$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json) Hash identifier: tNIhh5nCXOZ/13hbLt/OY2x9Wcdt75oUeHhvqmWO668= Subject key identifier: 97:E3:69:83:A7:BC:F4:EA:3E:EF:1E:E7:FD:27:00:D8:95:B0:F2:16 Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft Manifest number: 0598 Signing time: Fri 30 May 2025 23:25:14 +0000 Manifest this update: Fri 30 May 2025 23:25:14 +0000 Manifest next update: Fri 06 Jun 2025 23:25:14 +0000 Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: 9mfsCi/TZOWTvRY219OWv4+kfh93cxgnVUdfhTmPW2A=) 2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: zqhHb4EuNxIhj0MsDdGRZBLgZ5b4JdLttiLWNXtELcI=) 3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: May 30 23:25:14 2025 GMT Not After : Jun 6 23:25:14 2025 GMT Subject: CN=683a3e5a-eaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:83:10:80:38:ea:40:ad:bc:cc:bc:46:e4: 48:14:0e:cc:e0:d9:1b:be:67:dd:20:ea:1c:17:6d: fd:05:fd:15:b4:2e:8d:1f:5e:66:5b:8d:28:4c:f2: 6a:a8:a7:4f:a9:8d:87:c8:ca:24:10:3a:b9:08:20: 92:a8:54:2a:88:d3:fd:85:da:fa:cb:91:79:5d:12: c1:f2:e9:c4:66:39:3f:61:0d:11:0d:85:ce:8d:58: 17:8c:07:1f:71:f7:ca:ac:61:a2:52:ee:c5:69:2e: a9:af:6c:36:d9:1c:31:4c:d8:0a:07:88:23:36:1d: df:ce:d1:48:84:24:53:d8:5a:ce:08:b6:27:ec:fd: db:57:a7:0c:97:76:f3:4c:61:6b:b7:56:dc:17:7e: cc:bf:26:b9:aa:98:b5:9f:db:d2:94:51:80:02:37: 1c:b1:75:1e:9e:a3:e5:40:32:e7:c4:88:ef:69:96: e2:79:42:dd:d4:ec:8f:9b:f6:68:4d:17:dc:04:4b: 28:86:ab:6a:96:12:e3:ca:8c:22:95:b8:4a:b0:fb: 16:44:e1:5f:c0:c3:fa:b1:bc:fd:fb:c8:e3:50:e7: aa:7d:4c:07:b2:8a:3e:d0:26:44:b6:19:88:34:3d: b1:e0:f4:19:53:93:66:66:de:32:20:9c:33:1f:71: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:69:83:A7:BC:F4:EA:3E:EF:1E:E7:FD:27:00:D8:95:B0:F2:16 X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:42:3e:b3:6a:9a:42:8b:32:c9:91:7c:cd:b9:8a:3e:6c:c5: f2:66:43:50:95:f9:0f:54:02:55:64:ad:31:3d:ff:40:d4:20: 4f:03:da:bb:5d:00:c4:27:02:4d:70:00:8b:fb:7e:61:48:0e: dd:c2:fe:2f:69:b2:05:e1:6a:80:48:76:12:70:42:34:90:d3: d8:90:99:6a:cc:31:9a:b7:28:ff:ce:5b:21:c8:3c:f0:cd:6b: ad:36:fe:0b:d9:81:90:53:81:d8:7e:3a:44:5c:c0:9c:0a:fc: 9c:3a:12:ae:5f:37:a9:e5:96:7c:8c:21:66:d7:32:2b:11:a5: 77:22:b9:15:58:03:08:71:60:e7:fe:e0:67:fd:3c:df:ca:6a: cd:fc:49:cb:b0:5a:76:a9:d6:01:18:aa:01:f6:fc:cd:af:d7: b9:7a:10:d0:5d:3a:66:6a:8d:f6:b3:98:7b:07:46:76:7f:cc: 79:0d:11:f9:a7:7d:5c:4b:ce:1f:e2:c5:98:9c:31:20:d1:91: d2:83:8e:db:ec:1d:fd:fa:71:37:dd:a4:a1:bf:de:74:18:93: 63:f3:9b:7b:3f:3c:bb:5d:70:0b:96:53:3e:3b:b4:fb:03:da: 33:6a:3e:2b:7e:54:49:82:80:aa:1a:2c:2f:0e:53:b0:84:3f: a9:a8:4a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjUwNTMwMjMyNTE0WhcNMjUwNjA2MjMyNTE0WjAYMRYwFAYD VQQDEw02ODNhM2U1YS1lYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkWDEIA46kCtvMy8RuRIFA7M4NkbvmfdIOocF239Bf0VtC6NH15mW40oTPJq qKdPqY2HyMokEDq5CCCSqFQqiNP9hdr6y5F5XRLB8unEZjk/YQ0RDYXOjVgXjAcf cffKrGGiUu7FaS6pr2w22RwxTNgKB4gjNh3fztFIhCRT2FrOCLYn7P3bV6cMl3bz TGFrt1bcF37Mvya5qpi1n9vSlFGAAjccsXUenqPlQDLnxIjvaZbieULd1OyPm/Zo TRfcBEsohqtqlhLjyowilbhKsPsWROFfwMP6sbz9+8jjUOeqfUwHsoo+0CZEthmI ND2x4PQZU5NmZt4yIJwzH3GEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfjaYOn vPTqPu8e5/0nANiVsPIWMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0 RzdjQzREaUNveVgtdV82YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjQj6zappCizLJkXzNuYo+bMXyZkNQlfkPVAJVZK0xPf9A1CBPA9q7 XQDEJwJNcACL+35hSA7dwv4vabIF4WqASHYScEI0kNPYkJlqzDGatyj/zlshyDzw zWutNv4L2YGQU4HYfjpEXMCcCvycOhKuXzep5ZZ8jCFm1zIrEaV3IrkVWAMIcWDn /uBn/TzfymrN/EnLsFp2qdYBGKoB9vzNr9e5ehDQXTpmao32s5h7B0Z2f8x5DRH5 p31cS84f4sWYnDEg0ZHSg47b7B39+nE33aShv950GJNj85t7Pzy7XXALllM+O7T7 A9ozaj4rflRJgoCqGiwvDlOwhD+pqEoN -----END CERTIFICATE-----Generated at Sat May 31 16:35:52 2025 by rpki-client