$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: Tt7425UdlWIHCGyX9J4b11GOh1njuDPTUvEOGdtvmA0= Subject key identifier: C3:EE:B5:AA:0C:9B:3B:BA:22:2B:89:68:31:85:00:42:79:F1:EA:F3 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 0123 Signing time: Sat 31 May 2025 04:20:23 +0000 Manifest this update: Sat 31 May 2025 04:20:22 +0000 Manifest next update: Sat 07 Jun 2025 04:20:22 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: rltRkuM3PN1TTFNJ4hSd9FdpaLxYtHDwnU56thck8YI=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: May 31 04:20:22 2025 GMT Not After : Jun 7 04:20:22 2025 GMT Subject: CN=683a8386-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b2:a7:ee:76:c8:f7:ad:fd:96:dd:96:29:ed: 2b:ee:35:67:c5:8a:a4:49:94:32:47:50:5d:3f:0d: 4c:1f:e4:86:87:ac:62:8d:2d:5a:17:01:91:06:22: 51:a9:99:2c:50:cf:7b:b4:e9:ee:53:f3:eb:0b:de: 97:7d:18:a6:99:ac:1d:bd:a8:94:2d:0d:a4:7c:59: c0:19:ff:e5:30:89:79:d2:8c:56:bb:81:2b:e9:e9: 4f:21:e4:cc:43:5e:d7:1b:a1:de:57:65:26:73:ec: 07:0a:15:da:ec:c7:cc:aa:ad:ac:b5:77:59:9e:08: 65:da:4c:32:62:e9:46:39:d7:0f:07:a7:a6:5a:df: 48:b6:24:1f:89:08:07:01:88:88:a1:90:08:75:9d: 7c:e3:ad:37:f6:5b:d6:23:42:24:0a:b0:4f:e8:ba: 22:5f:dc:8e:18:92:45:54:38:ed:d4:11:74:a4:89: ef:7c:9b:e8:b4:97:be:da:0d:b8:a6:4d:ea:e2:64: 55:4e:84:e3:ff:ab:ef:12:0c:bc:77:e1:70:dd:20: b5:90:36:df:ad:4c:c6:4d:78:6a:53:ee:ee:a5:9c: c9:49:97:8f:ee:08:ba:56:d6:0f:e7:e7:1e:37:8d: e9:76:1f:fc:dc:f3:e9:78:16:f5:c1:25:e7:6e:7c: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EE:B5:AA:0C:9B:3B:BA:22:2B:89:68:31:85:00:42:79:F1:EA:F3 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e8:cc:67:c9:07:be:c9:56:70:2e:74:23:bf:65:6d:a5:63: e6:70:bf:f5:10:1b:de:47:f5:e5:5a:d5:af:61:bd:e7:e4:b7: 01:21:46:d0:27:48:e0:bd:28:ab:b6:80:06:46:7b:7d:12:20: b4:a5:fb:ac:d8:0c:74:bf:82:9f:8f:9e:70:8a:2c:c5:61:f3: 5a:65:35:99:95:f1:63:9a:da:ad:b1:79:8b:f8:e0:1e:d0:af: 6e:5c:1d:b0:67:52:43:46:7a:61:89:a8:52:70:75:ae:2b:fe: 7b:8a:5e:81:25:6c:35:33:40:08:2a:ea:37:f6:cf:bc:a5:c2: 1e:6f:28:63:10:25:dd:dd:0d:19:f6:d6:5a:55:91:ba:ca:5f: a3:e2:88:b0:6e:3c:5d:b3:21:42:6b:4b:c8:ea:d1:3e:fb:0b: 57:52:44:c0:39:ae:32:49:85:37:1b:10:42:e1:4e:d7:62:d6: 85:a0:12:02:ec:8e:b4:a3:ca:51:f3:e8:bc:5a:69:00:35:14: 26:9d:ad:65:cd:c4:b9:6f:fd:a2:61:ea:fa:df:e1:d4:3c:61: 85:e1:eb:e9:67:a6:20:f3:91:21:10:fc:10:bb:10:35:af:b8: b7:7e:9e:d7:78:7b:62:85:00:07:12:03:a7:c1:e6:f5:64:08: 07:b1:2d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUwNTMxMDQyMDIyWhcNMjUwNjA3MDQyMDIyWjAYMRYwFAYD VQQDEw02ODNhODM4Ni1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bKn7nbI9639lt2WKe0r7jVnxYqkSZQyR1BdPw1MH+SGh6xijS1aFwGRBiJR qZksUM97tOnuU/PrC96XfRimmawdvaiULQ2kfFnAGf/lMIl50oxWu4Er6elPIeTM Q17XG6HeV2Umc+wHChXa7MfMqq2stXdZnghl2kwyYulGOdcPB6emWt9ItiQfiQgH AYiIoZAIdZ1846039lvWI0IkCrBP6LoiX9yOGJJFVDjt1BF0pInvfJvotJe+2g24 pk3q4mRVToTj/6vvEgy8d+Fw3SC1kDbfrUzGTXhqU+7upZzJSZeP7gi6VtYP5+ce N43pdh/83PPpeBb1wSXnbnyCZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPutaoM mzu6IiuJaDGFAEJ58erzMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq6MxnyQe+yVZwLnQjv2VtpWPmcL/1EBveR/XlWtWvYb3n5LcBIUbQ J0jgvSirtoAGRnt9EiC0pfus2Ax0v4Kfj55wiizFYfNaZTWZlfFjmtqtsXmL+OAe 0K9uXB2wZ1JDRnphiahScHWuK/57il6BJWw1M0AIKuo39s+8pcIebyhjECXd3Q0Z 9tZaVZG6yl+j4oiwbjxdsyFCa0vI6tE++wtXUkTAOa4ySYU3GxBC4U7XYtaFoBIC 7I60o8pR8+i8WmkANRQmna1lzcS5b/2iYer63+HUPGGF4evpZ6Yg85EhEPwQuxA1 r7i3fp7XeHtihQAHEgOnweb1ZAgHsS1F -----END CERTIFICATE-----Generated at Sat May 31 16:57:53 2025 by rpki-client