$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: XgpA3zdpipOVSrP+b9Z+pL/RlbF3q9WFoxf1LhleJ80= Subject key identifier: 96:56:E4:EE:86:DC:A6:76:70:2C:B3:27:F4:84:35:43:8F:91:98:5D Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:03:10 +0000 Manifest this update: Sat 31 May 2025 07:03:09 +0000 Manifest next update: Sat 07 Jun 2025 07:03:09 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: o4tuE9lcHAYdz+k8FS15MO69hysgfZdQ/9wd9G9SoKU=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: u8mLTgdlzLOcst0PW7RFWtPWXwp8xBwUEW3SQOngh5k=) 3: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (hash: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: May 31 07:03:09 2025 GMT Not After : Jun 7 07:03:09 2025 GMT Subject: CN=683aa9ae-5155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:8e:ca:ed:2a:87:cb:b8:45:c5:0d:d3:1f: 44:5a:ac:ac:e6:dd:b0:af:62:b4:3a:05:7d:50:de: cf:94:18:9d:50:76:b9:ca:5d:0c:b9:5c:bd:17:a2: 15:57:93:0a:cf:e3:9b:4e:c5:c3:ca:24:ca:13:41: 67:06:94:00:d2:21:96:31:1c:90:e0:f5:f4:f9:09: 5c:c4:f2:ad:05:1f:f1:53:6c:64:3b:fc:c3:e0:74: 79:57:81:ef:bc:67:50:4c:b1:2e:e6:59:c9:2a:98: ea:37:12:f8:ef:cc:41:55:90:81:a7:a8:53:3f:56: 6e:69:f8:8c:4e:b4:c6:c9:17:99:55:d4:82:ae:2c: d6:3c:9d:a6:35:a8:d3:52:81:e6:b5:9d:bf:d0:22: 30:20:f1:1d:c3:3f:f5:28:04:17:b8:1f:1d:e2:f2: da:e2:12:55:7c:70:e0:a6:7d:45:25:ca:f3:21:f0: 26:1f:37:28:ca:a6:74:07:f5:41:8b:bc:12:43:83: 84:e4:c8:82:2b:50:7b:9c:48:ce:b3:6e:88:b0:8b: 22:42:88:c0:a1:ed:c6:f5:51:39:9e:f3:74:d9:94: 02:e0:1a:65:58:c1:7f:52:1d:b0:d4:51:0e:17:a7: a9:d2:75:4c:95:58:72:5d:bd:70:b3:6c:02:68:12: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:56:E4:EE:86:DC:A6:76:70:2C:B3:27:F4:84:35:43:8F:91:98:5D X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:34:b5:05:6a:6f:3f:c8:10:a8:3e:db:51:ea:d9:c3:3e:63: f4:67:8f:54:6f:a7:c7:99:02:0e:d8:43:0f:81:82:e3:5a:32: 84:a5:3e:bf:2a:a0:85:95:f3:08:38:ae:96:67:c9:15:00:55: 0d:05:1c:b3:6a:98:42:bf:6f:44:80:82:a8:65:3f:8c:96:98: 8c:90:09:0c:aa:7a:75:d5:34:82:62:c3:75:54:d4:b0:ce:8a: c1:ed:3d:e2:6e:82:45:60:0c:9a:b8:78:93:df:46:3f:a9:30: 09:be:6c:12:59:92:16:76:65:e0:d0:67:2b:a6:44:a7:ae:11: de:49:2c:ae:46:04:03:54:51:70:8e:98:5e:fa:0d:2c:08:7f: 50:ad:99:1b:9c:5e:7b:10:29:c6:ac:d4:6b:70:fb:e7:b7:53: e2:3e:85:81:be:1a:03:d5:49:5d:7e:22:52:cc:ff:9b:e8:6e: fa:fd:0f:2b:58:8b:f0:5d:01:6c:37:84:f0:b8:2c:e9:1f:f4: 0e:b4:a3:d0:63:3c:af:5d:54:45:4c:01:18:d2:a7:d0:a5:f0: 2d:f4:b4:64:19:d0:69:e1:68:15:79:58:20:c3:b6:b0:fa:94: 01:ae:80:76:6b:dd:96:55:b9:62:00:95:68:a6:1b:6d:44:a2: 2a:ad:d8:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA1MzEwNzAzMDlaFw0yNTA2MDcwNzAzMDlaMBgxFjAUBgNV BAMTDTY4M2FhOWFlLTUxNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIPI7K7SqHy7hFxQ3TH0RarKzm3bCvYrQ6BX1Q3s+UGJ1QdrnKXQy5XL0XohVX kwrP45tOxcPKJMoTQWcGlADSIZYxHJDg9fT5CVzE8q0FH/FTbGQ7/MPgdHlXge+8 Z1BMsS7mWckqmOo3EvjvzEFVkIGnqFM/Vm5p+IxOtMbJF5lV1IKuLNY8naY1qNNS gea1nb/QIjAg8R3DP/UoBBe4Hx3i8triElV8cOCmfUUlyvMh8CYfNyjKpnQH9UGL vBJDg4TkyIIrUHucSM6zboiwiyJCiMCh7cb1UTme83TZlALgGmVYwX9SHbDUUQ4X p6nSdUyVWHJdvXCzbAJoEihLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUllbk7obc pnZwLLMn9IQ1Q4+RmF0wHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALw0tQVqbz/IEKg+21Hq2cM+Y/Rnj1Rvp8eZAg7YQw+BguNaMoSlPr8q oIWV8wg4rpZnyRUAVQ0FHLNqmEK/b0SAgqhlP4yWmIyQCQyqenXVNIJiw3VU1LDO isHtPeJugkVgDJq4eJPfRj+pMAm+bBJZkhZ2ZeDQZyumRKeuEd5JLK5GBANUUXCO mF76DSwIf1CtmRucXnsQKcas1Gtw++e3U+I+hYG+GgPVSV1+IlLM/5vobvr9DytY i/BdAWw3hPC4LOkf9A60o9BjPK9dVEVMARjSp9Cl8C30tGQZ0GnhaBV5WCDDtrD6 lAGugHZr3ZZVuWIAlWimG21Eoiqt2EQ= -----END CERTIFICATE-----Generated at Sat May 31 17:44:08 2025 by rpki-client