$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: I9RBfVDXKEliQf85zarpypxiISzi2Gsk5SLJPyo/pS4= Subject key identifier: 51:11:A4:15:DF:79:E2:2B:BE:5C:72:3F:E2:FA:B6:12:40:AB:DC:7D Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B4B Signing time: Fri 30 May 2025 19:22:09 +0000 Manifest this update: Fri 30 May 2025 19:22:08 +0000 Manifest next update: Fri 06 Jun 2025 19:22:08 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: S4h/p6bLOfcoNZQGw2HqsVGfcT3HsqmiUYJN6Z5Rers=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: May 30 19:22:08 2025 GMT Not After : Jun 6 19:22:08 2025 GMT Subject: CN=683a0561-3386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:8e:d0:4b:9f:44:a8:01:82:e3:13:a8:28: e7:45:c7:3a:fd:ee:6d:c2:d5:5a:79:e2:02:1a:58: ce:9b:da:e3:9b:4b:d1:d6:a5:98:ff:4d:65:84:b2: 06:48:2a:9a:47:34:d7:0c:22:0c:e2:78:31:70:28: 25:82:d7:43:94:1e:e8:e1:d9:82:48:39:88:9d:69: 81:7b:a4:1d:1c:74:a4:9d:ee:6f:a7:34:4e:9f:fc: 69:4b:da:b8:f4:fc:f5:6b:f0:56:d7:c1:4a:07:d3: eb:05:5a:d2:54:3b:ab:ca:97:fb:8a:38:ab:68:64: cf:f9:f7:89:ed:f2:bf:34:e1:12:63:11:e3:4b:85: d3:55:da:9b:ef:60:39:ae:2f:4f:e1:a2:52:81:cd: 4c:1a:76:86:31:96:c0:92:9d:7c:5c:0d:5a:90:17: 20:31:ed:e2:52:44:78:ef:71:aa:15:ff:04:0c:a2: 0c:0f:8b:31:b0:ee:db:aa:3d:e3:35:59:88:26:e7: e2:28:e1:83:d9:1f:79:df:e9:30:38:8f:f8:44:76: 1b:21:ac:bf:d5:36:76:ac:a4:4e:bf:70:de:5e:2d: 36:2a:1f:14:25:a3:4f:0a:89:93:10:b4:b2:b1:16: 27:8f:b5:75:38:f5:93:90:62:82:fa:ea:ba:14:07: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:11:A4:15:DF:79:E2:2B:BE:5C:72:3F:E2:FA:B6:12:40:AB:DC:7D X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:20:06:38:bf:45:a1:a6:6d:15:7d:2d:32:56:89:cf:92:33: 0a:da:50:9c:ca:75:cb:c4:19:57:01:bf:cc:c9:34:25:42:9a: 40:ae:a2:f5:eb:fd:2c:9f:a4:c7:8d:c5:71:4a:3a:56:e2:fa: 31:2a:e0:8a:6c:9d:f5:86:eb:88:ef:96:fb:a2:69:6c:7e:51: bf:1b:7f:7f:c5:d7:76:7a:de:8a:9c:84:f6:02:3a:f4:b9:70: 12:0d:c5:02:af:7b:93:15:a4:cd:02:df:b6:ad:6d:57:25:f1: c4:20:6e:80:ba:d9:24:50:75:08:85:9d:32:5b:38:6e:a9:99: 69:fe:39:50:8a:ce:61:3e:59:55:68:f3:9d:ad:8c:2a:ad:34: c8:e3:85:51:c0:bd:3a:ef:bf:4a:db:c7:6d:61:89:d1:44:5a: 89:b5:cf:96:09:e0:55:02:38:51:02:d3:a1:f6:50:74:13:87: 4c:28:ea:b4:04:a3:9c:ba:96:ea:cf:7a:22:1b:5d:84:f5:33: b5:20:a3:9f:f5:70:77:2d:2e:aa:9b:6d:e5:cb:5c:59:cb:d2: de:9d:d4:39:d9:d6:e9:50:93:f3:22:2d:57:d0:8d:94:5d:d3: 08:56:c2:7a:86:87:7b:35:e3:ee:7a:9c:bf:e2:6c:10:8d:3a: 27:8d:e0:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwNTMwMTkyMjA4WhcNMjUwNjA2MTkyMjA4WjAYMRYwFAYD VQQDEw02ODNhMDU2MS0zMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu+O0EufRKgBguMTqCjnRcc6/e5twtVaeeICGljOm9rjm0vR1qWY/01lhLIG SCqaRzTXDCIM4ngxcCglgtdDlB7o4dmCSDmInWmBe6QdHHSkne5vpzROn/xpS9q4 9Pz1a/BW18FKB9PrBVrSVDurypf7ijiraGTP+feJ7fK/NOESYxHjS4XTVdqb72A5 ri9P4aJSgc1MGnaGMZbAkp18XA1akBcgMe3iUkR473GqFf8EDKIMD4sxsO7bqj3j NVmIJufiKOGD2R953+kwOI/4RHYbIay/1TZ2rKROv3DeXi02Kh8UJaNPComTELSy sRYnj7V1OPWTkGKC+uq6FAdL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFERpBXf eeIrvlxyP+L6thJAq9x9MB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUIAY4v0Whpm0VfS0yVonPkjMK2lCcynXLxBlXAb/MyTQlQppArqL1 6/0sn6THjcVxSjpW4voxKuCKbJ31huuI75b7omlsflG/G39/xdd2et6KnIT2Ajr0 uXASDcUCr3uTFaTNAt+2rW1XJfHEIG6AutkkUHUIhZ0yWzhuqZlp/jlQis5hPllV aPOdrYwqrTTI44VRwL06779K28dtYYnRRFqJtc+WCeBVAjhRAtOh9lB0E4dMKOq0 BKOcupbqz3oiG12E9TO1IKOf9XB3LS6qm23ly1xZy9LendQ52dbpUJPzIi1X0I2U XdMIVsJ6hod7NePuepy/4mwQjTonjeA1 -----END CERTIFICATE-----Generated at Sat May 31 17:54:47 2025 by rpki-client