$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: eHqQ47KCSb22YVEA/x8qw/pCYLfSrOFTbH+fDELR7cY= Subject key identifier: 50:51:D4:AC:A6:8B:AA:D8:05:B5:FB:42:B2:69:FB:EB:62:DF:00:BA Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0C47 Signing time: Sat 31 May 2025 18:27:38 +0000 Manifest this update: Sat 31 May 2025 18:27:38 +0000 Manifest next update: Sat 07 Jun 2025 18:27:38 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: V78568A2MvaMoJ5/nCjbMIhH0hP5d7eGmfQsXl1rdCo=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: JpCVaZ9JZD1Afq3DjPUJqYLTP1v40h6qnEBodBPkfj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: May 31 18:27:38 2025 GMT Not After : Jun 7 18:27:38 2025 GMT Subject: CN=683b4a1a-b1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:32:91:78:6b:5c:cf:b7:21:ca:76:2e:81: d9:47:99:26:7a:27:2f:52:45:20:b8:26:d9:49:bc: 5b:fb:97:6e:2b:27:5d:70:15:b0:15:e3:60:e9:89: 91:62:bd:83:e7:3b:3e:44:14:f4:01:c7:b7:24:4b: a1:63:b1:f0:18:72:bf:ed:0a:00:18:b4:77:61:ea: 6d:4d:18:de:ae:71:3a:f0:b7:ad:ea:4b:23:4c:15: 2c:af:84:db:0f:79:61:34:23:63:71:1a:f6:f0:83: d0:77:91:0b:b4:a4:97:2e:3b:d1:ac:b6:c6:bd:a6: a0:4b:a5:29:51:91:85:b4:8e:ea:35:14:b8:59:ba: 64:d5:86:82:d3:80:56:23:58:b7:17:42:cd:5b:2b: 67:a5:ae:63:60:6a:89:bb:7d:4b:26:0f:d3:fb:69: ac:11:23:f6:12:a6:75:a5:16:20:2b:21:65:99:4f: 12:f1:72:7a:8f:83:32:2b:00:de:b6:68:f8:46:16: b3:13:b5:7c:35:7f:21:4d:62:75:c6:43:65:67:03: 1f:0e:53:0d:04:6f:94:a1:36:b5:56:e4:94:f9:2e: c6:ec:fa:43:58:49:a6:1d:2d:86:a6:a0:01:ad:4b: 69:4d:33:c4:cd:da:31:01:1f:ff:0c:2f:7e:4e:d1: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:D4:AC:A6:8B:AA:D8:05:B5:FB:42:B2:69:FB:EB:62:DF:00:BA X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:68:20:48:64:a5:bc:6f:ac:6c:3d:b0:fb:22:54:b5:be:e8: 08:d2:75:82:99:14:8a:83:0c:d6:1e:f1:d9:04:02:5d:68:77: 39:1a:a3:30:86:09:d5:43:32:68:3c:54:39:63:e7:40:92:3e: 55:0d:1d:49:9b:a2:45:c5:e8:82:8f:de:33:a5:8a:01:e3:6e: fb:cd:43:88:c6:9a:38:c1:0d:48:5b:1e:f7:8f:57:58:51:e2: 86:3b:64:a5:16:ff:51:f3:76:72:72:cd:79:c0:c5:11:b0:db: 2a:8f:e6:85:9a:7e:a6:55:e6:3e:f3:a4:eb:1a:ef:7d:76:e2: 16:48:2c:0a:c6:b9:06:0c:d0:b1:ec:7c:52:c7:a9:e7:c5:cf: 3a:f8:86:ea:44:3c:6b:84:68:08:cf:a1:22:d8:2e:6d:36:04: 80:7e:fe:25:90:2f:c6:5f:68:7b:d6:b7:3d:fb:82:0a:d9:d6: ab:4a:cb:ed:8f:40:09:ef:0e:60:1d:13:71:4a:91:a2:4e:1c: 7b:cf:bd:11:3d:0c:34:fe:fa:d1:bb:73:00:da:df:0d:1a:43: 24:fa:98:bd:4a:d2:da:0a:fe:2b:87:6b:c9:c0:93:da:e4:fc: a9:aa:d4:09:98:ec:f0:f1:c1:02:6f:78:cb:1d:63:9b:89:3e: 19:43:2d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjUwNTMxMTgyNzM4WhcNMjUwNjA3MTgyNzM4WjAYMRYwFAYD VQQDEw02ODNiNGExYS1iMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWYykXhrXM+3Icp2LoHZR5kmeicvUkUguCbZSbxb+5duKyddcBWwFeNg6YmR Yr2D5zs+RBT0Ace3JEuhY7HwGHK/7QoAGLR3YeptTRjernE68Let6ksjTBUsr4Tb D3lhNCNjcRr28IPQd5ELtKSXLjvRrLbGvaagS6UpUZGFtI7qNRS4Wbpk1YaC04BW I1i3F0LNWytnpa5jYGqJu31LJg/T+2msESP2EqZ1pRYgKyFlmU8S8XJ6j4MyKwDe tmj4RhazE7V8NX8hTWJ1xkNlZwMfDlMNBG+UoTa1VuSU+S7G7PpDWEmmHS2GpqAB rUtpTTPEzdoxAR//DC9+TtGtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBR1Kym i6rYBbX7QrJp++ti3wC6MB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzaCBIZKW8b6xsPbD7IlS1vugI0nWCmRSKgwzWHvHZBAJdaHc5GqMw hgnVQzJoPFQ5Y+dAkj5VDR1Jm6JFxeiCj94zpYoB4277zUOIxpo4wQ1IWx73j1dY UeKGO2SlFv9R83Zycs15wMURsNsqj+aFmn6mVeY+86TrGu99duIWSCwKxrkGDNCx 7HxSx6nnxc86+IbqRDxrhGgIz6Ei2C5tNgSAfv4lkC/GX2h71rc9+4IK2darSsvt j0AJ7w5gHRNxSpGiThx7z70RPQw0/vrRu3MA2t8NGkMk+pi9StLaCv4rh2vJwJPa 5PypqtQJmOzw8cECb3jLHWObiT4ZQy0k -----END CERTIFICATE-----Generated at Mon Jun 2 20:30:55 2025 by rpki-client