$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: RJ+LhZJ98jkbBR3frKdFwg+R4WPr2AHVivapJd7KmwU= Subject key identifier: AB:4A:4E:DD:47:DB:7E:91:BF:33:20:56:72:31:5F:E4:4D:C0:2B:C3 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 24C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 24B8 Signing time: Fri 30 May 2025 15:56:21 +0000 Manifest this update: Fri 30 May 2025 15:56:20 +0000 Manifest next update: Fri 06 Jun 2025 15:56:20 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: 9aMZkxFCeRmzNuidopW6fA7B8NZDy/DYSrOj3GboYQw=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: VpHAZdWeijuNJKWvKLj0k1xE9YF+5hfOXRYAI6729SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9417 (0x24c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: May 30 15:56:20 2025 GMT Not After : Jun 6 15:56:20 2025 GMT Subject: CN=6839d525-6afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:88:4f:2d:7c:43:2a:ee:bd:13:91:35:bf:90: 64:a4:43:f0:10:af:07:d7:3a:23:f8:04:e8:6c:5a: 93:4a:a6:44:4d:51:29:45:35:09:2e:08:40:4a:60: 19:9b:94:26:61:83:d2:6f:7b:ed:4e:c5:20:9d:1f: 71:0e:4a:7a:25:56:23:a7:0f:98:2e:dc:c7:a5:16: 1d:b1:36:34:82:b1:84:a2:2f:6c:64:c3:7e:5e:bf: 2e:49:34:36:e0:c4:38:e1:f3:de:a2:4b:40:dd:6e: d8:9c:d6:21:af:da:14:57:d9:0b:9b:e6:7e:04:b0: dc:bd:7e:c8:c2:6c:52:50:7a:11:b1:9c:d8:57:15: 81:58:66:ad:49:1f:57:bf:54:42:ca:5d:aa:a4:46: a8:42:1a:f5:b6:fa:f3:af:96:73:a1:a5:3c:12:08: 90:82:7f:d5:cf:12:41:68:85:a7:f5:a5:2e:ec:e1: 4e:c7:83:4a:e4:c8:9e:a3:3e:ec:a1:50:d7:25:5b: 57:4f:81:e4:13:3e:75:30:16:9f:cb:5d:19:f4:65: c2:c2:53:e7:9d:b0:f2:17:bc:5a:01:d6:5a:39:5a: 70:cb:de:77:a6:9f:4f:d0:f8:a1:9f:81:94:03:a1: 30:43:a8:88:cc:e1:cf:78:5f:9f:23:0b:14:fc:78: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4A:4E:DD:47:DB:7E:91:BF:33:20:56:72:31:5F:E4:4D:C0:2B:C3 X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0b:d3:e6:fb:38:a6:b7:25:32:05:e3:44:e0:b9:75:aa:d4: 71:1a:ca:5e:5f:ae:1a:3e:c0:aa:15:94:8c:0f:ef:a6:9b:ce: 8f:ce:11:7e:a2:07:ad:cd:9a:ad:b9:f6:54:5e:b5:ef:12:84: 2c:de:5c:7f:52:3e:c2:38:f1:94:8b:a0:e7:3b:98:6f:78:c6: e3:f0:79:8c:1f:ad:52:b5:c3:b7:f4:38:46:ef:c1:97:57:28: f0:ef:43:e4:00:50:a1:96:7d:2f:45:dc:ae:87:f9:6e:cc:f5: 41:b1:be:58:d2:7b:94:39:bf:e2:4e:53:7c:93:3a:80:ad:0a: 12:03:4c:56:bf:e8:ef:ce:64:e0:3e:f8:74:d0:4d:34:b2:15: b1:64:bf:90:69:20:de:9c:98:47:28:be:73:9e:b2:67:9c:50: 13:50:db:03:16:0e:91:a1:67:91:9f:6a:6d:81:ff:30:19:0b: ee:c4:5a:40:45:aa:e6:b0:1d:ff:bb:79:bc:fd:42:da:08:1f: 53:56:f5:59:78:4f:f8:0e:a6:65:a1:59:37:94:03:4e:bf:7f: 6b:4b:aa:de:b2:0a:57:f5:50:8f:52:1a:74:f1:2d:d6:3c:d0: cc:ff:a7:81:e2:90:70:db:51:26:a4:a0:9a:fd:df:9f:34:d1: e1:4d:16:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUwNTMwMTU1NjIwWhcNMjUwNjA2MTU1NjIwWjAYMRYwFAYD VQQDEw02ODM5ZDUyNS02YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9IhPLXxDKu69E5E1v5BkpEPwEK8H1zoj+ATobFqTSqZETVEpRTUJLghASmAZ m5QmYYPSb3vtTsUgnR9xDkp6JVYjpw+YLtzHpRYdsTY0grGEoi9sZMN+Xr8uSTQ2 4MQ44fPeoktA3W7YnNYhr9oUV9kLm+Z+BLDcvX7IwmxSUHoRsZzYVxWBWGatSR9X v1RCyl2qpEaoQhr1tvrzr5ZzoaU8EgiQgn/VzxJBaIWn9aUu7OFOx4NK5Mieoz7s oVDXJVtXT4HkEz51MBafy10Z9GXCwlPnnbDyF7xaAdZaOVpwy953pp9P0Pihn4GU A6EwQ6iIzOHPeF+fIwsU/HjuNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtKTt1H 236RvzMgVnIxX+RNwCvDMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNC9Pm+zimtyUyBeNE4Ll1qtRxGspeX64aPsCqFZSMD++mm86PzhF+ ogetzZqtufZUXrXvEoQs3lx/Uj7COPGUi6DnO5hveMbj8HmMH61StcO39DhG78GX Vyjw70PkAFChln0vRdyuh/luzPVBsb5Y0nuUOb/iTlN8kzqArQoSA0xWv+jvzmTg Pvh00E00shWxZL+QaSDenJhHKL5znrJnnFATUNsDFg6RoWeRn2ptgf8wGQvuxFpA RarmsB3/u3m8/ULaCB9TVvVZeE/4DqZloVk3lANOv39rS6resgpX9VCPUhp08S3W PNDM/6eB4pBw21EmpKCa/d+fNNHhTRbc -----END CERTIFICATE-----Generated at Sat May 31 17:30:15 2025 by rpki-client