$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: LSUcMh7svy24Xq2uIYWNqyQS4t77R2tB+7kFj/qZunA= Subject key identifier: 0A:10:6B:7C:99:A8:AE:6D:15:F8:96:43:8B:BE:2C:BC:9B:15:95:D5 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 032F Signing time: Sat 31 May 2025 01:17:50 +0000 Manifest this update: Sat 31 May 2025 01:17:49 +0000 Manifest next update: Sat 07 Jun 2025 01:17:49 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: 7HQAxHUB9jv4OK9Et7fvnlP4cxHpY9pBt25tkElrkDA=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: May 31 01:17:49 2025 GMT Not After : Jun 7 01:17:49 2025 GMT Subject: CN=683a58bd-e621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:6e:b1:19:ca:58:f8:88:16:ed:23:c1:94: 04:1c:53:f1:ff:d5:96:70:cf:eb:21:3d:30:ab:19: 8b:aa:08:c5:e9:27:9c:47:fd:f6:6e:ae:92:b4:0e: 36:2d:ab:5d:4a:f6:12:20:20:05:8f:c0:67:52:d8: 55:08:19:40:a4:7d:7e:01:ea:27:ec:24:8f:bc:ca: 05:ea:ba:27:96:7b:85:79:05:c5:1e:5a:ce:9f:38: 30:28:36:5f:22:0b:c2:47:a7:d8:2f:30:cf:ff:86: 36:60:c0:aa:9c:ab:8d:68:ea:5d:98:47:13:1c:84: 0c:ea:4e:ab:76:c7:e6:c3:0b:3d:58:4f:8f:72:1e: de:13:d4:04:de:bd:91:0c:3e:d1:6e:43:5e:da:c8: 0b:64:c2:10:a4:09:de:18:46:e0:18:cd:d4:f8:0a: 70:d0:1a:8f:c4:55:7d:c1:1e:e0:b4:b4:5c:3d:97: 8d:14:bc:92:6e:24:fc:be:43:81:a5:8d:44:f8:47: 96:0a:8b:cc:a3:0b:bc:0b:f4:d2:42:48:ee:e2:cb: 8e:a5:40:32:85:61:dd:3c:fa:66:f0:83:e6:6d:1e: 89:52:99:2f:5c:3e:c8:ed:4e:c6:ea:42:9f:66:59: 22:ef:b6:23:1e:be:83:31:73:ef:22:f3:29:b1:22: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:6B:7C:99:A8:AE:6D:15:F8:96:43:8B:BE:2C:BC:9B:15:95:D5 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:59:7c:94:68:a2:1c:8c:d0:e2:3f:e6:29:83:46:d9:9b:31: a3:1b:c6:23:42:09:95:9b:e7:d4:ea:86:b8:d4:c3:d9:f6:f0: a3:63:0e:2e:78:30:99:8e:22:0d:1d:e8:46:da:2a:a9:af:1e: 8f:17:0c:a9:af:b5:10:27:64:b7:05:54:4f:e0:bf:2e:e1:5d: b1:01:4f:90:0f:0d:4a:f4:f4:17:60:b2:01:c0:80:4e:88:ce: 43:50:01:89:31:9b:b0:c9:e0:ff:44:df:f1:4d:80:e1:20:45: fb:24:96:e5:57:f9:cb:9f:4f:66:b3:5b:a2:7d:3b:3f:b2:84: d0:2d:b9:48:d6:5c:5d:d5:d9:15:b0:32:20:49:67:6e:74:d6: 28:ba:a0:bf:d5:01:62:47:2c:22:9a:f1:47:7e:68:48:88:7d: f8:f3:f8:c1:27:dc:52:cd:5d:cf:7e:4c:30:75:cc:ab:51:4f: 7c:67:d3:a3:db:83:78:e8:3f:20:2f:cf:8a:15:8c:be:02:d5: 56:57:3f:2e:6d:b2:ed:f7:7c:59:3a:1e:bc:00:2a:f5:c7:38: bb:e9:75:54:c7:3f:9c:bb:56:56:c2:2b:b9:77:49:3a:3e:e1: 91:c2:2e:9f:20:f0:79:c0:3a:42:7e:1e:7b:7f:dd:fa:0a:40: 6c:ce:fd:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwNTMxMDExNzQ5WhcNMjUwNjA3MDExNzQ5WjAYMRYwFAYD VQQDEw02ODNhNThiZC1lNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23lusRnKWPiIFu0jwZQEHFPx/9WWcM/rIT0wqxmLqgjF6SecR/32bq6StA42 LatdSvYSICAFj8BnUthVCBlApH1+Aeon7CSPvMoF6ronlnuFeQXFHlrOnzgwKDZf IgvCR6fYLzDP/4Y2YMCqnKuNaOpdmEcTHIQM6k6rdsfmwws9WE+Pch7eE9QE3r2R DD7RbkNe2sgLZMIQpAneGEbgGM3U+Apw0BqPxFV9wR7gtLRcPZeNFLySbiT8vkOB pY1E+EeWCovMowu8C/TSQkju4suOpUAyhWHdPPpm8IPmbR6JUpkvXD7I7U7G6kKf Zlki77YjHr6DMXPvIvMpsSKuQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoQa3yZ qK5tFfiWQ4u+LLybFZXVMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYWXyUaKIcjNDiP+Ypg0bZmzGjG8YjQgmVm+fU6oa41MPZ9vCjYw4u eDCZjiINHehG2iqprx6PFwypr7UQJ2S3BVRP4L8u4V2xAU+QDw1K9PQXYLIBwIBO iM5DUAGJMZuwyeD/RN/xTYDhIEX7JJblV/nLn09ms1uifTs/soTQLblI1lxd1dkV sDIgSWdudNYouqC/1QFiRywimvFHfmhIiH348/jBJ9xSzV3PfkwwdcyrUU98Z9Oj 24N46D8gL8+KFYy+AtVWVz8ubbLt93xZOh68ACr1xzi76XVUxz+cu1ZWwiu5d0k6 PuGRwi6fIPB5wDpCfh57f936CkBszv07 -----END CERTIFICATE-----Generated at Sat May 31 15:21:30 2025 by rpki-client