$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: i005LMbZiToefLoKWbANRFci2ldq2st1rcRxIzd/mOc= Subject key identifier: 16:FA:5D:6C:82:AE:87:EE:45:E9:13:1E:6B:53:BD:76:51:1A:96:5D Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 5C Signing time: Sat 31 May 2025 06:43:54 +0000 Manifest this update: Sat 31 May 2025 06:43:53 +0000 Manifest next update: Sat 07 Jun 2025 06:43:53 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: iukQrhAKhQV4ynoI87uc5VzwwKVD6fOyqdV7nlRF4nQ=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: May 31 06:43:53 2025 GMT Not After : Jun 7 06:43:53 2025 GMT Subject: CN=683aa52a-7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:1e:20:f3:39:a9:a9:17:03:0f:cf:ef:22: b1:ea:3d:79:02:ea:92:85:68:25:24:5e:e5:12:63: 65:ee:d8:43:86:0f:86:0c:77:39:09:3b:ac:d1:4b: 9d:2b:d6:39:a8:c7:15:88:75:e8:88:03:b3:0f:28: ed:31:7b:28:16:2a:93:99:93:8a:dd:61:80:14:74: d6:20:21:98:13:c5:48:72:c5:f0:01:d6:4f:c7:a4: f6:ae:14:63:6b:cd:42:d1:8b:ae:66:33:eb:8b:b1: ce:ca:82:fe:30:40:45:11:95:38:80:3c:07:98:9a: 09:71:58:2f:24:fe:cb:06:78:08:64:75:4f:31:ca: 41:ba:97:aa:38:3a:79:3d:45:fe:ce:0f:f1:27:c2: ff:17:4d:95:78:67:54:e2:ae:09:75:43:94:66:5b: 90:18:d8:20:1f:8f:4f:d2:43:be:7c:3f:6c:35:b8: 77:fc:ac:46:58:6d:87:0d:9e:d7:88:e6:92:e4:91: 6c:4c:7b:4f:70:17:02:8c:5f:62:b6:e8:dc:4a:72: a5:bf:ee:1c:f6:e9:3e:b5:d1:e4:4e:6b:36:e7:73: a9:a0:5b:1e:43:95:4e:75:aa:33:de:6f:2f:58:e1: d6:a7:a4:05:ad:db:28:bc:72:b1:a5:a7:15:0c:a0: 4d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:5D:6C:82:AE:87:EE:45:E9:13:1E:6B:53:BD:76:51:1A:96:5D X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:52:67:1f:c2:ff:28:71:2d:f4:cb:d0:5c:e3:e2:92:bf:a2: fa:94:80:0b:0d:67:73:66:19:ac:16:63:d5:a7:1c:19:46:38: ce:2c:86:fe:9b:62:3f:55:ca:a8:a5:2e:77:08:56:26:7b:e0: 74:27:57:51:5f:d4:7f:5b:8d:b1:8b:5d:46:bd:9d:87:3b:d2: 86:70:ff:af:05:37:62:96:7f:4a:24:01:13:95:cb:3d:04:fd: b4:36:e7:c0:46:ae:34:77:cd:ce:a5:3f:c3:10:dd:f8:92:c4: e0:02:6d:46:83:c9:69:c7:a8:13:3d:26:e9:49:c8:5d:c3:d8: c7:d0:d5:51:c3:1a:2c:6c:f7:61:38:50:a3:99:7e:54:86:d8: 68:78:bf:7e:67:c8:a7:fe:a6:09:af:51:b6:52:44:46:70:fd: 4c:2a:93:4e:a1:71:76:38:ab:4a:cf:00:dd:86:89:5b:62:7e: 7f:54:90:d3:23:04:73:f2:d5:dc:d8:e9:43:e1:d9:91:75:60: c0:87:86:7b:c3:ce:9d:4d:ac:21:d8:51:97:44:af:9a:99:00: 5e:bf:47:4e:f3:f6:d3:49:44:9e:94:d7:a5:5b:29:81:25:69: 42:57:6b:9e:50:b8:3e:8d:a3:90:75:0b:c4:b7:16:9d:21:b4: 21:7d:cf:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA1MzEwNjQzNTNaFw0yNTA2MDcwNjQzNTNaMBgxFjAUBgNV BAMTDTY4M2FhNTJhLTdkMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNWx4g8zmpqRcDD8/vIrHqPXkC6pKFaCUkXuUSY2Xu2EOGD4YMdzkJO6zRS50r 1jmoxxWIdeiIA7MPKO0xeygWKpOZk4rdYYAUdNYgIZgTxUhyxfAB1k/HpPauFGNr zULRi65mM+uLsc7Kgv4wQEURlTiAPAeYmglxWC8k/ssGeAhkdU8xykG6l6o4Onk9 Rf7OD/Enwv8XTZV4Z1Tirgl1Q5RmW5AY2CAfj0/SQ758P2w1uHf8rEZYbYcNnteI 5pLkkWxMe09wFwKMX2K26NxKcqW/7hz26T610eROazbnc6mgWx5DlU51qjPeby9Y 4danpAWt2yi8crGlpxUMoE0DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFvpdbIKu h+5F6RMea1O9dlEall0wHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItSZx/C/yhxLfTL0Fzj4pK/ovqUgAsNZ3NmGawWY9WnHBlGOM4shv6b Yj9VyqilLncIViZ74HQnV1Ff1H9bjbGLXUa9nYc70oZw/68FN2KWf0okAROVyz0E /bQ258BGrjR3zc6lP8MQ3fiSxOACbUaDyWnHqBM9JulJyF3D2MfQ1VHDGixs92E4 UKOZflSG2Gh4v35nyKf+pgmvUbZSREZw/Uwqk06hcXY4q0rPAN2GiVtifn9UkNMj BHPy1dzY6UPh2ZF1YMCHhnvDzp1NrCHYUZdEr5qZAF6/R07z9tNJRJ6U16VbKYEl aUJXa55QuD6No5B1C8S3Fp0htCF9z6Y= -----END CERTIFICATE-----Generated at Sat May 31 17:37:47 2025 by rpki-client