$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json) Hash identifier: wJladcnma5sjEp92SEb3DB1W0QsX/e5W14NJryjiWIE= Subject key identifier: 7E:CB:AD:AB:53:97:95:09:A8:64:2C:10:5D:16:0D:BA:05:55:EA:EE Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft Manifest number: 5C Signing time: Sat 31 May 2025 06:44:41 +0000 Manifest this update: Sat 31 May 2025 06:44:41 +0000 Manifest next update: Sat 07 Jun 2025 06:44:41 +0000 Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: R2r7+No5JBvZWG3R1pkx/OmwR+F3UXmBpPqEADWlOnk=) 2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Validity Not Before: May 31 06:44:41 2025 GMT Not After : Jun 7 06:44:41 2025 GMT Subject: CN=683aa559-a4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:63:1f:ba:33:d6:68:6a:cc:f4:52:ab:40:06: 11:1f:1b:2e:03:86:22:55:68:36:09:17:62:3b:d1: 20:98:4c:b3:49:5c:2d:a6:86:0c:8f:41:51:d7:20: 95:44:b6:91:3e:d9:82:6f:8e:e7:f4:39:57:bf:07: 96:29:8a:a6:b5:ce:45:ab:de:74:c7:36:49:33:99: 56:74:a7:1c:a2:00:52:9c:3a:3d:ba:56:3f:53:69: da:ff:14:08:db:af:a8:2f:ff:af:31:14:73:d9:58: 2e:cf:15:57:f8:3d:61:62:1d:c7:e0:27:27:4a:e9: b1:5b:51:2d:01:56:75:a2:c2:39:cc:21:c1:eb:df: 59:4e:b2:7a:d5:fc:6a:56:e6:42:6a:25:23:82:92: 57:85:24:80:71:55:f1:bc:32:73:e0:a9:f2:90:94: 54:5d:fc:50:64:56:75:c2:ab:f2:29:41:2e:ad:b5: 9f:28:07:2b:83:22:67:a6:f1:09:69:8f:30:86:25: e7:9f:99:0b:01:35:af:79:55:60:30:2e:96:c4:5a: fe:0b:2e:88:26:a6:9e:c2:90:c0:e8:f0:7d:5a:7f: bd:cf:5b:3b:39:50:41:43:23:22:2b:1a:19:59:de: a4:ca:8d:04:3d:2d:37:8d:8e:a8:d4:5f:82:fc:0a: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CB:AD:AB:53:97:95:09:A8:64:2C:10:5D:16:0D:BA:05:55:EA:EE X509v3 Authority Key Identifier: keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9e:b9:45:6c:4c:4f:e0:44:8e:8d:95:85:bd:de:26:18:ae: f7:10:0a:66:ca:ea:50:dc:24:c0:6b:1a:92:c2:93:8c:eb:f7: 21:11:9e:01:64:4a:8a:99:82:7f:4d:c5:34:c0:cf:ed:50:99: eb:47:6a:3b:d7:77:c8:54:cd:5c:62:30:c8:b6:ff:80:be:be: ed:a8:bf:08:f2:b0:b7:09:fd:af:5e:50:68:1d:bb:63:ed:73: 99:f5:8e:e3:22:0c:b4:74:a4:8d:86:45:8c:cb:43:0e:94:1f: 07:f1:b0:42:ac:49:5d:7b:e9:c5:f6:13:39:a9:04:5b:76:c1: 5f:2a:b6:69:37:2e:e5:65:e9:12:f2:c2:46:79:b5:e0:7b:4b: de:2d:32:44:f5:4a:2f:95:f6:2b:31:e4:e0:ca:5d:72:7b:82: b6:f5:62:6c:0c:50:5e:d0:e6:e4:42:64:0f:d8:0a:8f:36:bb: a1:7a:76:5a:ae:ff:56:c6:21:f7:2c:f2:7e:48:75:64:19:e2: 65:e5:76:02:6c:23:8c:6a:8c:bb:48:9a:d6:2e:46:b4:29:0b: 16:e2:b3:f9:f6:cf:27:83:da:79:67:23:c1:97:ba:72:b8:17: b0:c5:ce:0d:93:64:b4:7c:9e:a1:4c:e2:bb:5c:50:66:53:16: 79:0b:79:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0 MzI2RDlEMzAeFw0yNTA1MzEwNjQ0NDFaFw0yNTA2MDcwNjQ0NDFaMBgxFjAUBgNV BAMTDTY4M2FhNTU5LWE0YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnYx+6M9Zoasz0UqtABhEfGy4DhiJVaDYJF2I70SCYTLNJXC2mhgyPQVHXIJVE tpE+2YJvjuf0OVe/B5Ypiqa1zkWr3nTHNkkzmVZ0pxyiAFKcOj26Vj9Tadr/FAjb r6gv/68xFHPZWC7PFVf4PWFiHcfgJydK6bFbUS0BVnWiwjnMIcHr31lOsnrV/GpW 5kJqJSOCkleFJIBxVfG8MnPgqfKQlFRd/FBkVnXCq/IpQS6ttZ8oByuDImem8Qlp jzCGJeefmQsBNa95VWAwLpbEWv4LLogmpp7CkMDo8H1af73PWzs5UEFDIyIrGhlZ 3qTKjQQ9LTeNjqjUX4L8ClnPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfsutq1OX lQmoZCwQXRYNugVV6u4wHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIGeuUVsTE/gRI6NlYW93iYYrvcQCmbK6lDcJMBrGpLCk4zr9yERngFk SoqZgn9NxTTAz+1QmetHajvXd8hUzVxiMMi2/4C+vu2ovwjysLcJ/a9eUGgdu2Pt c5n1juMiDLR0pI2GRYzLQw6UHwfxsEKsSV176cX2EzmpBFt2wV8qtmk3LuVl6RLy wkZ5teB7S94tMkT1Si+V9isx5ODKXXJ7grb1YmwMUF7Q5uRCZA/YCo82u6F6dlqu /1bGIfcs8n5IdWQZ4mXldgJsI4xqjLtImtYuRrQpCxbis/n2zyeD2nlnI8GXunK4 F7DFzg2TZLR8nqFM4rtcUGZTFnkLeag= -----END CERTIFICATE-----Generated at Sat May 31 16:29:31 2025 by rpki-client