$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: 4mgPDIovVpnjr4Ro78BGwj1FyNjGHehxc18WhXHXJlc= Subject key identifier: 02:55:BD:EB:F6:3F:57:CB:0D:F7:9A:08:CD:25:F6:99:1F:AE:EC:3D Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 02DC Signing time: Tue 03 Jun 2025 01:36:03 +0000 Manifest this update: Tue 03 Jun 2025 01:36:03 +0000 Manifest next update: Tue 10 Jun 2025 01:36:03 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: eRDVETF/DMLXrf4a/t5zkH9m/LLPkQH94PvyNv60wxQ=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Jun 3 01:36:03 2025 GMT Not After : Jun 10 01:36:03 2025 GMT Subject: CN=683e5183-00be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:29:eb:2d:e6:83:9e:aa:51:c0:c9:1e:00: d4:30:49:03:0a:2a:be:35:60:73:7f:24:a8:66:59: c5:52:71:3e:ee:e6:79:8c:8f:d3:95:ae:09:ca:c3: 5e:4c:bb:f0:76:1a:a2:eb:a3:ab:4d:64:e2:f9:3a: 59:3b:f1:15:bc:00:eb:ae:d2:c3:bc:0d:45:e9:79: 95:08:58:b9:1f:28:82:df:4d:13:33:e1:03:c3:cc: fb:91:32:f9:27:6e:ff:99:ac:12:ab:84:05:dd:11: 72:a5:8e:f4:cf:9a:ab:e3:fb:44:96:22:32:7e:9e: c3:d0:47:e4:03:f0:c5:4d:5c:43:47:3f:1b:50:01: ea:3e:aa:b0:e1:2e:06:ec:c9:16:9a:d2:f7:c6:c4: 7c:5f:e4:89:69:dc:4d:7a:95:b7:47:f4:f4:56:f7: f2:87:f3:98:b1:ee:5c:1e:68:b7:d8:d3:47:ad:54: fe:2d:a0:44:5f:ea:1c:b6:e5:80:8e:5d:aa:d8:a7: 0e:92:01:5c:a6:21:77:27:a6:79:94:71:8e:41:5b: 95:f9:e5:b9:c2:28:07:d7:14:c4:18:a7:7f:aa:a4: c8:1a:2d:4c:94:3c:8b:6f:8f:be:2b:79:9a:6f:f5: 44:ef:42:5d:c0:89:d5:78:92:3f:e1:e3:ce:d6:5b: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:BD:EB:F6:3F:57:CB:0D:F7:9A:08:CD:25:F6:99:1F:AE:EC:3D X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:76:fd:60:0a:9d:fe:7d:4a:2d:02:4c:0d:50:c2:d9:a8:3c: c6:20:e3:00:68:cf:4c:90:02:ba:90:e5:05:be:20:e6:ef:6f: ba:61:0b:65:f1:c6:a2:ae:10:c8:98:4f:d3:27:cc:ad:ac:b7: 4c:6f:25:c2:79:8b:6f:bc:8d:f9:c1:05:71:86:98:38:34:92: 54:6f:e3:bc:fb:1d:17:f7:9d:d8:0a:db:a3:61:58:d5:06:58: 53:b4:df:3f:b6:0d:65:dc:30:25:a5:9d:f1:06:12:4b:a2:46: ef:33:03:fd:ba:a5:1f:bf:11:a3:c1:bf:0c:ab:96:e7:45:cb: 13:e0:c2:42:8e:c5:24:cb:53:91:f0:b0:98:d4:7f:6a:90:7c: 51:cb:c9:84:27:bf:43:37:b8:5c:5c:97:4f:dc:bc:1f:ee:f9: 0b:86:2d:b2:78:9c:5c:b5:6d:03:dd:e9:9b:6b:53:e5:3d:03: e0:6e:bc:d9:b3:96:ae:33:93:50:cb:f9:6d:50:38:ed:e7:7b: 70:dc:13:d8:8c:0e:e6:3f:62:a7:ce:3c:0b:16:69:52:d2:b8: 48:c1:f1:55:cf:c8:a8:1b:67:91:66:cd:51:c3:fc:e2:60:5d: 5c:60:69:8f:56:92:1c:39:b7:55:f3:a5:b7:5f:26:42:31:be: be:d2:5f:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUwNjAzMDEzNjAzWhcNMjUwNjEwMDEzNjAzWjAYMRYwFAYD VQQDEw02ODNlNTE4My0wMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1op6y3mg56qUcDJHgDUMEkDCiq+NWBzfySoZlnFUnE+7uZ5jI/Tla4JysNe TLvwdhqi66OrTWTi+TpZO/EVvADrrtLDvA1F6XmVCFi5HyiC300TM+EDw8z7kTL5 J27/mawSq4QF3RFypY70z5qr4/tEliIyfp7D0EfkA/DFTVxDRz8bUAHqPqqw4S4G 7MkWmtL3xsR8X+SJadxNepW3R/T0Vvfyh/OYse5cHmi32NNHrVT+LaBEX+octuWA jl2q2KcOkgFcpiF3J6Z5lHGOQVuV+eW5wigH1xTEGKd/qqTIGi1MlDyLb4++K3ma b/VE70JdwInVeJI/4ePO1lv/YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJVvev2 P1fLDfeaCM0l9pkfruw9MB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbdv1gCp3+fUotAkwNUMLZqDzGIOMAaM9MkAK6kOUFviDm72+6YQtl 8cairhDImE/TJ8ytrLdMbyXCeYtvvI35wQVxhpg4NJJUb+O8+x0X953YCtujYVjV BlhTtN8/tg1l3DAlpZ3xBhJLokbvMwP9uqUfvxGjwb8Mq5bnRcsT4MJCjsUky1OR 8LCY1H9qkHxRy8mEJ79DN7hcXJdP3Lwf7vkLhi2yeJxctW0D3emba1PlPQPgbrzZ s5auM5NQy/ltUDjt53tw3BPYjA7mP2KnzjwLFmlS0rhIwfFVz8ioG2eRZs1Rw/zi YF1cYGmPVpIcObdV86W3XyZCMb6+0l83 -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:33 2025 by rpki-client