$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: n1WhuCMDrvpUTxnYWY+VTHsuvVHmg4FzNQy1CiAzFok= Subject key identifier: D5:4B:AD:9E:A3:82:C7:B1:B8:5B:42:AE:92:B9:55:86:58:A7:CB:63 Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 03DF Signing time: Sat 31 May 2025 00:49:49 +0000 Manifest this update: Sat 31 May 2025 00:49:48 +0000 Manifest next update: Sat 07 Jun 2025 00:49:48 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: 3fZ6UpJsrbDTorM61tkOa2ttqeirquK2FmMb8zMW+1M=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: HVGi2lUwCQZWcIQSfZT0TZMTdiphqEIo5eAKaq0V4N8=) 3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294 Validity Not Before: May 31 00:49:48 2025 GMT Not After : Jun 7 00:49:48 2025 GMT Subject: CN=683a522d-f342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:83:63:31:99:a0:69:66:63:3a:7e:d6:1e: e2:08:26:6f:12:7e:bf:99:d9:b1:41:ad:0d:e3:ea: e0:32:0b:6a:de:15:9f:a7:7b:2f:45:f4:61:7f:49: 04:02:4c:4b:19:9b:5c:a1:84:f4:9e:42:60:de:93: dc:63:d0:23:c2:e7:e7:f7:85:ef:12:94:2f:77:49: 30:f9:ac:49:16:27:d6:be:ab:34:f5:0c:e1:a6:dc: eb:00:12:da:dc:c8:59:ec:1f:b3:31:8f:e4:be:70: 75:6f:5e:fc:35:f1:3c:d6:fe:93:e0:c8:f3:3f:20: da:04:b9:f6:38:b0:7c:1d:7e:11:f8:93:80:f1:f6: 07:50:89:c4:8e:9e:b7:68:e8:06:bc:40:c4:fa:ed: a5:68:c5:f4:54:da:62:44:5b:4a:32:2a:b9:06:65: fd:72:fd:c8:1c:29:75:3b:c0:6b:3d:36:f4:63:c3: 65:8c:2d:16:14:c1:02:68:8f:02:aa:d2:5c:47:0d: ff:87:ea:31:16:0a:ee:43:f7:fe:7f:5a:41:77:02: 60:3e:fd:4c:26:b6:e2:ea:b1:94:50:3d:28:3a:98: 54:4c:03:03:a6:d8:22:8b:d8:14:6a:54:fc:2b:6c: c8:44:5c:03:de:a5:04:77:5b:99:24:3f:01:85:2a: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4B:AD:9E:A3:82:C7:B1:B8:5B:42:AE:92:B9:55:86:58:A7:CB:63 X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:3f:a8:cd:82:63:4f:31:ee:3b:c8:2a:cf:2a:60:32:0d: a7:cf:68:a8:6e:d7:38:12:f3:dd:84:0f:18:90:19:6c:ac:b5: 19:2d:ee:12:3a:3b:dd:65:62:b0:a4:5d:6d:be:a1:ed:6c:d7: b1:bf:a5:06:1b:80:5c:df:53:66:bf:99:a9:53:20:ce:e6:f9: f3:19:8c:22:94:d8:ce:9c:55:38:0e:5a:75:5f:1a:1b:2a:5a: b3:b1:e7:bc:27:da:37:c9:a0:aa:f2:fd:f4:91:02:f3:22:1b: 87:37:a2:ca:58:42:db:24:0b:f6:66:e4:4d:74:f8:6f:1d:eb: b1:e9:c9:1e:49:a2:31:d7:35:05:96:a5:27:43:3c:79:46:e7: 67:18:96:fa:4b:af:60:be:b4:47:c7:5b:12:9b:ab:99:86:1a: 9f:3f:89:e4:96:21:b1:a9:c4:41:95:fc:23:80:2c:36:6c:4f: 2b:15:18:ac:84:35:e0:12:9e:d5:8a:b5:d0:8e:44:24:78:7a: 5e:a3:d2:34:3d:0f:a3:a0:ad:ef:13:96:35:2b:09:5a:e4:54: 24:6a:b9:35:4e:8a:7f:7d:fd:b8:e9:d3:1f:67:72:61:50:13: 11:c2:f7:f4:1f:a2:53:67:2c:99:94:d0:46:20:9a:1f:ad:0a: 8f:cc:67:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjUwNTMxMDA0OTQ4WhcNMjUwNjA3MDA0OTQ4WjAYMRYwFAYD VQQDEw02ODNhNTIyZC1mMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB6DYzGZoGlmYzp+1h7iCCZvEn6/mdmxQa0N4+rgMgtq3hWfp3svRfRhf0kE AkxLGZtcoYT0nkJg3pPcY9Ajwufn94XvEpQvd0kw+axJFifWvqs09QzhptzrABLa 3MhZ7B+zMY/kvnB1b178NfE81v6T4MjzPyDaBLn2OLB8HX4R+JOA8fYHUInEjp63 aOgGvEDE+u2laMX0VNpiRFtKMiq5BmX9cv3IHCl1O8BrPTb0Y8NljC0WFMECaI8C qtJcRw3/h+oxFgruQ/f+f1pBdwJgPv1MJrbi6rGUUD0oOphUTAMDptgii9gUalT8 K2zIRFwD3qUEd1uZJD8BhSrq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVLrZ6j gsexuFtCrpK5VYZYp8tjMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiHD+ozYJjTzHuO8gqzypgMg2nz2iobtc4EvPdhA8YkBlsrLUZLe4S OjvdZWKwpF1tvqHtbNexv6UGG4Bc31Nmv5mpUyDO5vnzGYwilNjOnFU4Dlp1Xxob Klqzsee8J9o3yaCq8v30kQLzIhuHN6LKWELbJAv2ZuRNdPhvHeux6ckeSaIx1zUF lqUnQzx5RudnGJb6S69gvrRHx1sSm6uZhhqfP4nkliGxqcRBlfwjgCw2bE8rFRis hDXgEp7VirXQjkQkeHpeo9I0PQ+joK3vE5Y1Kwla5FQkark1Top/ff246dMfZ3Jh UBMRwvf0H6JTZyyZlNBGIJofrQqPzGeh -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client