$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: /z+IAQKaovbsa4svvEjUvbUCH/YyTLlpD8LmTXpteyg= Subject key identifier: 2F:4B:C1:90:3D:74:DE:89:05:5E:C1:EC:54:B5:4B:E8:36:D5:EA:2A Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 0789 Signing time: Mon 02 Jun 2025 21:33:25 +0000 Manifest this update: Mon 02 Jun 2025 21:33:24 +0000 Manifest next update: Mon 09 Jun 2025 21:33:24 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: oRSRm4xtp3JFoY1HbRH5QmwX6g1fDf/XFhpuPvCjjJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Jun 2 21:33:24 2025 GMT Not After : Jun 9 21:33:24 2025 GMT Subject: CN=683e18a4-ef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:65:f8:0b:99:6d:34:7e:bc:fb:49:f0:5d: 25:fb:dc:4d:aa:9b:2b:9c:35:e9:12:ba:5e:62:05: 58:59:88:04:f1:c8:e7:39:71:b1:0f:a9:ca:ad:28: 73:dd:cf:cb:bd:49:57:ad:6b:74:97:f8:9c:7c:44: e3:15:2e:b3:36:ea:9c:0b:df:0c:fb:f9:3f:d9:c7: 13:ed:7c:98:bf:58:52:7d:f9:73:71:28:e6:93:b3: 6d:b0:ee:7a:63:41:e3:3f:68:3c:3d:07:82:ca:3d: 19:c1:8c:c2:30:5e:84:96:d7:19:8d:a3:16:64:71: 24:ae:54:e5:31:01:d2:d4:53:3b:bd:0f:67:7c:59: 68:48:91:c8:de:29:a9:d4:1f:06:7b:b9:c0:e2:26: 2b:5d:01:ed:df:e6:b8:47:47:7e:81:b7:9c:b9:08: 0f:7f:db:3b:58:eb:10:90:14:34:d1:74:c9:92:7c: 99:e4:b4:89:50:72:04:0d:db:3a:7d:10:f7:bc:9d: a7:88:5b:09:44:a9:c3:ce:3b:b0:98:b3:d7:2d:a6: 7b:16:0a:51:e7:9c:6d:7a:82:50:52:bb:53:30:d8: d6:8e:19:9d:98:06:77:27:fd:72:b4:25:09:fb:9e: 1a:cf:ed:6a:33:33:a0:73:80:41:a4:6c:a1:18:11: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4B:C1:90:3D:74:DE:89:05:5E:C1:EC:54:B5:4B:E8:36:D5:EA:2A X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:9d:3c:eb:96:3d:ea:a3:1d:94:d3:a2:22:fd:72:e0:5d:00: c5:34:81:89:be:6f:bc:ba:b3:99:8c:13:9e:6f:e2:13:5f:2e: 63:1a:d2:57:27:1f:8f:91:8d:b6:53:86:03:2b:60:f9:de:7e: e5:3f:d3:be:69:41:7f:ce:c3:e6:ef:a5:3b:64:1e:f3:f6:8f: 8e:9c:d5:52:76:5f:9f:06:23:ec:68:4c:d6:45:6b:ec:0a:57: 33:6c:17:c6:82:b9:10:87:cf:5e:c2:37:fb:fe:8b:f8:38:08: dd:ad:51:e6:3a:23:01:00:f6:71:9b:86:1d:93:d3:ef:2a:c2: 3f:61:64:66:0e:0d:4c:0f:63:2b:42:91:95:f4:17:c2:7a:f2: aa:d1:15:bd:4f:a0:60:b9:f3:5b:49:6f:1d:94:1c:cc:ef:da: 16:f2:b6:93:0a:a0:5c:2f:31:14:55:32:ff:2c:f3:f3:86:88: e9:23:d1:ec:5d:92:8f:52:68:6f:c8:46:76:c7:f4:79:3b:3e: df:23:32:ac:98:62:94:03:9b:54:29:71:77:bd:43:30:4a:d3: 55:68:fb:71:c5:93:03:c2:72:2a:6e:6d:7b:f3:f1:0c:3f:3f: 56:b5:4f:7f:40:26:4d:03:24:ad:75:7d:94:b9:d9:9e:08:42: fc:36:18:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwNjAyMjEzMzI0WhcNMjUwNjA5MjEzMzI0WjAYMRYwFAYD VQQDEw02ODNlMThhNC1lZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0dl+AuZbTR+vPtJ8F0l+9xNqpsrnDXpErpeYgVYWYgE8cjnOXGxD6nKrShz 3c/LvUlXrWt0l/icfETjFS6zNuqcC98M+/k/2ccT7XyYv1hSfflzcSjmk7NtsO56 Y0HjP2g8PQeCyj0ZwYzCMF6EltcZjaMWZHEkrlTlMQHS1FM7vQ9nfFloSJHI3imp 1B8Ge7nA4iYrXQHt3+a4R0d+gbecuQgPf9s7WOsQkBQ00XTJknyZ5LSJUHIEDds6 fRD3vJ2niFsJRKnDzjuwmLPXLaZ7FgpR55xteoJQUrtTMNjWjhmdmAZ3J/1ytCUJ +54az+1qMzOgc4BBpGyhGBET/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9LwZA9 dN6JBV7B7FS1S+g21eoqMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgnTzrlj3qox2U06Ii/XLgXQDFNIGJvm+8urOZjBOeb+ITXy5jGtJX Jx+PkY22U4YDK2D53n7lP9O+aUF/zsPm76U7ZB7z9o+OnNVSdl+fBiPsaEzWRWvs ClczbBfGgrkQh89ewjf7/ov4OAjdrVHmOiMBAPZxm4Ydk9PvKsI/YWRmDg1MD2Mr QpGV9BfCevKq0RW9T6BgufNbSW8dlBzM79oW8raTCqBcLzEUVTL/LPPzhojpI9Hs XZKPUmhvyEZ2x/R5Oz7fIzKsmGKUA5tUKXF3vUMwStNVaPtxxZMDwnIqbm178/EM Pz9WtU9/QCZNAyStdX2UudmeCEL8NhgL -----END CERTIFICATE-----Generated at Tue Jun 3 23:57:22 2025 by rpki-client