:5b:32:06:fc:61:f2:df:5e:9c:03:38:bc:18:0d:37:7c:dc: 0a:ef:ff:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoQ0EyOTc3NDc0MzBBMUJFQjM0MEJDQTM5RDYyMjJGRDI2 NDE5QjdEQjAeFw0yNTA2MDEwNzA5MzdaFw0yNTA2MDgwNzA5MzdaMBgxFjAUBgNV BAMTDTY4M2JmY2IxLTYyMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6lEk8WUIq6LFaQXlGKjSg2d5VAff9ojjqe6ekpS7/Tl1yQC7foJK1+YBB3g77 RqsA/WhT+/KWtpvMiLlQjfc06dcB627IGpZTWBsXEF/VRiMLnXyZnppPwWLZW9pV 5s4DU8zAborDxV7llRpvjwmM9IKa3c0li3GVLmHQcSgLr3H46RByNuZ2AgGBSMdd Y37EANfF3vl6u+wLkfGQrUSqwwrLl8u/YNH++D8eWEUIZA/qa+vo4AtL4SYPQ021 LiZeWwKnY7X7Tp2TLk27/XsBVAHbKLI8wtyxbOptXvScZMncXNk77QpvMB1xKkw/ UDN67Im7/o++5DESYq1pPWMLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDOsdyboZ 7qJDlyr9D/Z7+asiAawwHwYDVR0jBBgwFoAUyil3R0MKG+s0C8o51iIv0mQZt9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0UxQUM4MjEwRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveWlsM1IwTUtHLXMwQzhvNTFpSXYwbVFadDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0UxQUM4MjEwRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1z MEM4bzUxaUl2MG1RWnQ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEayXLO8PBCbwAwUhbhE2SRWxfZl/X7xiM0Rx1MlVDyNlelqzThuNc6z 8QK0MBx15UA+ix5vyIph5y3hG363d15sZHthBWv7BngVmCC2W311GCdMNnR4M4+A DBZl2FJB/rh95sDA9D7cGSTzXkpG1WpKLDPwgxu7gUuW+9OuFeKC6gqERCJK1a5f G7X6ff6s3nhcftXOTMqP8EW326fF0FtxHqV0rjNOqrecsyYfO+62hj38d+urnnvx WmF8/3avMS0WtC4JAq9MTWsZyTHm3nbYCEesoRw+lYe/cleYkFq/7124fPrZmVgp RnhbMgb8YfLfXpwDOLwYDTd83Arv/9Q= -----END CERTIFICATE-----Generated at Mon Jun 2 22:23:42 2025 by rpki-client