$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: U8i1x7NmpzNWSI7gYDMVR/ShwYlUbt4r2I4LETyb1DI= Subject key identifier: D9:BE:AF:40:F3:B9:00:6B:B3:8A:5F:84:72:3B:32:30:00:C7:12:C0 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 01CC Signing time: Sat 31 May 2025 02:37:16 +0000 Manifest this update: Sat 31 May 2025 02:37:15 +0000 Manifest next update: Sat 07 Jun 2025 02:37:15 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: LLPQG3rrbR37tLU5GWyiWrLVsdYcYjaU69dWqggBlP4=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: ADnEMa2Brj1gfAu5du2mdudMmrXS7wa9cPzXrkNiEN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: May 31 02:37:15 2025 GMT Not After : Jun 7 02:37:15 2025 GMT Subject: CN=683a6b5b-7973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:1d:aa:1c:84:ea:9b:3e:44:dd:56:5b:18: e1:18:ef:de:2e:c6:2f:df:b0:5f:d7:7d:d2:8b:f9: ab:ad:4b:0e:10:f0:e3:1b:16:c8:e0:18:2f:85:1f: 6e:ac:6c:86:3a:83:e9:20:ad:13:8d:4c:d3:33:57: e9:a4:7a:44:20:b3:6d:87:81:c8:83:4b:bd:f1:cd: 93:db:ab:09:28:c6:c1:20:8a:45:15:32:d0:78:8a: 0c:10:da:d8:3f:bf:27:9d:1a:fd:45:28:d5:a1:7d: 95:a9:a7:ff:1f:eb:26:e9:c5:a9:26:bf:53:fc:5a: 9d:ab:c1:78:82:ed:f4:c2:60:81:48:c7:4e:31:16: ad:34:4a:04:3b:0a:bc:33:70:b1:ca:02:1b:b3:ab: 46:f5:d7:4a:9d:50:3b:fc:36:57:42:83:5c:60:ec: de:b3:4d:3b:e4:f3:de:02:ef:1f:36:1a:f2:42:90: ff:3e:ad:77:27:63:94:73:ac:34:4f:67:e4:f2:41: fe:1d:94:3f:f8:c3:cb:4c:2c:e9:b9:a2:26:a7:a1: 48:3b:2c:83:a9:a4:dd:dd:90:fb:52:ad:1a:4f:f2: d0:7e:92:a4:18:28:7d:fe:a9:63:dc:d2:bc:eb:aa: 41:22:b0:33:5c:c6:2b:9e:41:7b:63:b9:57:e5:27: 1d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BE:AF:40:F3:B9:00:6B:B3:8A:5F:84:72:3B:32:30:00:C7:12:C0 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fd:41:99:33:4c:7b:ee:75:c8:63:00:7a:b5:63:f6:d6:39: e7:2a:bf:f7:64:89:a1:3e:ab:a9:24:8d:e3:6a:53:1a:fb:a1: 80:0c:59:a3:e7:7e:6b:c6:a9:92:02:f5:ec:d6:dc:f7:4b:86: b4:30:7e:cc:cf:31:57:58:30:44:c6:16:04:8f:0b:86:37:da: dd:d7:f6:af:4d:fe:40:35:13:1d:fb:72:3e:cc:4e:ea:b5:ee: 8a:41:36:d7:8d:a8:cd:ec:b4:a5:c0:dc:6c:a3:95:89:6b:cc: 47:20:67:b7:be:9d:f9:8f:4c:1c:77:a2:7b:ea:19:16:6b:ce: 1a:67:bb:ea:bc:ac:9e:89:34:ab:2b:bd:40:ce:3a:74:2c:69: d6:cb:d3:05:f2:ff:f9:e5:15:c4:24:74:2a:4a:27:bd:83:00: 5b:bb:ca:19:3e:39:a6:e3:12:e9:e1:11:c1:cb:0d:07:c7:b7: 03:a5:a3:f0:3b:ce:45:a9:6b:4b:97:24:e3:f3:44:b4:27:65: 12:25:25:a0:58:06:a6:79:d9:cd:3d:4a:6d:8d:c2:ad:62:42: 3e:8b:d9:21:bb:26:e2:e7:66:81:06:6d:28:9d:6f:0c:80:08: 39:2d:7e:f9:a6:7d:aa:67:3c:4a:3c:57:5e:93:db:6e:36:9d: 1b:70:89:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjUwNTMxMDIzNzE1WhcNMjUwNjA3MDIzNzE1WjAYMRYwFAYD VQQDEw02ODNhNmI1Yi03OTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJkdqhyE6ps+RN1WWxjhGO/eLsYv37Bf133Si/mrrUsOEPDjGxbI4BgvhR9u rGyGOoPpIK0TjUzTM1fppHpEILNth4HIg0u98c2T26sJKMbBIIpFFTLQeIoMENrY P78nnRr9RSjVoX2Vqaf/H+sm6cWpJr9T/Fqdq8F4gu30wmCBSMdOMRatNEoEOwq8 M3CxygIbs6tG9ddKnVA7/DZXQoNcYOzes0075PPeAu8fNhryQpD/Pq13J2OUc6w0 T2fk8kH+HZQ/+MPLTCzpuaImp6FIOyyDqaTd3ZD7Uq0aT/LQfpKkGCh9/qlj3NK8 66pBIrAzXMYrnkF7Y7lX5ScdFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm+r0Dz uQBrs4pfhHI7MjAAxxLAMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/UGZM0x77nXIYwB6tWP21jnnKr/3ZImhPqupJI3jalMa+6GADFmj 535rxqmSAvXs1tz3S4a0MH7MzzFXWDBExhYEjwuGN9rd1/avTf5ANRMd+3I+zE7q te6KQTbXjajN7LSlwNxso5WJa8xHIGe3vp35j0wcd6J76hkWa84aZ7vqvKyeiTSr K71Azjp0LGnWy9MF8v/55RXEJHQqSie9gwBbu8oZPjmm4xLp4RHByw0Hx7cDpaPw O85FqWtLlyTj80S0J2USJSWgWAamednNPUptjcKtYkI+i9khuybi52aBBm0onW8M gAg5LX75pn2qZzxKPFdek9tuNp0bcImt -----END CERTIFICATE-----Generated at Sat May 31 17:02:19 2025 by rpki-client