$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json) Hash identifier: 70ynifQHJmxqBWDOq8e8eda2i3EeFIaeCQGBgHJ209s= Subject key identifier: AB:8D:8F:86:03:44:FA:43:04:CC:1E:5F:5F:45:0B:A5:60:6E:7E:31 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft Manifest number: 38 Signing time: Sat 31 May 2025 07:07:28 +0000 Manifest this update: Sat 31 May 2025 07:07:28 +0000 Manifest next update: Sat 07 Jun 2025 07:07:28 +0000 Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: SRhLRGzvnejd6sT1ZchvIJb1YenO3ge8vDxIVGi+DKA=) 2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: LcUO14s0wegdTiNX+dgH1WWwhW/HYrgfbp8JINcrU+U=) 3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: FSLv08dRTBFk7OJGwtktmBOjNRJNtTBGwj1NskH7kyw=) 4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: mLH/qF33HuSxb2ZOhtlDD/C41cd08Ge05vK6Yy9o0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: May 31 07:07:28 2025 GMT Not After : Jun 7 07:07:28 2025 GMT Subject: CN=683aaab0-d187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:bc:4e:55:cc:61:d2:18:c6:86:f9:30:c7: bc:07:80:61:06:bf:be:4d:0f:90:8d:17:1a:af:17: b9:57:0d:8f:72:0e:0b:ba:18:39:df:2c:53:c6:d7: f4:af:c4:37:65:e8:cf:6b:45:3f:c8:28:f9:c6:53: 6c:f7:bc:a5:4a:12:3c:9c:08:59:37:3f:8c:cb:93: fd:3d:82:27:9d:ae:c3:f1:7d:5c:02:ad:b2:f4:52: fb:68:90:07:c5:e2:27:72:7a:d7:21:49:bd:b9:11: bb:97:99:8a:2f:be:3a:69:55:a0:ba:f5:81:bf:cc: a2:a3:b0:0e:b1:50:c1:d7:d1:07:0a:c4:54:6b:3d: 05:a5:4e:bc:17:1d:7f:e7:84:07:e3:bb:ad:f9:0f: 45:29:93:32:fe:77:16:37:57:bc:de:0b:00:07:2d: 7b:b4:ff:12:58:1a:5e:74:31:9d:55:88:19:09:34: bf:76:4f:29:e1:e0:1f:eb:4d:d0:42:7a:8c:b1:ab: 0a:da:97:28:e9:30:39:d0:2a:64:3c:4f:7e:a3:9b: b6:e7:f6:d4:f2:e4:d5:25:c8:67:0e:37:53:19:83: 96:7d:87:44:4c:14:3f:03:5c:4e:9d:5d:d1:62:f9: d4:40:08:37:9a:f7:01:f2:0b:8d:ff:95:08:db:c2: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8D:8F:86:03:44:FA:43:04:CC:1E:5F:5F:45:0B:A5:60:6E:7E:31 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:bc:39:fd:e8:c6:9e:a9:b3:a8:0b:d8:4e:cd:03:4d:5e:b0: 3e:61:14:92:85:0c:6c:44:57:d3:0f:55:0d:c1:b6:c3:42:00: f5:02:99:f0:c1:8f:9f:f4:b2:1d:54:15:4e:4b:06:f1:f7:d6: f2:d7:8e:df:84:4a:85:d4:c2:fa:16:74:60:1c:14:d3:46:57: d0:63:f5:a7:3e:39:63:dc:71:25:d9:2f:54:69:e1:3a:54:6e: 0b:0c:74:af:bb:11:0b:f0:e6:2e:3a:73:16:10:49:ac:25:b0: 7b:36:b4:ed:a7:ac:c6:a5:d9:c4:7f:be:5a:8b:87:5a:59:a3: 97:ae:da:90:98:b5:5d:cf:fe:a1:94:f9:13:2a:6c:13:1b:a7: 2b:5e:18:c4:c3:9e:50:69:e3:eb:5b:76:90:8b:0f:f4:a9:6c: 3f:7f:07:5f:04:6e:c7:3d:b6:2f:a4:69:20:d3:7a:e5:09:2b: 95:25:c8:1b:de:8e:ec:68:7e:65:bb:29:26:30:db:e2:c8:00: 33:15:88:c6:15:b6:81:54:d8:fc:08:91:f3:5b:47:3a:7f:7d: 8f:52:88:1c:1d:22:14:be:7f:02:10:59:28:42:4b:5b:d5:41: bd:ae:d1:26:2b:a3:13:83:b2:9c:c4:9c:03:d6:23:11:a2:13: fb:af:d9:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTA1MzEwNzA3MjhaFw0yNTA2MDcwNzA3MjhaMBgxFjAUBgNV BAMTDTY4M2FhYWIwLWQxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGJbxOVcxh0hjGhvkwx7wHgGEGv75ND5CNFxqvF7lXDY9yDgu6GDnfLFPG1/Sv xDdl6M9rRT/IKPnGU2z3vKVKEjycCFk3P4zLk/09giedrsPxfVwCrbL0UvtokAfF 4idyetchSb25EbuXmYovvjppVaC69YG/zKKjsA6xUMHX0QcKxFRrPQWlTrwXHX/n hAfju635D0UpkzL+dxY3V7zeCwAHLXu0/xJYGl50MZ1ViBkJNL92Tynh4B/rTdBC eoyxqwralyjpMDnQKmQ8T36jm7bn9tTy5NUlyGcON1MZg5Z9h0RMFD8DXE6dXdFi +dRACDea9wHyC43/lQjbwjcFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq42PhgNE +kMEzB5fX0ULpWBufjEwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF MUZDLzVCMzI1RkE2RTlCOTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZt SlVneDZVWmNULXpwb3luNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKq8Of3oxp6ps6gL2E7NA01esD5hFJKFDGxEV9MPVQ3BtsNCAPUCmfDB j5/0sh1UFU5LBvH31vLXjt+ESoXUwvoWdGAcFNNGV9Bj9ac+OWPccSXZL1Rp4TpU bgsMdK+7EQvw5i46cxYQSawlsHs2tO2nrMal2cR/vlqLh1pZo5eu2pCYtV3P/qGU +RMqbBMbpyteGMTDnlBp4+tbdpCLD/SpbD9/B18Ebsc9ti+kaSDTeuUJK5UlyBve juxofmW7KSYw2+LIADMViMYVtoFU2PwIkfNbRzp/fY9SiBwdIhS+fwIQWShCS1vV Qb2u0SYroxODspzEnAPWIxGiE/uv2R4= -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client