$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: WRzhXpJEavnuhBiw4j+PaBwmBtrkxOa7oqodeOciXFs= Subject key identifier: 06:44:17:41:FF:FA:3A:57:88:B1:CD:F9:69:B0:F2:7F:9C:41:E5:78 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 1177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 1151 Signing time: Fri 30 May 2025 17:26:08 +0000 Manifest this update: Fri 30 May 2025 17:26:07 +0000 Manifest next update: Fri 06 Jun 2025 17:26:07 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: AeBwmk3U3qKm4pHyCxqYhQ3APIpyJKGbFiuxfRpU5GQ=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4471 (0x1177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: May 30 17:26:07 2025 GMT Not After : Jun 6 17:26:07 2025 GMT Subject: CN=6839ea30-ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:c6:eb:9c:d5:b2:ce:e0:79:35:92:49:4e: 5b:b9:31:52:ad:83:15:4a:14:5c:57:92:f0:00:e5: bd:08:b0:a8:00:1e:0f:b5:8b:91:9e:8f:e9:fc:a3: b2:c8:e7:c8:3f:42:73:cb:82:c6:7b:38:37:04:27: 5a:1f:75:e1:9c:4a:c3:6a:4a:d5:5c:36:dc:cb:73: 00:14:84:db:0a:01:7d:88:48:48:d5:7d:9a:80:d0: b5:8d:be:fb:8c:57:c4:96:88:ee:1f:84:a5:34:fa: d4:d8:25:d5:ce:90:7c:4e:4b:64:ec:66:8d:22:4e: 3d:b1:06:30:ca:87:87:7e:7c:a4:8b:c8:fc:29:09: cf:d7:73:76:2a:f0:34:84:42:74:da:3c:53:29:c5: 0a:98:29:4b:7d:11:b7:d4:64:f5:9f:28:aa:82:d6: 4d:b8:cc:6a:f3:6e:8a:81:ca:f4:e7:c5:d1:ef:0e: 6b:d7:ca:b2:03:b7:20:c3:99:f7:a5:56:96:2c:82: 57:11:28:d3:77:ae:1b:66:e1:89:c5:bd:b3:aa:64: 57:30:b5:df:67:10:4e:81:0a:a6:6e:91:b2:03:e0: 31:eb:5a:d5:87:da:3c:c8:ef:1f:7f:c0:ba:48:43: e5:5a:ae:17:9c:fb:2f:9e:51:bf:7e:80:31:47:97: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:17:41:FF:FA:3A:57:88:B1:CD:F9:69:B0:F2:7F:9C:41:E5:78 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:56:6d:db:15:e7:c5:af:5b:bc:40:d9:cc:f8:95:ca:ee:da: fb:ec:2e:44:ed:84:a6:4c:a6:b5:b8:a5:a9:22:05:9e:55:bf: 1f:cc:d6:81:43:11:05:b6:e0:b2:5e:a9:79:b7:f8:bf:d4:2e: 20:f5:fd:db:86:b2:e6:96:ee:4d:43:9d:cd:47:a1:e6:e6:c7: 1a:40:bd:f2:84:cb:95:84:c9:2b:e7:fa:ee:57:95:b5:36:3e: 24:73:eb:b5:20:56:0a:17:a5:30:23:09:a8:d3:38:b9:31:89: 44:e9:a8:a3:33:d2:05:db:87:49:92:2c:bc:82:68:4c:1a:05: 08:d8:2e:92:37:d5:36:a8:90:4b:08:79:39:5c:8b:d9:4f:07: 42:4a:52:a1:4e:24:3d:a0:4b:d4:ad:64:56:ad:5c:2d:73:85: 7b:bd:07:04:40:90:b2:a9:64:d8:87:0a:94:b4:71:82:9d:56: d2:05:e6:f2:bd:af:e7:d2:4e:49:da:17:a5:dd:55:1a:0c:07: 31:39:9c:54:3d:19:79:d7:c8:95:07:08:25:36:17:93:50:8d: 88:48:57:08:c0:1b:63:6e:38:9e:08:c1:bb:68:e4:44:ef:f9: 65:6a:f4:2e:bb:02:e1:3e:06:dd:00:33:0b:bf:f2:0c:37:1a: 4a:a0:36:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwNTMwMTcyNjA3WhcNMjUwNjA2MTcyNjA3WjAYMRYwFAYD VQQDEw02ODM5ZWEzMC1lZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyefG65zVss7geTWSSU5buTFSrYMVShRcV5LwAOW9CLCoAB4PtYuRno/p/KOy yOfIP0Jzy4LGezg3BCdaH3XhnErDakrVXDbcy3MAFITbCgF9iEhI1X2agNC1jb77 jFfElojuH4SlNPrU2CXVzpB8Tktk7GaNIk49sQYwyoeHfnyki8j8KQnP13N2KvA0 hEJ02jxTKcUKmClLfRG31GT1nyiqgtZNuMxq826Kgcr058XR7w5r18qyA7cgw5n3 pVaWLIJXESjTd64bZuGJxb2zqmRXMLXfZxBOgQqmbpGyA+Ax61rVh9o8yO8ff8C6 SEPlWq4XnPsvnlG/foAxR5e/mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZEF0H/ +jpXiLHN+Wmw8n+cQeV4MB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMVm3bFefFr1u8QNnM+JXK7tr77C5E7YSmTKa1uKWpIgWeVb8fzNaB QxEFtuCyXql5t/i/1C4g9f3bhrLmlu5NQ53NR6Hm5scaQL3yhMuVhMkr5/ruV5W1 Nj4kc+u1IFYKF6UwIwmo0zi5MYlE6aijM9IF24dJkiy8gmhMGgUI2C6SN9U2qJBL CHk5XIvZTwdCSlKhTiQ9oEvUrWRWrVwtc4V7vQcEQJCyqWTYhwqUtHGCnVbSBeby va/n0k5J2hel3VUaDAcxOZxUPRl518iVBwglNheTUI2ISFcIwBtjbjieCMG7aORE 7/llavQuuwLhPgbdADMLv/IMNxpKoDbi -----END CERTIFICATE-----Generated at Sat May 31 17:37:40 2025 by rpki-client