$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: QQIQn+CUrNE4mIR1C5RuiaIdkJw5USRV1qQ3Vz23OE4= Subject key identifier: 1C:D2:78:4E:14:96:35:C0:86:E3:D2:B9:C2:1B:38:1E:73:DF:F0:6C Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:02:50 +0000 Manifest this update: Sat 31 May 2025 07:02:49 +0000 Manifest next update: Sat 07 Jun 2025 07:02:49 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: qKpwo1V0dnW1OwHWfSs0RSckoZy53AS2PHinZUmzLE4=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: May 31 07:02:49 2025 GMT Not After : Jun 7 07:02:49 2025 GMT Subject: CN=683aa999-9861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:59:e1:f0:b8:1d:d9:d5:f8:7d:69:c4:4d: a6:fe:7f:c5:64:bd:52:9e:85:46:61:e3:ac:43:76: 89:bc:8f:42:d5:1b:d0:c4:a3:1c:19:0f:ef:1f:31: ae:54:ce:dd:a9:43:5a:53:98:10:c9:2d:27:b6:9b: 65:8f:cd:5b:8b:3a:10:3f:73:af:1a:18:75:5a:1d: 89:6c:46:45:48:b0:fc:ac:0d:ac:90:ef:7e:15:a4: c0:46:13:80:5d:f0:5b:18:2a:76:b4:c9:46:e1:8e: 23:02:46:c3:5f:cd:80:d8:5f:06:d5:2e:b1:cb:bb: ed:d9:3c:6b:fb:67:72:ed:cc:c6:90:b4:10:78:ac: 3e:f1:46:be:7c:6c:6a:02:f5:79:1a:9a:83:32:e6: b2:76:f3:20:2f:e1:e5:7e:4b:4e:41:1a:66:07:57: 16:fe:3c:a9:2f:97:c2:d6:61:82:d9:b4:32:19:3e: 95:28:ce:c3:a5:70:23:72:f6:4b:ba:28:71:a3:16: 20:c7:45:fb:70:49:11:e5:bf:63:bd:65:4a:16:7f: b5:02:48:16:9b:79:8e:6c:62:2c:d0:05:f1:49:5e: 16:df:6f:b8:9c:ea:66:f6:7c:83:95:db:ac:5b:50: 60:b8:d0:3a:b4:04:ed:e0:34:a8:ff:32:ed:09:79: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:78:4E:14:96:35:C0:86:E3:D2:B9:C2:1B:38:1E:73:DF:F0:6C X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d5:8a:5c:08:31:db:c4:a1:e7:4b:e0:b3:5c:b6:12:f5:ed: f4:73:30:de:89:6c:d4:32:f3:4d:f2:32:88:30:59:8b:59:3c: 39:6d:c9:00:80:cb:9a:13:b5:84:55:d2:f3:04:77:47:ee:b8: 0b:b0:38:ff:9b:96:2e:f3:35:0a:b2:55:f6:0a:5e:e1:4e:c4: ac:ec:8b:99:dc:3f:84:9b:9b:83:23:22:31:63:0f:11:38:05: c2:b5:14:aa:9e:c1:79:c1:72:1d:ff:8a:e7:32:2b:f4:60:3c: 37:9b:c1:5a:ed:d3:7e:71:8d:07:27:04:a2:16:3c:ce:ee:a9: a3:06:b5:af:66:1b:14:c5:0b:7c:1b:c5:45:2f:1b:88:78:fc: cc:96:28:35:99:cf:c7:7a:99:c3:5d:59:58:e8:64:3e:b1:44: 49:48:55:db:0f:76:ab:b2:1d:75:a8:21:b7:f4:e3:1f:4d:86: 9e:0a:20:c4:04:9a:b2:0a:ea:2e:9e:ff:b7:27:6c:a7:83:15: 80:e3:98:d5:63:be:03:3e:e6:30:8c:c5:57:bb:fc:13:37:2e: 20:08:e8:57:1d:85:3c:75:fc:e5:72:5f:3d:23:2a:d5:3a:cb: 33:3e:74:71:82:82:3c:25:2c:89:0b:14:68:d2:f9:d2:08:88: 36:d8:5b:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA1MzEwNzAyNDlaFw0yNTA2MDcwNzAyNDlaMBgxFjAUBgNV BAMTDTY4M2FhOTk5LTk4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDplnh8Lgd2dX4fWnETab+f8VkvVKehUZh46xDdom8j0LVG9DEoxwZD+8fMa5U zt2pQ1pTmBDJLSe2m2WPzVuLOhA/c68aGHVaHYlsRkVIsPysDayQ734VpMBGE4Bd 8FsYKna0yUbhjiMCRsNfzYDYXwbVLrHLu+3ZPGv7Z3LtzMaQtBB4rD7xRr58bGoC 9XkamoMy5rJ28yAv4eV+S05BGmYHVxb+PKkvl8LWYYLZtDIZPpUozsOlcCNy9ku6 KHGjFiDHRftwSRHlv2O9ZUoWf7UCSBabeY5sYizQBfFJXhbfb7ic6mb2fIOV26xb UGC40Dq0BO3gNKj/Mu0Jeam3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHNJ4ThSW NcCG49K5whs4HnPf8GwwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfVilwIMdvEoedL4LNcthL17fRzMN6JbNQy803yMogwWYtZPDltyQCA y5oTtYRV0vMEd0fuuAuwOP+bli7zNQqyVfYKXuFOxKzsi5ncP4Sbm4MjIjFjDxE4 BcK1FKqewXnBch3/iucyK/RgPDebwVrt035xjQcnBKIWPM7uqaMGta9mGxTFC3wb xUUvG4h4/MyWKDWZz8d6mcNdWVjoZD6xRElIVdsPdquyHXWoIbf04x9Nhp4KIMQE mrIK6i6e/7cnbKeDFYDjmNVjvgM+5jCMxVe7/BM3LiAI6FcdhTx1/OVyXz0jKtU6 yzM+dHGCgjwlLIkLFGjS+dIIiDbYW8E= -----END CERTIFICATE-----Generated at Sat May 31 17:49:33 2025 by rpki-client