$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: ouzQgmsPlGknGxdwPnCu0JlsxPLSe14FbLLKQLzcF+g= Subject key identifier: B1:12:A7:E7:5A:F7:97:1A:F3:3B:41:71:8A:06:6B:C6:84:CD:ED:C3 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 9F Signing time: Sat 31 May 2025 05:49:19 +0000 Manifest this update: Sat 31 May 2025 05:49:19 +0000 Manifest next update: Sat 07 Jun 2025 05:49:19 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: T6gh5ZF4xY+aUh+l+dNBxaloqZNC1j2qzmhm77v0DLE=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: May 31 05:49:19 2025 GMT Not After : Jun 7 05:49:19 2025 GMT Subject: CN=683a985f-5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:07:94:50:f9:fa:e7:6a:c9:8f:2d:7e:92:f9: d5:af:a6:29:9d:d4:8f:87:70:4f:8a:a7:ac:3c:98: d7:6e:7f:a0:ad:93:14:0d:1f:07:25:88:e2:26:f0: fa:64:e5:f1:54:fe:8a:bf:b0:fc:27:27:89:fd:23: 44:a4:92:b3:ce:5b:27:6f:e9:a5:c3:ed:21:ab:8d: 52:ab:7f:8d:46:f8:02:ea:f5:e5:4b:dc:12:78:99: 4e:d3:37:e5:b1:73:49:6b:72:d2:0a:1a:76:4d:df: 59:57:14:bb:44:de:e1:5d:c6:50:d8:66:0b:e5:46: d8:6a:74:3e:4a:13:a6:8b:81:0b:82:2c:39:f6:75: b6:e9:09:3c:be:a2:42:8e:11:24:b5:23:e0:c8:9c: e9:79:3c:00:e5:88:5f:e8:9c:b5:7b:06:de:c9:12: b6:05:78:8b:d6:e7:cb:9c:0d:d7:ff:d1:e6:ef:81: f7:1d:c2:25:a4:16:1c:91:70:50:76:ce:a6:5c:98: 0a:98:b8:ef:80:fd:c8:ab:6a:f6:2b:b5:d2:6c:57: c0:86:84:99:95:ca:fb:8b:53:9c:4d:8a:b6:dd:b1: c6:57:e7:95:94:f5:4e:a9:5d:32:fe:4b:fe:d3:58: 0b:25:6c:c2:99:1a:4e:67:07:70:1f:54:f1:5c:36: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:12:A7:E7:5A:F7:97:1A:F3:3B:41:71:8A:06:6B:C6:84:CD:ED:C3 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0c:77:59:b2:a6:ce:2e:40:6d:c6:c8:ee:96:d0:48:59:30: d7:3a:99:50:9d:9b:75:d3:bb:db:a4:97:0e:a1:41:41:7f:6e: 82:df:1f:2a:e0:d3:a2:5e:d3:76:86:02:ec:46:5f:5c:c6:94: 3d:57:09:87:e8:34:a4:5a:29:ca:52:f0:ca:b6:62:50:4b:f3: 0b:9c:0f:9b:28:f4:0d:f6:01:fe:05:e9:cc:d6:97:a7:02:93: 6f:46:2d:f5:cc:62:9f:dd:e6:11:fb:19:f5:d5:f7:fb:02:9b: 74:af:9d:28:96:5c:99:a7:87:ce:9b:26:1a:a2:49:ba:99:46: 02:65:0d:7a:de:d8:57:d7:40:41:b4:04:4b:7a:6b:d0:35:33: 28:ac:c5:61:3b:19:48:bd:aa:f0:33:52:ff:a7:4c:4d:e2:f6: d4:92:d2:7d:c4:8c:ee:0f:fd:8c:3d:58:6f:c9:68:ff:53:97: 69:70:82:be:be:96:50:7a:f0:7f:2b:65:dc:ca:18:41:46:a6: 6e:af:13:69:28:6e:3e:e9:dd:b2:fe:44:2c:b9:62:3e:90:3f: 0a:49:74:d8:7e:2e:27:0c:ed:06:9e:57:07:16:ad:da:4b:6e: 29:cb:9c:7d:7d:8f:9a:59:50:43:9f:b4:c9:e9:7e:b4:50:d0: c9:f9:25:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwNTMxMDU0OTE5WhcNMjUwNjA3MDU0OTE5WjAYMRYwFAYD VQQDEw02ODNhOTg1Zi01NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5geUUPn652rJjy1+kvnVr6YpndSPh3BPiqesPJjXbn+grZMUDR8HJYjiJvD6 ZOXxVP6Kv7D8JyeJ/SNEpJKzzlsnb+mlw+0hq41Sq3+NRvgC6vXlS9wSeJlO0zfl sXNJa3LSChp2Td9ZVxS7RN7hXcZQ2GYL5UbYanQ+ShOmi4ELgiw59nW26Qk8vqJC jhEktSPgyJzpeTwA5Yhf6Jy1ewbeyRK2BXiL1ufLnA3X/9Hm74H3HcIlpBYckXBQ ds6mXJgKmLjvgP3Iq2r2K7XSbFfAhoSZlcr7i1OcTYq23bHGV+eVlPVOqV0y/kv+ 01gLJWzCmRpOZwdwH1TxXDaiRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLESp+da 95ca8ztBcYoGa8aEze3DMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsDHdZsqbOLkBtxsjultBIWTDXOplQnZt107vbpJcOoUFBf26C3x8q 4NOiXtN2hgLsRl9cxpQ9VwmH6DSkWinKUvDKtmJQS/MLnA+bKPQN9gH+BenM1pen ApNvRi31zGKf3eYR+xn11ff7Apt0r50ollyZp4fOmyYaokm6mUYCZQ163thX10BB tARLemvQNTMorMVhOxlIvarwM1L/p0xN4vbUktJ9xIzuD/2MPVhvyWj/U5dpcIK+ vpZQevB/K2XcyhhBRqZurxNpKG4+6d2y/kQsuWI+kD8KSXTYfi4nDO0GnlcHFq3a S24py5x9fY+aWVBDn7TJ6X60UNDJ+SVt -----END CERTIFICATE-----Generated at Sat May 31 17:53:11 2025 by rpki-client