$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: t0GeIxkZrabAJ1pDVS/kwDa0D7q/d5X/IckkOsVJ3PY= Subject key identifier: E3:24:9D:ED:22:AC:DE:11:CD:2A:51:28:06:D8:CF:D7:52:96:39:05 Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 0A3F Signing time: Fri 30 May 2025 20:42:07 +0000 Manifest this update: Fri 30 May 2025 20:42:06 +0000 Manifest next update: Fri 06 Jun 2025 20:42:06 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: S0570DG0lP7TD1JTtyFQwEg6XHcqRlL9G0xL2NNICZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: May 30 20:42:06 2025 GMT Not After : Jun 6 20:42:06 2025 GMT Subject: CN=683a181f-d275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:cc:87:10:b3:f4:a5:62:5e:e5:a5:17:e8: eb:fa:49:4c:dd:20:37:66:fe:2a:ec:c9:55:5c:4f: de:17:54:16:ea:67:bf:83:2a:19:fd:85:ed:31:a7: 56:f7:f1:72:c3:b6:06:a5:65:64:34:3c:4c:28:83: 64:78:34:a6:8b:ec:7d:69:2f:ad:0c:b2:c3:e3:fb: ce:05:cd:27:d6:18:09:79:19:25:9c:85:53:dd:ac: 9e:2b:3f:49:f8:91:df:a1:ed:1d:2e:05:49:db:9b: e9:07:97:06:39:2d:b8:50:e3:86:21:44:5d:e9:79: 68:19:ce:ec:c3:df:68:0c:cd:d8:9e:2b:6e:ee:d0: b7:fd:58:62:32:98:6a:c0:d1:0e:49:85:ea:29:c0: 77:d6:e5:cd:c1:3d:58:bf:68:b0:fc:91:cf:e8:c0: d7:92:d6:49:f4:bc:03:ca:fb:d1:1a:04:80:ef:88: 69:b0:e8:27:c1:ff:6b:7b:87:ae:de:ba:9c:d8:ce: a4:86:6c:4d:df:40:7d:f0:8f:2c:9f:61:37:b1:98: ec:55:1b:04:fb:59:7a:70:5c:3d:42:a3:24:f0:24: 0a:0b:a7:37:44:98:07:65:fb:9f:e5:8f:d6:ba:05: 34:8e:43:97:33:d0:68:bb:73:14:24:8d:8d:da:c6: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:9D:ED:22:AC:DE:11:CD:2A:51:28:06:D8:CF:D7:52:96:39:05 X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8c:d4:c1:f1:e2:a2:c5:2d:4a:8b:16:60:24:4b:00:9c:37: b0:32:f5:a4:3a:c4:52:cd:02:15:aa:1b:70:e1:b7:0d:b0:f6: ef:d9:13:5e:6b:c8:c6:14:fa:25:b2:04:60:58:e6:c2:af:60: a3:53:7b:15:e4:a3:28:b5:40:34:f4:c2:b0:e4:bc:8b:21:21: 68:51:84:14:f1:0f:ca:1d:e7:c4:ba:d0:a3:ab:c8:28:51:93: 70:e7:68:c2:26:4c:3e:9a:a5:9f:a9:1e:74:ad:1e:1b:85:5e: fd:5e:59:d8:59:c9:e8:60:c2:8d:15:d0:f9:6a:45:8c:39:0d: 79:89:f6:b2:43:21:70:1d:6c:58:a7:cb:9a:a9:67:f4:be:6b: b7:43:d6:ca:b9:02:e9:68:58:44:9b:fa:e3:34:47:44:00:e7: 83:3c:99:fd:ba:29:8a:d9:fb:7c:6b:5f:ca:68:13:8c:21:d6: 26:3f:55:2b:d9:93:b1:9a:9b:45:70:ea:1b:3f:e2:37:31:1c: e7:6c:af:c1:66:90:35:ee:cc:96:fd:7b:07:fe:5b:2c:ff:35: 55:07:a9:5c:62:e3:33:5c:db:b4:46:9c:a9:d9:85:3b:a6:c3: f3:b4:b5:c9:8d:3c:7d:cd:ae:4f:e9:96:f3:45:f1:3e:0e:ae: 40:e4:5e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjUwNTMwMjA0MjA2WhcNMjUwNjA2MjA0MjA2WjAYMRYwFAYD VQQDEw02ODNhMTgxZi1kMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00PMhxCz9KViXuWlF+jr+klM3SA3Zv4q7MlVXE/eF1QW6me/gyoZ/YXtMadW 9/Fyw7YGpWVkNDxMKINkeDSmi+x9aS+tDLLD4/vOBc0n1hgJeRklnIVT3ayeKz9J +JHfoe0dLgVJ25vpB5cGOS24UOOGIURd6XloGc7sw99oDM3Ynitu7tC3/VhiMphq wNEOSYXqKcB31uXNwT1Yv2iw/JHP6MDXktZJ9LwDyvvRGgSA74hpsOgnwf9re4eu 3rqc2M6khmxN30B98I8sn2E3sZjsVRsE+1l6cFw9QqMk8CQKC6c3RJgHZfuf5Y/W ugU0jkOXM9Bou3MUJI2N2sYR4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMkne0i rN4RzSpRKAbYz9dSljkFMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNjNTB8eKixS1KixZgJEsAnDewMvWkOsRSzQIVqhtw4bcNsPbv2RNe a8jGFPolsgRgWObCr2CjU3sV5KMotUA09MKw5LyLISFoUYQU8Q/KHefEutCjq8go UZNw52jCJkw+mqWfqR50rR4bhV79XlnYWcnoYMKNFdD5akWMOQ15ifayQyFwHWxY p8uaqWf0vmu3Q9bKuQLpaFhEm/rjNEdEAOeDPJn9uimK2ft8a1/KaBOMIdYmP1Ur 2ZOxmptFcOobP+I3MRznbK/BZpA17syW/XsH/lss/zVVB6lcYuMzXNu0Rpyp2YU7 psPztLXJjTx9za5P6ZbzRfE+Dq5A5F7m -----END CERTIFICATE-----Generated at Sat May 31 17:22:12 2025 by rpki-client