$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: SEL9pW3b6rppz83x+wwqRyX6xi0GLMkfYDnzSZakAAg= Subject key identifier: C8:C2:C1:3A:DB:C5:64:B1:B6:25:17:88:DE:D4:5F:B5:F2:4C:AE:27 Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 28 Signing time: Sat 31 May 2025 07:22:58 +0000 Manifest this update: Sat 31 May 2025 07:22:58 +0000 Manifest next update: Sat 07 Jun 2025 07:22:58 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: 5a0+lq+V7M2dEpXC+82JrQP65KvlieNvjH3rkRc2Itk=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: May 31 07:22:58 2025 GMT Not After : Jun 7 07:22:58 2025 GMT Subject: CN=683aae52-b64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:31:02:fc:82:c6:d3:bc:28:bd:f5:1f:fb: 89:9d:8a:59:80:ef:aa:8d:2b:57:c4:ed:98:75:7d: 7e:86:c0:b9:1f:8d:20:f5:55:a3:f5:ed:74:dd:05: 64:82:5c:fd:d0:e1:41:2f:2e:da:09:41:c3:47:4c: 5f:11:4d:19:0f:89:21:cf:76:27:64:cb:b1:94:de: 85:0a:1b:41:95:ed:d1:e1:47:c5:d8:c4:d4:3b:02: 68:64:cd:eb:53:53:90:3b:a6:c8:d3:97:fe:e2:7b: c0:75:57:94:16:c0:e6:fb:d6:20:54:5b:2c:6c:12: d7:93:26:49:0a:5c:5f:bc:5e:bf:8a:98:cb:a6:80: 0e:88:8a:c0:18:09:4b:fa:07:42:6b:f4:3e:cc:71: dd:aa:64:65:c1:87:a2:a3:d0:b9:8f:a1:00:33:e4: 26:89:a7:0a:80:e4:3f:3a:5b:24:ab:13:00:ff:1a: 9f:63:3c:67:6f:4e:ce:f5:e3:eb:a6:8f:3c:9f:52: 12:9d:f0:2a:fa:f0:07:b1:01:e1:a9:9a:a1:32:a5: 09:47:16:70:1d:ce:40:54:75:fa:e1:7a:b8:5c:2e: 00:52:09:a3:9b:53:80:04:75:fc:7b:4f:12:58:99: c5:84:70:cf:d6:be:1c:44:5c:42:bd:1f:a0:06:6a: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:C1:3A:DB:C5:64:B1:B6:25:17:88:DE:D4:5F:B5:F2:4C:AE:27 X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:3e:30:da:4e:ff:45:d8:0e:3d:84:df:b7:39:51:89:7c: 19:ad:d4:28:4d:91:62:56:d7:53:2e:0c:1c:9e:45:06:3a:8a: 6e:2e:0c:da:10:7b:51:50:30:16:4c:d5:31:ad:bf:3e:48:03: 18:38:12:bd:c1:f6:de:f4:6b:2a:53:35:88:52:90:83:3d:ea: e8:b2:1e:84:74:d7:18:f6:4d:4e:ac:5e:ca:36:f9:9f:2e:67: 9a:ce:ae:58:6e:49:97:d2:b5:88:04:3b:60:eb:40:7d:db:21: 63:d7:58:ea:cd:b4:95:f0:13:9d:4f:0a:19:3c:da:09:68:70: fe:35:ca:b5:c4:9c:1a:39:28:f7:b4:38:73:44:f0:38:a7:d1: fd:14:d7:4c:82:b8:11:04:5b:a6:d6:0e:17:27:64:8a:50:a5: 9a:b5:2a:bd:c8:83:a7:c2:75:fd:67:43:7f:af:79:ff:96:aa: 5e:d6:c4:fa:6b:5c:7f:a1:da:88:06:f0:1e:d7:37:16:1b:a3: 4c:bb:52:69:6b:ee:49:cf:1b:fc:1f:d5:ae:c9:83:bf:76:9f: 05:8d:85:57:d4:68:17:11:f9:1f:c1:b1:1a:e1:02:a9:96:3c: ff:46:58:b2:86:06:e7:c0:e2:ed:60:6d:80:c0:6a:0d:fd:3f: 2a:d7:60:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA1MzEwNzIyNThaFw0yNTA2MDcwNzIyNThaMBgxFjAUBgNV BAMTDTY4M2FhZTUyLWI2NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZuzEC/ILG07wovfUf+4mdilmA76qNK1fE7Zh1fX6GwLkfjSD1VaP17XTdBWSC XP3Q4UEvLtoJQcNHTF8RTRkPiSHPdidky7GU3oUKG0GV7dHhR8XYxNQ7AmhkzetT U5A7psjTl/7ie8B1V5QWwOb71iBUWyxsEteTJkkKXF+8Xr+KmMumgA6IisAYCUv6 B0Jr9D7Mcd2qZGXBh6Kj0LmPoQAz5CaJpwqA5D86WySrEwD/Gp9jPGdvTs714+um jzyfUhKd8Cr68AexAeGpmqEypQlHFnAdzkBUdfrherhcLgBSCaObU4AEdfx7TxJY mcWEcM/WvhxEXEK9H6AGasBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyMLBOtvF ZLG2JReI3tRftfJMricwHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBXPjDaTv9F2A49hN+3OVGJfBmt1ChNkWJW11MuDByeRQY6im4uDNoQ e1FQMBZM1TGtvz5IAxg4Er3B9t70aypTNYhSkIM96uiyHoR01xj2TU6sXso2+Z8u Z5rOrlhuSZfStYgEO2DrQH3bIWPXWOrNtJXwE51PChk82glocP41yrXEnBo5KPe0 OHNE8Din0f0U10yCuBEEW6bWDhcnZIpQpZq1Kr3Ig6fCdf1nQ3+vef+Wql7WxPpr XH+h2ogG8B7XNxYbo0y7Umlr7knPG/wf1a7Jg792nwWNhVfUaBcR+R/BsRrhAqmW PP9GWLKGBufA4u1gbYDAag39PyrXYM4= -----END CERTIFICATE-----Generated at Sat May 31 17:42:40 2025 by rpki-client