$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json) Hash identifier: x61cd8J5vSRDxFGjjvXmSH0PU/u80xovJbVDfba1Rkg= Subject key identifier: 88:7D:0F:FD:68:4B:7F:AF:90:D1:0C:7D:75:89:62:3E:3F:B5:A1:64 Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft Manifest number: 49 Signing time: Sun 01 Jun 2025 07:04:44 +0000 Manifest this update: Sun 01 Jun 2025 07:04:44 +0000 Manifest next update: Sun 08 Jun 2025 07:04:44 +0000 Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: fZvZFfqT366wMKY/IBYxNxhV3/o+TEpFolPDiuipdPA=) 2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Validity Not Before: Jun 1 07:04:44 2025 GMT Not After : Jun 8 07:04:44 2025 GMT Subject: CN=683bfb8c-b661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:ca:5b:29:5e:2f:a6:ef:f4:9e:94:40:71: 47:95:75:27:27:6d:82:85:34:bd:66:43:5e:c8:67: aa:4a:96:0b:89:32:7a:4f:f1:6e:60:bf:2a:27:59: 80:15:c2:97:74:03:28:f8:13:83:30:c2:97:f9:a8: ba:fa:6b:87:29:50:40:40:90:46:b6:8f:e5:9e:31: ed:eb:18:62:8a:3e:f1:b7:cb:b8:cb:19:16:6b:38: 8b:68:0a:3e:09:ea:43:d5:88:4b:0d:71:a1:f4:4d: c9:17:76:07:91:83:ff:d0:f6:12:bd:3d:d9:ab:7c: 6e:0a:a9:a3:8b:2a:24:85:1c:67:46:70:7b:47:de: de:f9:4a:29:0b:e3:b5:d8:d8:dc:ee:34:13:44:56: 87:77:2f:97:61:d8:39:8e:70:8d:a9:2b:7d:79:a1: 99:e3:4a:33:c8:59:99:3e:44:e9:b3:5e:4b:23:e9: e9:55:72:dd:3f:ea:54:92:66:ae:f0:0d:64:30:96: 84:57:40:bb:8a:45:e8:89:d4:8a:ad:28:e4:64:39: 03:f9:38:43:ec:07:77:3f:c2:de:75:0e:f0:4d:f1: 63:8b:92:54:b1:82:cd:48:77:17:4e:04:b6:a5:24: 1f:75:ca:61:c4:59:a5:5b:cf:ce:11:2a:09:60:b5: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:0F:FD:68:4B:7F:AF:90:D1:0C:7D:75:89:62:3E:3F:B5:A1:64 X509v3 Authority Key Identifier: keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:28:25:1f:0f:8d:96:78:4a:2d:3e:05:b0:28:63:7a:89:3c: 25:e4:39:67:78:5a:5a:e3:a1:36:50:59:7d:69:42:8a:fe:98: 53:d9:05:dd:74:76:bd:b1:01:cf:2b:bb:0c:5f:98:03:a1:21: be:18:fa:c6:08:e0:2a:30:e3:1e:b0:6e:84:cd:dd:5d:10:9b: c0:61:01:5c:5c:97:9e:ed:64:32:8f:0f:1c:d1:04:65:76:9c: 2a:0c:11:ee:99:c8:1a:5e:cd:cf:a9:af:82:bf:37:66:36:38: de:73:aa:32:15:1c:09:ae:bd:f4:1a:cc:42:39:0a:0a:14:a4: 02:d0:4b:89:40:78:c8:e1:1e:9e:32:43:40:dd:71:07:90:db: 5d:21:cd:7b:6e:df:7a:54:f9:91:15:0d:5a:80:ec:e8:25:38: 2c:65:37:b5:e5:f6:11:12:35:c7:6c:17:fe:bc:9b:18:50:6d: b4:51:c7:3a:be:dd:4e:46:b8:cc:d4:8b:3e:1f:4d:b8:40:ac: 45:02:3d:2c:b7:f7:cd:8d:81:10:b8:d1:89:86:68:d6:35:6c: c3:75:34:a9:24:4e:ca:70:52:f2:34:13:55:2a:ab:ea:75:be: 70:fa:b4:2c:95:b9:f8:90:ea:d5:20:59:6c:51:45:9f:60:66: 1f:5d:a9:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoNjE0N0EyQTZGMTA2REM1NjAxM0RDM0JDRkJBMEI0Qjc1 M0VDRDFCQzAeFw0yNTA2MDEwNzA0NDRaFw0yNTA2MDgwNzA0NDRaMBgxFjAUBgNV BAMTDTY4M2JmYjhjLWI2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWecpbKV4vpu/0npRAcUeVdScnbYKFNL1mQ17IZ6pKlguJMnpP8W5gvyonWYAV wpd0Ayj4E4Mwwpf5qLr6a4cpUEBAkEa2j+WeMe3rGGKKPvG3y7jLGRZrOItoCj4J 6kPViEsNcaH0TckXdgeRg//Q9hK9PdmrfG4KqaOLKiSFHGdGcHtH3t75SikL47XY 2NzuNBNEVod3L5dh2DmOcI2pK315oZnjSjPIWZk+ROmzXksj6elVct0/6lSSZq7w DWQwloRXQLuKReiJ1IqtKORkOQP5OEPsB3c/wt51DvBN8WOLklSxgs1IdxdOBLal JB91ymHEWaVbz84RKglgtQz9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiH0P/WhL f6+Q0Qx9dYliPj+1oWQwHwYDVR0jBBgwFoAUYUeipvEG3FYBPcO8+6C0t1Ps0bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzFFRDQ1MkFDRDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVVlaXB2RUczRllCUGNPOC02QzB0MVBzMGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzFFRDQ1MkFDRDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZ QlBjTzgtNkMwdDFQczBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgoJR8PjZZ4Si0+BbAoY3qJPCXkOWd4WlrjoTZQWX1pQor+mFPZBd10 dr2xAc8ruwxfmAOhIb4Y+sYI4Cow4x6wboTN3V0Qm8BhAVxcl57tZDKPDxzRBGV2 nCoMEe6ZyBpezc+pr4K/N2Y2ON5zqjIVHAmuvfQazEI5CgoUpALQS4lAeMjhHp4y Q0DdcQeQ210hzXtu33pU+ZEVDVqA7OglOCxlN7Xl9hESNcdsF/68mxhQbbRRxzq+ 3U5GuMzUiz4fTbhArEUCPSy3982NgRC40YmGaNY1bMN1NKkkTspwUvI0E1Uqq+p1 vnD6tCyVufiQ6tUgWWxRRZ9gZh9dqdQ= -----END CERTIFICATE-----Generated at Mon Jun 2 21:27:34 2025 by rpki-client