$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: XkDSs3H7oAuP8Qf2LyG2E5hvMwUwZVB9H0lqFwBDBi8= Subject key identifier: 5F:8E:F4:DF:80:86:CA:9B:AA:70:A2:28:E9:9A:A4:0B:1C:71:69:DE Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02A4 Signing time: Sat 31 May 2025 01:42:10 +0000 Manifest this update: Sat 31 May 2025 01:42:09 +0000 Manifest next update: Sat 07 Jun 2025 01:42:09 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: 1QQnp84MEE6DbY7w6hGlPmdxhzwWUG4yTYIiGTAehfw=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: May 31 01:42:09 2025 GMT Not After : Jun 7 01:42:09 2025 GMT Subject: CN=683a5e72-19fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:08:b6:e5:69:32:a3:0d:d6:f7:a2:da:7e: ff:4b:e5:bf:7d:24:b5:b4:6d:e9:47:8f:17:9e:4d: 84:03:05:1d:99:c9:c1:c1:62:81:37:6b:c0:91:e6: f7:37:32:23:08:b5:4e:d9:76:c6:03:29:89:a1:6d: 89:c5:dd:3b:10:8b:a9:c0:14:59:08:48:62:8f:84: b3:75:9d:6d:3f:b9:c1:d7:e6:85:9e:1a:75:73:f0: 11:ed:03:e5:0a:19:fd:e7:6c:d8:0c:ad:a0:60:d3: b9:75:c3:2d:8a:7a:6c:eb:b6:68:d2:93:bf:46:f2: 60:4c:c8:0d:6d:49:0b:8a:db:7b:24:c5:ed:7c:bc: fa:dd:88:8d:05:c9:e5:46:8b:92:66:1a:6b:2b:cd: b3:82:e6:07:df:0d:d5:6f:fa:66:f8:e5:65:b9:da: d7:81:dc:67:16:ec:fa:5c:23:d6:88:3a:48:11:7a: b6:12:d3:b9:2e:e4:2b:0f:1e:b7:00:f2:5c:da:a4: a4:db:58:5a:2c:9e:28:62:55:3b:5c:4f:e0:fd:89: ba:57:c2:c2:9e:df:4b:b6:0c:c3:f5:a7:ec:a8:30: 16:ed:5c:fe:06:39:b6:30:38:cf:1f:dd:ba:da:3b: 65:c7:6b:07:47:71:13:9c:cf:e7:1e:fb:cd:a1:83: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8E:F4:DF:80:86:CA:9B:AA:70:A2:28:E9:9A:A4:0B:1C:71:69:DE X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:55:57:e4:1e:08:4a:6c:fe:9c:ca:d9:94:1b:8a:62:07: 95:db:3a:c2:19:70:33:d5:e7:80:34:35:1d:50:ad:6e:18:e3: a5:04:4c:f2:0d:2d:56:5d:72:12:bb:cd:ac:53:2c:4b:ee:6d: a0:b9:d2:8d:c0:69:b0:39:f7:53:bf:ef:ca:b1:9c:9d:07:8a: ac:04:41:ad:02:71:2c:77:49:8a:77:d8:5b:c0:77:5d:4b:5b: 63:4a:65:f3:8e:f3:68:7e:b1:78:14:4a:e3:85:d7:0f:ed:e9: ac:65:80:cd:97:27:54:4d:bd:90:95:ce:20:e5:cd:64:37:a9: be:ba:85:97:68:7d:0f:b0:fd:37:a3:a2:ae:7f:50:94:1f:51: 92:d6:60:ef:e2:d7:7e:8b:0d:2a:7b:35:54:e7:ec:7a:d4:d7: e2:89:12:77:26:39:bb:d0:13:3b:70:8c:0c:db:e8:26:ac:59: d3:af:1c:d3:2f:c8:a5:45:f3:e2:72:00:cf:79:56:39:5a:77: cf:b6:5f:6f:33:a8:b4:43:20:fa:29:7f:4f:66:01:83:dd:d4: 8c:f2:5e:06:18:67:76:8e:69:4b:36:3e:b7:81:9b:a0:64:36: 6c:4a:20:d9:8b:cb:d1:7d:9d:be:bb:3d:3a:83:5b:e1:c3:30: b2:25:8a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwNTMxMDE0MjA5WhcNMjUwNjA3MDE0MjA5WjAYMRYwFAYD VQQDEw02ODNhNWU3Mi0xOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIMItuVpMqMN1vei2n7/S+W/fSS1tG3pR48Xnk2EAwUdmcnBwWKBN2vAkeb3 NzIjCLVO2XbGAymJoW2Jxd07EIupwBRZCEhij4SzdZ1tP7nB1+aFnhp1c/AR7QPl Chn952zYDK2gYNO5dcMtinps67Zo0pO/RvJgTMgNbUkLitt7JMXtfLz63YiNBcnl RouSZhprK82zguYH3w3Vb/pm+OVludrXgdxnFuz6XCPWiDpIEXq2EtO5LuQrDx63 APJc2qSk21haLJ4oYlU7XE/g/Ym6V8LCnt9LtgzD9afsqDAW7Vz+Bjm2MDjPH926 2jtlx2sHR3ETnM/nHvvNoYNqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+O9N+A hsqbqnCiKOmapAsccWneMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD91VX5B4ISmz+nMrZlBuKYgeV2zrCGXAz1eeANDUdUK1uGOOlBEzy DS1WXXISu82sUyxL7m2gudKNwGmwOfdTv+/KsZydB4qsBEGtAnEsd0mKd9hbwHdd S1tjSmXzjvNofrF4FErjhdcP7emsZYDNlydUTb2Qlc4g5c1kN6m+uoWXaH0PsP03 o6Kuf1CUH1GS1mDv4td+iw0qezVU5+x61NfiiRJ3Jjm70BM7cIwM2+gmrFnTrxzT L8ilRfPicgDPeVY5WnfPtl9vM6i0QyD6KX9PZgGD3dSM8l4GGGd2jmlLNj63gZug ZDZsSiDZi8vRfZ2+uz06g1vhwzCyJYrI -----END CERTIFICATE-----Generated at Sat May 31 16:52:14 2025 by rpki-client