$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: KuKzpPKGcNVB/9t630x2VlRSZ9kTQ6YI7wSkMZ1wo+I= Subject key identifier: 3B:3F:AE:AF:5D:23:0B:E5:68:AA:40:18:F3:D1:E2:8D:05:92:A4:4F Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 0279 Signing time: Sat 31 May 2025 01:59:34 +0000 Manifest this update: Sat 31 May 2025 01:59:33 +0000 Manifest next update: Sat 07 Jun 2025 01:59:33 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: fIy/OthqtmwexDX0ghG8wRdwpGkwR6pqRF0u4IsZ6O8=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: May 31 01:59:33 2025 GMT Not After : Jun 7 01:59:33 2025 GMT Subject: CN=683a6285-26be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:f0:41:1e:20:d4:95:9e:99:03:12:77:71: d0:51:f4:f3:a4:2d:bd:f4:08:42:09:5b:15:24:49: f0:54:51:6b:ed:0e:18:06:f4:c6:9d:ee:c4:62:70: ec:5f:ce:dd:f2:19:54:7b:b4:7b:f8:1b:40:fa:00: df:da:39:9f:b1:28:23:a6:80:0a:7e:1c:53:df:23: df:c4:6b:ae:f0:e9:04:83:e6:7d:0c:10:ff:54:3f: cd:84:d8:4a:9a:17:95:81:31:03:ff:82:e5:81:87: f1:66:ae:71:10:cc:af:c6:ff:f2:51:8e:75:a3:e4: 37:61:c2:ed:fb:8e:ce:64:77:f7:0b:61:9a:d0:8f: 33:a4:1d:21:ef:c2:d6:ff:92:e4:68:ad:61:75:40: 9d:73:fc:12:3f:83:63:e2:91:8f:89:cb:29:9a:0f: 82:88:27:17:29:4a:e2:4d:6d:05:ae:95:20:09:d0: ba:20:21:b0:f7:14:7b:6e:f2:92:d5:fc:c0:12:12: 4a:c8:31:f7:4f:5b:d3:df:da:66:22:c5:f3:b6:71: 73:df:46:cb:11:a8:07:1f:f5:b0:ae:d5:0c:37:80: 5b:1e:0a:8d:43:02:3c:9b:24:2f:0e:b4:4b:65:c4: 84:29:98:de:37:24:48:45:37:f0:0a:d5:46:64:e4: 37:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3F:AE:AF:5D:23:0B:E5:68:AA:40:18:F3:D1:E2:8D:05:92:A4:4F X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d3:ac:8f:0f:83:15:64:42:07:eb:46:ed:09:af:e7:cf:b9: 82:bd:36:3a:2c:71:f7:ed:e2:12:eb:e6:b1:a2:f4:23:a6:ab: 95:0b:d8:3b:cd:ea:80:ad:87:d0:8e:4f:c7:7d:bf:d4:88:4d: 33:91:04:4f:06:50:5e:53:74:31:73:93:ac:47:6a:93:62:cd: 39:63:75:50:5f:cb:e2:ee:2c:cc:07:cc:3c:50:a8:b4:c4:53: 4c:11:5e:fa:af:22:ff:3e:76:f4:a4:ee:c3:31:9a:ea:b4:24: 03:e9:36:95:3e:58:37:ee:da:02:ed:fe:0e:4f:e4:73:38:09: 74:01:2f:21:72:03:2f:33:83:00:1e:8e:8a:ac:1b:66:27:41: 5a:a1:38:75:69:cc:c9:75:de:a9:22:9f:f6:a4:0f:59:2a:ea: 50:8e:36:c9:71:6d:52:05:ad:60:aa:86:26:3a:48:93:32:f2: a5:79:52:7b:53:b8:2a:cf:70:46:24:2c:97:93:2c:53:b1:73: 73:5c:9a:9a:d7:9e:ff:98:ec:11:ce:86:35:2d:a6:f5:a3:b1: 22:8a:6c:5e:dc:1f:bd:37:a6:b7:04:9b:0b:52:8e:cf:37:c3: dc:8e:07:d1:9b:91:0b:ec:c9:62:d1:f1:96:49:c8:c1:2e:5e: 6d:35:49:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwNTMxMDE1OTMzWhcNMjUwNjA3MDE1OTMzWjAYMRYwFAYD VQQDEw02ODNhNjI4NS0yNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt7wQR4g1JWemQMSd3HQUfTzpC299AhCCVsVJEnwVFFr7Q4YBvTGne7EYnDs X87d8hlUe7R7+BtA+gDf2jmfsSgjpoAKfhxT3yPfxGuu8OkEg+Z9DBD/VD/NhNhK mheVgTED/4LlgYfxZq5xEMyvxv/yUY51o+Q3YcLt+47OZHf3C2Ga0I8zpB0h78LW /5LkaK1hdUCdc/wSP4Nj4pGPicspmg+CiCcXKUriTW0FrpUgCdC6ICGw9xR7bvKS 1fzAEhJKyDH3T1vT39pmIsXztnFz30bLEagHH/WwrtUMN4BbHgqNQwI8myQvDrRL ZcSEKZjeNyRIRTfwCtVGZOQ3zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDs/rq9d IwvlaKpAGPPR4o0FkqRPMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa06yPD4MVZEIH60btCa/nz7mCvTY6LHH37eIS6+axovQjpquVC9g7 zeqArYfQjk/Hfb/UiE0zkQRPBlBeU3Qxc5OsR2qTYs05Y3VQX8vi7izMB8w8UKi0 xFNMEV76ryL/Pnb0pO7DMZrqtCQD6TaVPlg37toC7f4OT+RzOAl0AS8hcgMvM4MA Ho6KrBtmJ0FaoTh1aczJdd6pIp/2pA9ZKupQjjbJcW1SBa1gqoYmOkiTMvKleVJ7 U7gqz3BGJCyXkyxTsXNzXJqa157/mOwRzoY1Lab1o7Eiimxe3B+9N6a3BJsLUo7P N8PcjgfRm5EL7Mli0fGWScjBLl5tNUli -----END CERTIFICATE-----Generated at Sat May 31 17:31:54 2025 by rpki-client