$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: 2R2uKbuSyJZ0rzy5FT/4qeM5ExrtZk4iA8YwSut+2FI= Subject key identifier: B5:6D:06:FC:33:D6:02:44:39:58:0D:06:89:F1:D2:25:B0:87:7D:89 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 016F Signing time: Sat 31 May 2025 03:32:15 +0000 Manifest this update: Sat 31 May 2025 03:32:15 +0000 Manifest next update: Sat 07 Jun 2025 03:32:15 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: FJPEkiO7xjrKpexE2z7p/dNq9KUrvD+g58pyYniwIqo=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: May 31 03:32:15 2025 GMT Not After : Jun 7 03:32:15 2025 GMT Subject: CN=683a783f-6875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:dd:65:dc:7b:1a:ff:59:f6:dc:f8:f8:f4: f5:1f:a3:39:99:e2:fe:8c:a6:c8:b3:1a:c3:0a:a4: b1:1d:b3:0e:44:46:90:e3:30:73:96:2b:32:83:c4: d6:7b:f9:d4:9c:36:f1:63:ef:d9:be:9c:82:b6:a7: 10:3a:16:c5:0d:2e:aa:6f:e3:62:78:b3:94:0e:33: f4:28:ff:c9:62:af:eb:e2:57:25:34:e2:d2:e7:79: d6:4c:a9:3f:9c:0a:26:57:ab:ea:e9:6b:e7:15:b1: 72:9b:c9:45:f2:65:3d:96:5d:b7:35:be:d6:ed:df: a3:b3:f7:83:9c:d7:35:1f:12:60:8c:d4:3c:18:3b: ee:7d:32:f9:46:ac:e4:9b:97:8a:6c:50:0e:97:94: 7b:d9:de:22:c8:ee:2e:04:65:b2:67:f0:47:eb:f7: 6a:ac:97:3a:77:c0:3b:8c:29:47:ca:8f:1f:58:56: 85:9d:e6:64:67:aa:0b:03:5b:7a:57:3b:ea:c3:f2: 34:4f:a8:41:08:1c:55:77:f7:81:35:94:48:d1:01: 7a:14:46:2f:8c:48:2b:c0:a7:f6:c5:5f:26:b4:51: b9:9e:6b:06:57:80:6e:fb:db:ca:3a:87:dc:04:f9: 1b:3a:dc:5f:b7:fb:1d:f4:83:bb:f7:ca:48:65:0f: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:06:FC:33:D6:02:44:39:58:0D:06:89:F1:D2:25:B0:87:7D:89 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ab:2a:e7:c5:c3:ea:8f:d5:bd:15:90:1e:ad:6e:ca:0c:1a: c0:60:c9:de:b1:82:a3:8c:bf:e6:77:1c:01:43:07:fb:26:00: fe:b4:d4:77:2c:43:ec:2e:57:ec:53:75:00:f2:62:78:49:9d: e3:46:d5:ad:d3:f5:0f:7c:eb:fc:5f:0e:b3:a3:b3:4a:08:ef: 22:71:0d:56:5a:22:83:2c:a9:5d:0f:1d:d6:30:cb:85:d5:47: 24:dc:06:12:e7:2a:cd:7c:6b:2a:38:b2:f4:b0:a8:cb:b0:1f: 01:7c:f8:c5:22:36:43:25:99:8e:e0:c6:92:96:0c:c5:78:07: 73:11:e2:2e:33:9b:ec:d9:e1:01:ee:7a:fa:fe:20:27:12:d2: 96:5e:7f:13:05:78:03:9e:b5:4a:e0:c2:29:6d:3c:87:6b:f7: d9:37:44:19:f2:01:d4:a2:65:02:f4:9a:7a:ba:88:7e:66:d6: c8:79:43:8d:95:0b:ef:9d:53:3b:4c:47:f3:dd:4f:f9:be:29: e8:13:d7:50:f4:e0:bd:a7:2a:c7:03:f7:31:c9:1a:66:22:93: a6:bb:0e:b8:9c:ce:39:0a:68:d2:fc:36:a0:fd:bc:c9:87:48: ed:37:4f:ea:3d:54:55:c6:13:f1:a0:c6:94:28:3b:31:e5:2f: 1e:8a:7e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwNTMxMDMzMjE1WhcNMjUwNjA3MDMzMjE1WjAYMRYwFAYD VQQDEw02ODNhNzgzZi02ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkndZdx7Gv9Z9tz4+PT1H6M5meL+jKbIsxrDCqSxHbMOREaQ4zBzlisyg8TW e/nUnDbxY+/ZvpyCtqcQOhbFDS6qb+NieLOUDjP0KP/JYq/r4lclNOLS53nWTKk/ nAomV6vq6WvnFbFym8lF8mU9ll23Nb7W7d+js/eDnNc1HxJgjNQ8GDvufTL5Rqzk m5eKbFAOl5R72d4iyO4uBGWyZ/BH6/dqrJc6d8A7jClHyo8fWFaFneZkZ6oLA1t6 Vzvqw/I0T6hBCBxVd/eBNZRI0QF6FEYvjEgrwKf2xV8mtFG5nmsGV4Bu+9vKOofc BPkbOtxft/sd9IO798pIZQ9LdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVtBvwz 1gJEOVgNBonx0iWwh32JMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApqyrnxcPqj9W9FZAerW7KDBrAYMnesYKjjL/mdxwBQwf7JgD+tNR3 LEPsLlfsU3UA8mJ4SZ3jRtWt0/UPfOv8Xw6zo7NKCO8icQ1WWiKDLKldDx3WMMuF 1Uck3AYS5yrNfGsqOLL0sKjLsB8BfPjFIjZDJZmO4MaSlgzFeAdzEeIuM5vs2eEB 7nr6/iAnEtKWXn8TBXgDnrVK4MIpbTyHa/fZN0QZ8gHUomUC9Jp6uoh+ZtbIeUON lQvvnVM7TEfz3U/5vinoE9dQ9OC9pyrHA/cxyRpmIpOmuw64nM45CmjS/Dag/bzJ h0jtN0/qPVRVxhPxoMaUKDsx5S8ein7N -----END CERTIFICATE-----Generated at Sat May 31 17:56:19 2025 by rpki-client