$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: Oqu65NV2Rajl7/nrikef+ZfAnW5FkLpS4uIgvmUq4zc= Subject key identifier: BD:FA:C9:1F:88:65:73:97:3F:91:C0:DF:A5:04:0E:6B:BC:E3:E0:BF Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 25F9 Signing time: Fri 30 May 2025 15:52:45 +0000 Manifest this update: Fri 30 May 2025 15:52:44 +0000 Manifest next update: Fri 06 Jun 2025 15:52:44 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: Mm8+I/32L8q/2PP60JLmnipmb6PymBMtYoGG6aVvPkU=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9744 (0x2610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: May 30 15:52:44 2025 GMT Not After : Jun 6 15:52:44 2025 GMT Subject: CN=6839d44c-b084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:15:85:22:1f:3c:aa:4c:1b:e7:c6:8f:b0: f3:e2:6d:e4:b7:9a:47:24:1e:13:23:53:57:cc:fd: 61:ee:81:76:9d:7e:5f:f0:1c:d9:3c:c0:f4:87:bf: 75:81:2c:1e:3a:18:3b:4b:4b:53:a2:b2:9a:6d:07: 6d:d4:c2:1f:f1:f8:a4:52:06:bb:2b:31:5c:71:9a: 01:67:00:2c:a2:25:c8:3d:a6:ae:80:54:ba:4f:e2: f9:36:44:22:0a:b8:aa:d6:f8:58:1e:21:22:42:4f: aa:88:4e:20:5c:e2:c8:ef:d9:d7:d3:ce:4a:ea:4a: 03:ae:41:01:36:42:84:5f:9b:b3:a1:db:6e:62:01: 75:14:e5:bb:07:bd:46:c3:99:83:a0:76:7f:5a:f9: 2e:8f:ef:ee:bb:76:f0:3d:1a:4a:c4:d4:8a:d6:39: 08:ab:df:73:1b:67:a5:89:cb:9c:23:5a:c4:e0:2f: c1:aa:71:4c:e4:3a:91:f5:d2:33:2a:54:16:18:02: eb:7e:64:7c:d1:81:51:29:1f:fe:84:3c:42:ee:1b: 45:c2:1e:1f:1c:c4:9e:56:41:3e:ef:2c:52:8b:76: f3:9b:86:c2:5d:8e:4c:60:3e:f8:a2:7f:de:22:77: 4c:92:d5:9e:38:2d:04:37:e7:dd:db:66:2e:f3:a3: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:C9:1F:88:65:73:97:3F:91:C0:DF:A5:04:0E:6B:BC:E3:E0:BF X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:80:06:d4:6d:ac:41:62:3a:bc:a7:a1:06:6f:50:d6:47:d6: 3c:3b:91:b7:81:ea:23:12:f0:a8:23:7f:bd:5d:e4:25:8c:df: 21:87:c5:8f:3b:e4:59:92:4c:fb:9b:7d:db:a7:52:cc:aa:10: 03:b8:6e:99:04:51:eb:ef:a2:20:4d:37:89:20:7c:4b:77:54: 69:b1:df:31:4a:be:32:f9:db:40:b1:57:4a:42:8e:53:d3:a9: 5e:2d:30:2c:8c:f2:1b:59:6d:65:42:08:69:cf:cf:76:5f:8d: 06:65:46:6b:b0:cb:62:20:28:f2:4f:2f:62:c1:57:87:17:92: 8a:8f:b4:10:b0:e7:8f:1b:ae:d6:d1:6e:c5:4d:3c:6d:bd:0b: 50:a3:68:e7:dd:5f:e1:20:28:d2:a9:e7:19:5a:a0:eb:6d:5c: 9c:55:7b:6f:bd:87:ec:e1:86:e7:be:6b:97:d2:1e:66:bd:3c: 0a:5e:56:a5:99:7b:f9:b6:52:3c:d0:d9:46:cd:72:f9:4f:4a: a6:1d:8f:69:b3:20:da:11:95:74:6d:7e:73:4a:21:1b:8c:7d: 75:ad:2d:ea:98:ab:7d:9c:ac:a1:61:5a:24:f4:8b:45:ed:d7: 2a:e5:7e:b1:78:fa:dc:27:09:34:35:64:d9:85:fc:2d:cf:a9: 0a:c1:24:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUwNTMwMTU1MjQ0WhcNMjUwNjA2MTU1MjQ0WjAYMRYwFAYD VQQDEw02ODM5ZDQ0Yy1iMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jMVhSIfPKpMG+fGj7Dz4m3kt5pHJB4TI1NXzP1h7oF2nX5f8BzZPMD0h791 gSweOhg7S0tTorKabQdt1MIf8fikUga7KzFccZoBZwAsoiXIPaaugFS6T+L5NkQi Criq1vhYHiEiQk+qiE4gXOLI79nX085K6koDrkEBNkKEX5uzodtuYgF1FOW7B71G w5mDoHZ/Wvkuj+/uu3bwPRpKxNSK1jkIq99zG2elicucI1rE4C/BqnFM5DqR9dIz KlQWGALrfmR80YFRKR/+hDxC7htFwh4fHMSeVkE+7yxSi3bzm4bCXY5MYD74on/e IndMktWeOC0EN+fd22Yu86NyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL36yR+I ZXOXP5HA36UEDmu84+C/MB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0gAbUbaxBYjq8p6EGb1DWR9Y8O5G3geojEvCoI3+9XeQljN8hh8WP O+RZkkz7m33bp1LMqhADuG6ZBFHr76IgTTeJIHxLd1Rpsd8xSr4y+dtAsVdKQo5T 06leLTAsjPIbWW1lQghpz892X40GZUZrsMtiICjyTy9iwVeHF5KKj7QQsOePG67W 0W7FTTxtvQtQo2jn3V/hICjSqecZWqDrbVycVXtvvYfs4YbnvmuX0h5mvTwKXlal mXv5tlI80NlGzXL5T0qmHY9psyDaEZV0bX5zSiEbjH11rS3qmKt9nKyhYVok9ItF 7dcq5X6xePrcJwk0NWTZhfwtz6kKwSRe -----END CERTIFICATE-----Generated at Sat May 31 14:36:44 2025 by rpki-client