$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json) Hash identifier: C9srx70Q3yv7Qg2YcKPhDUmJ2uVK6hSNAsylVzmBv9o= Subject key identifier: C9:0D:C9:3B:68:E7:87:B3:07:B2:17:D7:B9:60:C9:B5:3E:56:3F:FF Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft Manifest number: 0207 Signing time: Sat 31 May 2025 02:14:55 +0000 Manifest this update: Sat 31 May 2025 02:14:54 +0000 Manifest next update: Sat 07 Jun 2025 02:14:54 +0000 Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: fffNgSQlF8pYOrcsCpFMHmbGra2on1ymM5eeANVWPpI=) 2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=) 3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: May 31 02:14:54 2025 GMT Not After : Jun 7 02:14:54 2025 GMT Subject: CN=683a661e-c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:fa:1d:61:08:ce:8d:07:a5:3c:a8:97:b1: 21:20:7b:ac:f8:24:ef:7a:64:86:82:72:eb:18:28: c6:29:4b:3f:0d:9e:2c:0d:a2:6b:29:87:d2:20:b5: 6c:9d:0e:9e:4c:5b:ac:49:bb:31:db:fa:b5:6c:28: d1:6f:ad:e5:04:9d:09:7b:b1:48:b7:66:9e:96:ea: 99:45:69:c8:f2:dc:05:62:88:9d:f7:a1:98:c1:f9: 81:c0:0c:15:ea:81:db:1b:ec:60:26:fa:df:f6:97: 69:aa:0c:f1:40:f2:41:47:40:34:75:ee:0c:b0:71: 83:7a:25:95:e5:5f:93:d5:60:da:25:79:35:a3:f4: a5:c9:d0:a0:5c:c1:67:e6:35:b3:19:fc:b2:09:62: a8:8b:2a:26:05:67:9e:f7:68:a6:3f:37:5e:da:da: 02:c1:17:0c:10:7b:cd:bb:27:0a:a2:21:47:46:26: b9:5b:e4:96:73:10:68:78:dd:a2:d2:df:fb:82:60: c7:28:b0:ee:fd:72:95:3d:23:0f:f5:c9:1d:21:cb: 3d:ef:5d:f6:29:06:10:83:53:95:27:8c:fa:57:08: a4:22:d9:ed:1e:32:52:24:ab:e0:a1:4e:95:cc:f6: 03:5a:a3:96:e7:21:a0:4a:6b:24:a1:ad:86:8b:8f: c2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0D:C9:3B:68:E7:87:B3:07:B2:17:D7:B9:60:C9:B5:3E:56:3F:FF X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4d:04:52:26:3d:00:26:23:cd:fe:fc:47:1e:e6:cb:22:21: 05:71:b2:29:fd:79:89:28:65:4d:76:f6:da:32:e3:dd:e5:05: 84:59:5b:27:10:ac:4a:10:e4:03:22:31:48:05:6d:a6:a8:7f: e6:b8:1d:30:93:6a:55:f0:b7:ee:1b:35:f6:c6:c6:d7:03:0e: db:c8:b1:a3:aa:dd:12:7f:b1:0b:88:7c:a9:64:ba:41:7b:65: 1f:5a:f0:60:62:3a:50:96:24:bf:55:5b:16:77:30:7f:15:72: a0:af:33:85:e4:ef:fe:d4:6a:69:08:a4:32:a5:bb:32:c8:d6: 2c:49:8c:76:f5:53:71:ba:de:84:85:79:cc:cd:09:44:f6:a8: 1a:90:16:32:8a:35:30:77:22:4a:6a:92:9e:0a:9c:6b:94:27: f1:17:ae:7f:ed:d3:6b:cc:c1:e8:a9:88:f3:e5:fa:c4:d5:58: 3f:a5:1f:93:6d:0b:7e:bd:3e:38:0e:33:1c:ee:03:cc:a1:1d: 85:82:e4:a3:71:4e:7d:69:1c:07:05:2a:fe:6f:37:c3:1f:20: e6:94:42:b1:4f:62:8f:9a:37:8c:5c:57:0a:d9:67:46:6c:d0: 02:89:ae:fe:58:e1:e2:84:cf:64:cd:c8:60:71:f2:56:af:80: 75:b7:eb:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjUwNTMxMDIxNDU0WhcNMjUwNjA3MDIxNDU0WjAYMRYwFAYD VQQDEw02ODNhNjYxZS1jMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFD6HWEIzo0HpTyol7EhIHus+CTvemSGgnLrGCjGKUs/DZ4sDaJrKYfSILVs nQ6eTFusSbsx2/q1bCjRb63lBJ0Je7FIt2aeluqZRWnI8twFYoid96GYwfmBwAwV 6oHbG+xgJvrf9pdpqgzxQPJBR0A0de4MsHGDeiWV5V+T1WDaJXk1o/SlydCgXMFn 5jWzGfyyCWKoiyomBWee92imPzde2toCwRcMEHvNuycKoiFHRia5W+SWcxBoeN2i 0t/7gmDHKLDu/XKVPSMP9ckdIcs97132KQYQg1OVJ4z6VwikItntHjJSJKvgoU6V zPYDWqOW5yGgSmskoa2Gi4/CuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkNyTto 54ezB7IX17lgybU+Vj//MB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh N3VzOUtIQl9oM19pTjdBdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6TQRSJj0AJiPN/vxHHubLIiEFcbIp/XmJKGVNdvbaMuPd5QWEWVsn EKxKEOQDIjFIBW2mqH/muB0wk2pV8LfuGzX2xsbXAw7byLGjqt0Sf7ELiHypZLpB e2UfWvBgYjpQliS/VVsWdzB/FXKgrzOF5O/+1GppCKQypbsyyNYsSYx29VNxut6E hXnMzQlE9qgakBYyijUwdyJKapKeCpxrlCfxF65/7dNrzMHoqYjz5frE1Vg/pR+T bQt+vT44DjMc7gPMoR2FguSjcU59aRwHBSr+bzfDHyDmlEKxT2KPmjeMXFcK2WdG bNACia7+WOHihM9kzchgcfJWr4B1t+s7 -----END CERTIFICATE-----Generated at Sat May 31 16:35:57 2025 by rpki-client