$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: Lh/ssZDf24zzfv0itNV6sCka389iL1zE0hU0fj2edTg= Subject key identifier: 7D:B0:70:89:22:95:BF:5C:78:41:5B:E3:93:7B:C7:73:B7:6C:0C:9F Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 08D0 Signing time: Fri 30 May 2025 20:42:37 +0000 Manifest this update: Fri 30 May 2025 20:42:37 +0000 Manifest next update: Fri 06 Jun 2025 20:42:37 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: lbexqRjBfLpz0SgquZum2El9M/slaAXV8GVUo0xVsOw=) 2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: yd9jWU/PgRjCMY4J3GKXf1Vc4SmZiu9tESmbJbAweg0=) 3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: sH4E3ej5QjGMfMCSB84T2nKZUZJNE4E77ZVPlmTpXdM=) 4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: cyH7Vo4cKVMVChE7HnXd5ewZU8N7qvsDouFa2aCv6v8=) 5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: dKiBbXwlV8u8FDrOxz1dafmZEMA4uTdGMztHkVpNkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: May 30 20:42:37 2025 GMT Not After : Jun 6 20:42:37 2025 GMT Subject: CN=683a183d-0092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:6f:96:6c:66:af:be:94:da:ff:75:57:07: 2e:26:3d:23:96:51:89:51:7e:56:7d:c4:24:0c:2c: 16:16:c1:ff:3e:4f:b5:be:ec:d4:86:9e:91:99:58: 9a:a6:e5:69:d3:f4:a5:01:0c:7e:a0:43:34:08:5d: 97:c2:67:bc:03:50:c9:00:f6:c8:ea:0b:6b:e1:1c: 34:6d:7f:b9:83:3b:4a:17:da:35:30:72:70:b7:d8: 05:d3:cd:2d:d3:68:6b:df:96:31:07:60:ce:6f:d8: bd:69:87:d7:ca:a4:58:a4:36:11:1f:95:0c:e5:51: 27:e6:15:b6:77:fb:32:3b:9e:c8:aa:ec:e2:a7:83: 0d:66:a3:66:f6:af:67:e2:2d:9d:87:9f:d5:46:80: 80:59:82:a5:e2:29:f0:f5:19:67:55:f7:2f:75:1f: c3:51:47:0a:2c:69:8f:d6:83:38:4f:79:16:d4:94: 54:d3:54:ad:db:72:39:cb:1c:55:49:26:0b:b5:4f: 19:60:11:9d:e2:5c:3f:18:2b:53:fb:20:17:13:36: 11:16:87:42:05:10:b4:69:cc:d5:c9:8e:78:84:1a: 65:bf:03:6d:1b:8f:b5:47:08:52:34:5e:64:c6:99: d5:67:36:72:f9:94:e9:fc:4b:c6:0a:58:e0:cc:cf: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:70:89:22:95:BF:5C:78:41:5B:E3:93:7B:C7:73:B7:6C:0C:9F X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:22:f7:a8:7e:7e:11:12:a4:99:91:e1:9a:bd:4d:84:cd:76: f9:10:95:99:80:f6:42:c9:41:02:14:2c:05:65:b8:ba:98:db: ba:78:04:14:ed:14:9c:0b:f9:93:12:72:79:70:be:da:60:eb: 9a:83:06:2f:dd:b0:8a:e0:f2:11:41:16:23:bd:0d:de:e3:41: 13:d3:54:6d:6f:35:fe:55:2c:c2:8f:ae:45:73:3d:aa:1b:33: ff:1e:5c:6e:c5:8a:fd:22:5a:de:80:5a:33:6a:fc:3c:36:fa: 35:1f:f6:1b:c4:b9:21:ae:0e:f3:3a:d6:b3:18:c9:21:73:b6: be:d4:13:e3:f5:bc:b9:4c:e5:4c:c0:91:19:73:5b:cd:9c:52: c9:22:1a:6c:34:9d:38:94:ec:55:18:77:12:36:d7:3d:36:14: 51:13:6b:1e:fd:1a:71:8e:ca:d8:da:14:20:93:18:07:d7:79: ce:b0:fb:b0:9c:11:1b:fc:84:1a:e3:37:08:df:a7:ae:fb:bd: 18:37:4a:07:b4:2d:df:15:76:17:72:54:43:e0:b9:b4:77:60: 9a:78:14:98:bf:50:1a:e8:58:59:84:e3:c6:e8:ec:57:6e:1f: d1:8f:d4:52:eb:1e:61:ff:81:97:7f:41:6a:30:1d:54:99:23: 38:29:6c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjUwNTMwMjA0MjM3WhcNMjUwNjA2MjA0MjM3WjAYMRYwFAYD VQQDEw02ODNhMTgzZC0wMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv5vlmxmr76U2v91VwcuJj0jllGJUX5WfcQkDCwWFsH/Pk+1vuzUhp6RmVia puVp0/SlAQx+oEM0CF2Xwme8A1DJAPbI6gtr4Rw0bX+5gztKF9o1MHJwt9gF080t 02hr35YxB2DOb9i9aYfXyqRYpDYRH5UM5VEn5hW2d/syO57Iquzip4MNZqNm9q9n 4i2dh5/VRoCAWYKl4inw9RlnVfcvdR/DUUcKLGmP1oM4T3kW1JRU01St23I5yxxV SSYLtU8ZYBGd4lw/GCtT+yAXEzYRFodCBRC0aczVyY54hBplvwNtG4+1RwhSNF5k xpnVZzZy+ZTp/EvGCljgzM/eiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2wcIki lb9ceEFb45N7x3O3bAyfMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Iveofn4REqSZkeGavU2EzXb5EJWZgPZCyUECFCwFZbi6mNu6eAQU 7RScC/mTEnJ5cL7aYOuagwYv3bCK4PIRQRYjvQ3e40ET01RtbzX+VSzCj65Fcz2q GzP/HlxuxYr9IlregFozavw8Nvo1H/YbxLkhrg7zOtazGMkhc7a+1BPj9by5TOVM wJEZc1vNnFLJIhpsNJ04lOxVGHcSNtc9NhRRE2se/RpxjsrY2hQgkxgH13nOsPuw nBEb/IQa4zcI36eu+70YN0oHtC3fFXYXclRD4Lm0d2CaeBSYv1Aa6FhZhOPG6OxX bh/Rj9RS6x5h/4GXf0FqMB1UmSM4KWwn -----END CERTIFICATE-----Generated at Sat May 31 16:55:06 2025 by rpki-client