$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: 1eZ9G2xmHCCeo8e7hwZSNK7ksWaD8rbEOkImNDINRac= Subject key identifier: E2:4A:8B:39:D4:F9:EC:31:60:E4:1C:AD:C2:85:CF:BC:0B:9C:30:71 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 316B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3157 Signing time: Fri 30 May 2025 15:34:56 +0000 Manifest this update: Fri 30 May 2025 15:34:55 +0000 Manifest next update: Fri 06 Jun 2025 15:34:55 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: gKAtDP+8UowtM825UmfecPZNJiPD5JYfhQIKE2w3vrI=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12651 (0x316b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: May 30 15:34:55 2025 GMT Not After : Jun 6 15:34:55 2025 GMT Subject: CN=6839d01f-1130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:94:42:2b:6c:71:f6:a6:fe:56:e9:1a:d6: f2:e7:ea:2e:44:9c:e5:38:62:e3:44:e4:59:da:b7: 4e:52:ee:84:fa:7a:3b:d1:69:0b:38:e7:21:3d:e1: ce:36:2a:f5:51:0f:61:9e:80:9e:22:42:d1:33:4a: f4:e5:6d:ed:04:b8:eb:54:d7:04:ff:15:d6:5d:ed: 9e:54:33:2b:51:90:32:86:6a:39:4a:73:9e:20:f8: a5:41:67:9f:36:9d:cc:c3:17:12:85:3d:6a:16:91: 54:bb:2b:04:ff:92:29:4e:c1:20:67:d0:0e:09:e9: 4a:a7:d9:98:05:04:24:29:94:27:3d:aa:ca:e2:57: 93:57:bf:82:59:61:96:03:73:3f:48:2a:4e:4e:27: ac:c3:9b:39:a3:14:49:fc:ec:bb:de:36:f4:c1:fa: de:85:a0:c3:36:21:19:43:3d:f1:17:65:a8:b9:e5: 19:cb:66:e0:cf:f4:09:74:4b:a2:9d:67:33:0b:9e: e3:25:51:ae:50:d8:27:c3:84:13:fa:72:f4:9e:e8: 82:b7:98:a4:94:1a:e4:85:56:92:75:38:27:39:2d: 7d:71:97:bf:80:40:53:74:24:6e:cf:e6:7d:87:1e: 5a:0d:44:9c:59:3c:8a:35:ff:0d:c7:85:48:16:64: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:8B:39:D4:F9:EC:31:60:E4:1C:AD:C2:85:CF:BC:0B:9C:30:71 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:92:ee:ef:bb:79:3c:4f:07:20:cc:cc:51:59:4a:21:5b:52: a8:bf:42:d2:ba:9a:a3:c0:f5:e2:43:47:32:aa:a1:c7:3d:73: c7:39:38:8b:97:a4:33:71:88:bb:ac:dd:1d:59:fa:f6:9d:5a: e8:01:0b:65:46:78:65:cf:16:bc:19:2a:51:c1:4d:09:60:7c: a7:57:57:dd:d6:62:5b:29:cd:04:24:8e:19:2c:11:fa:4e:80: 4c:59:d7:d3:5f:f0:28:cb:d6:11:b2:1b:37:f2:8c:aa:2a:93: 33:2c:6e:36:cc:43:50:58:19:38:89:7f:d0:1e:88:31:9d:c8: 01:b1:e0:7e:b9:72:30:a3:a0:cd:74:d3:d9:bd:f4:2e:95:07: 36:28:89:17:01:37:44:79:4d:4a:8b:5a:10:25:83:9d:5f:46: 35:85:84:d2:39:d8:4a:b3:e4:a3:d3:2e:de:e1:d2:09:10:d9: cb:3a:40:fa:78:54:3c:6c:8a:03:69:6b:89:c7:db:b6:81:f3: 2c:8a:55:f8:44:02:81:a1:d8:21:e9:15:e9:6f:dc:cc:cc:5c: 6c:26:c2:bc:31:43:56:ea:57:71:fe:a1:f4:ad:98:33:0c:11: 40:13:62:9b:00:1c:3f:c3:d6:7b:0b:81:c9:89:c2:c4:fb:61: a4:4d:43:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUwNTMwMTUzNDU1WhcNMjUwNjA2MTUzNDU1WjAYMRYwFAYD VQQDEw02ODM5ZDAxZi0xMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4aUQitscfam/lbpGtby5+ouRJzlOGLjRORZ2rdOUu6E+no70WkLOOchPeHO Nir1UQ9hnoCeIkLRM0r05W3tBLjrVNcE/xXWXe2eVDMrUZAyhmo5SnOeIPilQWef Np3MwxcShT1qFpFUuysE/5IpTsEgZ9AOCelKp9mYBQQkKZQnParK4leTV7+CWWGW A3M/SCpOTiesw5s5oxRJ/Oy73jb0wfrehaDDNiEZQz3xF2WoueUZy2bgz/QJdEui nWczC57jJVGuUNgnw4QT+nL0nuiCt5iklBrkhVaSdTgnOS19cZe/gEBTdCRuz+Z9 hx5aDUScWTyKNf8Nx4VIFmSwGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJKiznU +ewxYOQcrcKFz7wLnDBxMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTku7vu3k8TwcgzMxRWUohW1Kov0LSupqjwPXiQ0cyqqHHPXPHOTiL l6QzcYi7rN0dWfr2nVroAQtlRnhlzxa8GSpRwU0JYHynV1fd1mJbKc0EJI4ZLBH6 ToBMWdfTX/Aoy9YRshs38oyqKpMzLG42zENQWBk4iX/QHogxncgBseB+uXIwo6DN dNPZvfQulQc2KIkXATdEeU1Ki1oQJYOdX0Y1hYTSOdhKs+Sj0y7e4dIJENnLOkD6 eFQ8bIoDaWuJx9u2gfMsilX4RAKBodgh6RXpb9zMzFxsJsK8MUNW6ldx/qH0rZgz DBFAE2KbABw/w9Z7C4HJicLE+2GkTUMZ -----END CERTIFICATE-----Generated at Sat May 31 16:59:27 2025 by rpki-client