$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: vyOIFt13sH/GAdEQOk+J9s3yLUa95hSXWoBUfi6X18g= Subject key identifier: 4B:06:91:FB:CB:57:C1:18:B3:7B:AC:44:FB:36:E0:F9:4E:39:E9:EB Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 0173 Signing time: Sat 31 May 2025 03:27:54 +0000 Manifest this update: Sat 31 May 2025 03:27:54 +0000 Manifest next update: Sat 07 Jun 2025 03:27:53 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: +PmE8pPr2i+b8/eQjkcd5vWqjmq7W9m2dIWMEefk4mY=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: dHhZT58EPueclWY/wjCtwq28vLwEg1BiZyhs8/2Uyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: May 31 03:27:54 2025 GMT Not After : Jun 7 03:27:53 2025 GMT Subject: CN=683a773a-d972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:88:32:41:e1:21:fa:87:2d:1c:e4:13:db: a5:d7:39:d4:0d:7e:d8:6e:1a:8e:33:95:42:40:c6: ed:91:6a:87:3a:20:1e:bc:50:f8:53:bb:96:84:71: 07:6c:ba:66:d8:b3:bf:c0:5a:68:88:17:8a:d1:5b: 28:c5:f0:de:a0:e9:d9:6f:3d:d9:97:c1:61:79:03: b9:2e:41:04:6e:6a:89:7f:d4:e0:ff:ab:75:76:9a: 72:35:58:c2:f0:af:8b:db:7b:4f:65:37:c2:e0:3a: 86:16:bd:52:07:b9:f0:a3:01:a1:56:89:ee:5e:dc: b8:5a:c9:d7:97:76:54:33:8f:16:6a:cf:ce:87:d9: 3a:ec:f0:43:53:32:b3:ab:be:48:e6:00:25:83:4d: ae:4c:9c:84:11:18:cd:de:63:9e:3c:c1:c2:ee:74: a8:ac:c0:76:47:05:97:ce:c0:e2:6c:15:5d:b5:49: e9:41:a2:e3:62:a5:fe:5f:80:08:64:87:b3:06:e1: 00:51:40:ec:06:e9:87:3f:29:f7:60:83:fa:b6:e0: 87:db:d5:b8:ba:f1:84:85:89:5d:6d:95:47:b9:c8: 3f:6f:43:28:d4:1e:df:90:b3:74:d8:3a:10:28:8f: ad:42:b5:21:27:f0:1a:1a:70:68:27:2f:f4:29:3e: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:91:FB:CB:57:C1:18:B3:7B:AC:44:FB:36:E0:F9:4E:39:E9:EB X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d6:52:53:4a:9e:79:41:69:1c:79:3d:d4:31:71:17:54:88: 3a:49:52:8a:63:62:93:da:7a:72:d0:d2:72:9a:64:11:15:07: c4:c0:4f:1d:6e:9b:bc:7b:0a:b8:f4:f0:81:29:84:55:2c:89: 13:50:f3:21:16:2a:ba:22:dc:18:5c:a8:2d:76:35:4c:f1:0e: 2b:0c:0b:01:27:d9:ee:8f:8f:85:b8:35:19:63:25:63:37:f1: 5f:e1:1e:d5:9d:bd:b8:f4:29:ed:20:3a:8a:18:c1:42:e0:ac: ba:bb:38:f4:d3:22:1d:ce:10:bc:47:6f:f0:94:57:e5:f1:3d: 3b:1b:5a:6f:e5:91:09:55:af:d3:9e:54:67:ea:97:1a:f1:6f: fa:10:d3:98:38:44:70:72:58:d5:d8:30:00:e2:40:e3:e6:98: e2:b3:b3:37:b9:e2:30:e4:39:85:d7:d9:04:42:a0:9f:85:10: 82:03:b4:57:15:97:c5:b7:ba:5e:1f:34:7c:d9:12:f0:6b:db: de:1c:3c:38:45:62:73:66:c4:71:b3:d5:3b:c4:22:4c:1b:fb: 15:4e:8d:42:38:c6:1a:5b:d9:32:2b:c5:85:05:24:86:47:aa: 9d:84:40:c0:b1:19:81:82:2c:c2:ae:16:be:ed:ef:1c:67:02: 60:f9:6c:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjUwNTMxMDMyNzU0WhcNMjUwNjA3MDMyNzUzWjAYMRYwFAYD VQQDEw02ODNhNzczYS1kOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7uIMkHhIfqHLRzkE9ul1znUDX7YbhqOM5VCQMbtkWqHOiAevFD4U7uWhHEH bLpm2LO/wFpoiBeK0VsoxfDeoOnZbz3Zl8FheQO5LkEEbmqJf9Tg/6t1dppyNVjC 8K+L23tPZTfC4DqGFr1SB7nwowGhVonuXty4WsnXl3ZUM48Was/Oh9k67PBDUzKz q75I5gAlg02uTJyEERjN3mOePMHC7nSorMB2RwWXzsDibBVdtUnpQaLjYqX+X4AI ZIezBuEAUUDsBumHPyn3YIP6tuCH29W4uvGEhYldbZVHucg/b0Mo1B7fkLN02DoQ KI+tQrUhJ/AaGnBoJy/0KT5McQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsGkfvL V8EYs3usRPs24PlOOenrMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ1lJTSp55QWkceT3UMXEXVIg6SVKKY2KT2npy0NJymmQRFQfEwE8d bpu8ewq49PCBKYRVLIkTUPMhFiq6ItwYXKgtdjVM8Q4rDAsBJ9nuj4+FuDUZYyVj N/Ff4R7Vnb249CntIDqKGMFC4Ky6uzj00yIdzhC8R2/wlFfl8T07G1pv5ZEJVa/T nlRn6pca8W/6ENOYOERwcljV2DAA4kDj5pjis7M3ueIw5DmF19kEQqCfhRCCA7RX FZfFt7peHzR82RLwa9veHDw4RWJzZsRxs9U7xCJMG/sVTo1COMYaW9kyK8WFBSSG R6qdhEDAsRmBgizCrha+7e8cZwJg+Wz+ -----END CERTIFICATE-----Generated at Sat May 31 14:39:50 2025 by rpki-client