$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 0qdNqV8hJHP89425vLvsxVrERfVslozI/lw7TUTBOA0= Subject key identifier: 87:2E:39:F2:AD:E5:64:DB:F8:A7:6C:71:2B:E7:65:66:4A:39:0C:D8 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1144 Signing time: Fri 30 May 2025 19:49:30 +0000 Manifest this update: Fri 30 May 2025 19:49:29 +0000 Manifest next update: Fri 06 Jun 2025 19:49:29 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: TTHpf+PJGzzSyQcnTmG5GFpZeATn1QS7yF/29H0gI4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: May 30 19:49:29 2025 GMT Not After : Jun 6 19:49:29 2025 GMT Subject: CN=683a0bc9-1456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:8e:9c:cb:29:d2:48:3f:57:8d:b5:a1:7d: 91:68:52:74:ee:40:f1:f9:c5:e1:d2:47:91:47:f1: 5c:52:b6:fd:57:cd:28:20:b8:60:6d:55:d1:cc:86: 6c:9e:d4:d8:80:6c:2f:9f:ad:dd:c7:44:fc:ac:cb: 07:7a:c0:42:82:1c:0a:8f:00:7f:48:32:dc:a1:2a: bf:67:30:82:65:5e:8f:25:d5:3b:b7:14:c5:4d:78: 66:e8:22:7d:1f:85:9b:d0:60:12:c6:04:76:f2:e1: 80:72:e7:8a:30:f4:b5:62:9d:30:19:8f:d4:30:3a: a0:81:4e:f4:1d:a1:7f:d5:3f:ee:8d:33:ea:e6:c1: 72:a3:da:bb:c3:1e:d0:07:20:7a:11:c1:34:6b:9d: 72:48:b7:d0:e3:d0:08:48:12:02:48:1c:5f:97:30: 1d:9f:40:89:12:39:04:f1:98:d5:14:49:35:d3:df: d6:97:1c:61:8e:45:39:66:05:1c:24:81:8c:9d:60: 72:e2:b3:a6:1b:e3:8a:42:d7:54:91:d9:99:03:fa: b9:7b:de:e3:0f:8d:bc:da:a5:81:00:47:ef:a8:48: 40:ab:16:fe:11:1f:1a:2b:1b:8b:11:25:4a:49:0c: a5:22:88:63:b7:81:fa:09:29:34:84:ed:9d:0b:fe: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:39:F2:AD:E5:64:DB:F8:A7:6C:71:2B:E7:65:66:4A:39:0C:D8 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f6:6d:18:9d:20:87:cb:9e:27:44:7f:f3:9e:0e:41:4b:6b: c1:f4:31:90:89:68:13:30:12:9e:8e:04:13:39:5e:06:d5:3b: 24:a4:fa:e2:75:92:24:3c:f7:04:61:77:1d:da:0b:1d:70:16: 82:4f:30:24:7b:47:d0:36:85:05:a1:5a:68:cf:99:c1:42:50: bb:21:7e:ff:0e:81:13:b0:fb:4a:27:b2:0d:b3:99:61:df:e3: d2:aa:8f:ce:c6:82:aa:57:d7:4d:be:4d:d6:17:82:13:e7:be: e8:cb:c0:d5:46:24:1f:ff:cb:2f:2c:f1:62:d2:e2:c7:ac:c2: 66:08:1c:06:41:7a:fe:39:df:51:88:f9:a9:d0:2b:67:55:6b: 0f:20:3e:75:48:12:01:99:ea:00:a9:40:af:26:18:09:73:58: ae:b1:1c:c2:d1:aa:4b:b5:fe:97:20:54:69:0a:8a:0c:63:18: 82:4a:b4:c2:a4:18:79:35:8a:6f:f9:e6:9d:34:03:bd:45:b7: 72:b2:cd:a4:ca:05:4e:2a:83:7c:88:0f:cd:89:ac:2f:9f:70: 31:2d:b0:76:f6:3d:4c:15:17:37:5a:a2:11:ea:eb:59:cc:ec: 85:18:8a:ab:2f:d3:00:aa:36:d0:c3:c6:89:4b:bb:28:2b:a4: aa:de:0d:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwNTMwMTk0OTI5WhcNMjUwNjA2MTk0OTI5WjAYMRYwFAYD VQQDEw02ODNhMGJjOS0xNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PSOnMsp0kg/V421oX2RaFJ07kDx+cXh0keRR/FcUrb9V80oILhgbVXRzIZs ntTYgGwvn63dx0T8rMsHesBCghwKjwB/SDLcoSq/ZzCCZV6PJdU7txTFTXhm6CJ9 H4Wb0GASxgR28uGAcueKMPS1Yp0wGY/UMDqggU70HaF/1T/ujTPq5sFyo9q7wx7Q ByB6EcE0a51ySLfQ49AISBICSBxflzAdn0CJEjkE8ZjVFEk109/WlxxhjkU5ZgUc JIGMnWBy4rOmG+OKQtdUkdmZA/q5e97jD4282qWBAEfvqEhAqxb+ER8aKxuLESVK SQylIohjt4H6CSk0hO2dC/6BmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcuOfKt 5WTb+KdscSvnZWZKOQzYMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9m0YnSCHy54nRH/zng5BS2vB9DGQiWgTMBKejgQTOV4G1TskpPri dZIkPPcEYXcd2gsdcBaCTzAke0fQNoUFoVpoz5nBQlC7IX7/DoETsPtKJ7INs5lh 3+PSqo/OxoKqV9dNvk3WF4IT577oy8DVRiQf/8svLPFi0uLHrMJmCBwGQXr+Od9R iPmp0CtnVWsPID51SBIBmeoAqUCvJhgJc1iusRzC0apLtf6XIFRpCooMYxiCSrTC pBh5NYpv+eadNAO9Rbdyss2kygVOKoN8iA/Niawvn3AxLbB29j1MFRc3WqIR6utZ zOyFGIqrL9MAqjbQw8aJS7soK6Sq3g3S -----END CERTIFICATE-----Generated at Sat May 31 17:39:18 2025 by rpki-client