$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: QA2gLLXREixJ7d+3HbuBR1bBfmDCT55n+GqErisppRI= Subject key identifier: 57:A9:D1:79:98:98:FC:EA:D1:24:1B:64:C4:53:7B:41:C5:76:89:93 Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 161F Signing time: Fri 30 May 2025 17:45:12 +0000 Manifest this update: Fri 30 May 2025 17:45:11 +0000 Manifest next update: Fri 06 Jun 2025 17:45:11 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: iYDdRQ7WWof6AASnvzTz68K3x5BrTaMGv2s/NJADgIo=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: May 30 17:45:11 2025 GMT Not After : Jun 6 17:45:11 2025 GMT Subject: CN=6839eea7-50a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:29:09:69:3c:1c:af:5a:62:88:6a:0f:81: 6b:94:d9:5a:07:85:eb:cd:9d:80:42:ea:68:c8:c8: 39:83:d0:35:bc:bd:5c:c9:69:f7:de:ca:6e:2f:cd: e5:e8:b9:5b:ad:c6:09:f8:a8:d6:6b:d0:22:75:39: 21:e4:a1:0f:d8:90:af:f7:41:ed:ce:58:06:f9:b9: 95:ea:4f:f2:ff:8e:78:b9:5a:9a:29:5b:af:7e:cc: 76:a4:9f:af:aa:3f:95:5a:c0:25:83:a9:e5:45:80: 9b:2c:f5:b7:25:bb:33:6a:da:a1:76:c2:c2:54:9e: 6c:23:cb:c3:ff:ae:34:91:e2:18:37:6c:4f:91:11: 66:9e:31:3c:c5:4a:5d:1f:d1:5a:38:af:d5:37:cf: 11:4d:42:df:ee:86:e1:ac:0c:04:b9:aa:a0:f2:48: 49:bc:d0:e5:f6:c3:97:bc:ff:c5:72:cf:6b:eb:14: b2:a3:c3:68:f2:5f:aa:7c:bf:03:03:0b:86:c8:48: af:66:71:e5:27:c6:bf:4f:43:4d:32:b7:d3:90:ce: 8b:34:b4:c4:78:34:fb:56:6a:db:ba:e6:e9:1f:82: e3:f5:9a:a2:28:7c:65:91:88:4d:77:06:4a:3e:e4: 80:a2:d7:c5:0e:67:53:d6:24:ce:29:15:ac:fa:11: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A9:D1:79:98:98:FC:EA:D1:24:1B:64:C4:53:7B:41:C5:76:89:93 X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:c9:01:7a:1f:6a:a5:de:f8:c5:1c:7a:6e:85:21:16:d8: 8f:0a:c1:15:2d:55:47:13:76:0c:c0:89:7b:fd:c1:74:d0:19: db:52:1d:1a:70:53:a1:b3:53:11:2a:d2:96:9d:10:c3:4d:06: c5:88:16:2c:96:1c:98:19:88:b3:cd:82:b2:75:8d:ca:7c:4c: 31:0a:89:98:ed:78:ff:2c:63:87:32:0f:60:79:32:15:12:44: 57:a9:2d:dd:e4:0f:aa:c6:73:72:1a:e0:87:d9:98:b6:86:b2: e7:80:9a:6c:ab:45:3a:e3:a4:08:ce:c5:5a:06:67:8b:43:cc: 49:98:ab:e9:d8:6b:51:6f:da:25:ef:7e:7e:48:45:63:1a:69: c3:0c:b6:94:7c:b8:e5:96:45:92:9e:14:69:4a:61:be:38:bf: e6:36:19:49:7d:c0:59:d7:00:e6:17:a6:64:11:4d:b4:d0:1c: ab:fb:b1:6a:31:bc:3e:77:5d:82:cc:d2:ef:5a:48:a4:60:02: 88:f6:c9:04:66:4e:d8:da:35:bc:80:7d:6f:f0:4b:27:72:49: d0:44:a0:57:9b:61:26:22:e6:87:70:e7:85:5d:97:1f:d1:be: 65:af:f7:69:a9:45:ea:37:b7:d0:7a:cc:0d:34:b4:25:e2:aa: 63:d5:9f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwNTMwMTc0NTExWhcNMjUwNjA2MTc0NTExWjAYMRYwFAYD VQQDEw02ODM5ZWVhNy01MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w8pCWk8HK9aYohqD4FrlNlaB4XrzZ2AQupoyMg5g9A1vL1cyWn33spuL83l 6LlbrcYJ+KjWa9AidTkh5KEP2JCv90HtzlgG+bmV6k/y/454uVqaKVuvfsx2pJ+v qj+VWsAlg6nlRYCbLPW3JbszatqhdsLCVJ5sI8vD/640keIYN2xPkRFmnjE8xUpd H9FaOK/VN88RTULf7obhrAwEuaqg8khJvNDl9sOXvP/Fcs9r6xSyo8No8l+qfL8D AwuGyEivZnHlJ8a/T0NNMrfTkM6LNLTEeDT7VmrbuubpH4Lj9ZqiKHxlkYhNdwZK PuSAotfFDmdT1iTOKRWs+hHjSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFep0XmY mPzq0SQbZMRTe0HFdomTMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3mskBeh9qpd74xRx6boUhFtiPCsEVLVVHE3YMwIl7/cF00BnbUh0a cFOhs1MRKtKWnRDDTQbFiBYslhyYGYizzYKydY3KfEwxComY7Xj/LGOHMg9geTIV EkRXqS3d5A+qxnNyGuCH2Zi2hrLngJpsq0U646QIzsVaBmeLQ8xJmKvp2GtRb9ol 735+SEVjGmnDDLaUfLjllkWSnhRpSmG+OL/mNhlJfcBZ1wDmF6ZkEU200Byr+7Fq Mbw+d12CzNLvWkikYAKI9skEZk7Y2jW8gH1v8EsncknQRKBXm2EmIuaHcOeFXZcf 0b5lr/dpqUXqN7fQeswNNLQl4qpj1Z/v -----END CERTIFICATE-----Generated at Sat May 31 17:46:30 2025 by rpki-client