$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: xtATlbhJ0NZlbanW2+CavAGd9sSMtJCD3ywwBX8i/d0= Subject key identifier: 37:46:B5:86:BD:8A:82:E1:C7:13:14:55:5D:D4:70:59:7E:06:08:B1 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 0427 Signing time: Sat 31 May 2025 00:37:25 +0000 Manifest this update: Sat 31 May 2025 00:37:24 +0000 Manifest next update: Sat 07 Jun 2025 00:37:24 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: LptZowQiK/2nEDYHoPiHwAAExZq33CnuJgiVq3dnkbE=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: May 31 00:37:24 2025 GMT Not After : Jun 7 00:37:24 2025 GMT Subject: CN=683a4f45-a04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b6:58:78:0f:8e:19:7d:66:c5:8d:65:d1:22: 7d:e5:10:de:89:88:85:e6:a1:18:c1:ad:78:a7:ee: 97:ac:53:76:c3:86:94:fd:4c:6e:c7:c7:b6:cb:ca: f0:28:db:fc:20:68:1b:c9:46:64:b8:6d:cb:4c:b1: f9:9c:eb:ce:c2:a0:e4:5c:42:47:36:28:15:d1:27: 98:8e:4a:56:ad:35:6d:4d:e9:ac:50:cb:e8:88:b0: 39:05:22:65:d0:af:60:1c:7f:7c:50:e1:ee:0f:8a: cc:11:2f:eb:e0:62:ea:e9:5a:e2:80:7a:43:68:99: b2:3c:77:74:19:9b:25:5e:2e:b6:12:ba:e2:5c:42: ec:61:f8:74:ad:36:96:21:16:57:a0:b6:38:cc:6c: e2:e2:ac:f1:4d:e6:88:d1:3e:a4:a1:98:37:13:a0: 14:7b:10:16:86:f5:d2:af:10:47:21:59:23:6c:9a: 52:74:5d:45:b5:04:b8:03:d4:fd:7b:da:91:e2:8f: 94:82:b4:af:5b:00:0f:62:80:2e:3a:a6:f5:45:48: a4:9b:48:db:81:a7:f2:9a:7e:a6:3f:ec:bd:e3:ab: b5:0c:0f:f1:10:7f:7d:75:fe:5e:e1:d6:62:50:f8: 91:c9:f8:3e:b8:9e:13:60:6e:81:46:c3:16:5d:f6: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:B5:86:BD:8A:82:E1:C7:13:14:55:5D:D4:70:59:7E:06:08:B1 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:95:cd:15:19:02:5c:80:0d:f3:cc:4f:65:c0:6f:55:e2:9d: 92:d1:78:9c:89:3c:96:3f:04:34:ac:62:9c:3a:e6:76:7a:dc: a0:0c:9e:2a:ea:52:20:a9:86:63:a5:b2:19:de:32:b1:ba:9a: 42:06:c7:46:f4:e6:ef:8d:52:a1:f7:72:c2:7e:45:a7:82:03: ee:cb:9b:05:e4:e4:b4:7d:4f:46:89:14:67:f0:1d:ba:96:4e: a4:60:46:9b:3a:44:44:f9:b8:bd:c4:dc:9c:42:51:82:b9:9f: 73:bf:58:d8:87:41:79:2e:ff:ec:b0:53:01:77:da:3b:56:a1: 6f:1e:1b:55:0d:46:d7:21:56:fc:14:4a:5c:ae:29:1a:15:2c: 07:e9:92:b8:f0:74:53:c1:f5:84:7c:3d:32:d9:9f:4a:14:c3: 14:06:99:e4:1d:fb:c8:8f:57:1e:67:45:ee:df:2f:66:06:c1: aa:ce:cd:64:4f:15:c5:a5:62:67:6b:a1:a2:f0:ba:b8:e4:9e: 10:52:10:2a:d6:5e:b8:b6:b9:94:30:be:90:12:a9:3b:4b:4d: 31:3d:1c:a5:78:f8:e9:32:d4:54:c2:61:83:81:9f:7d:c8:de: 72:4e:2f:a0:ea:8d:df:f1:c9:a9:68:88:72:9c:fb:67:f5:88: 37:4c:9d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjUwNTMxMDAzNzI0WhcNMjUwNjA3MDAzNzI0WjAYMRYwFAYD VQQDEw02ODNhNGY0NS1hMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rZYeA+OGX1mxY1l0SJ95RDeiYiF5qEYwa14p+6XrFN2w4aU/Uxux8e2y8rw KNv8IGgbyUZkuG3LTLH5nOvOwqDkXEJHNigV0SeYjkpWrTVtTemsUMvoiLA5BSJl 0K9gHH98UOHuD4rMES/r4GLq6VrigHpDaJmyPHd0GZslXi62ErriXELsYfh0rTaW IRZXoLY4zGzi4qzxTeaI0T6koZg3E6AUexAWhvXSrxBHIVkjbJpSdF1FtQS4A9T9 e9qR4o+UgrSvWwAPYoAuOqb1RUikm0jbgafymn6mP+y946u1DA/xEH99df5e4dZi UPiRyfg+uJ4TYG6BRsMWXfZ+iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdGtYa9 ioLhxxMUVV3UcFl+BgixMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJlc0VGQJcgA3zzE9lwG9V4p2S0XiciTyWPwQ0rGKcOuZ2etygDJ4q 6lIgqYZjpbIZ3jKxuppCBsdG9ObvjVKh93LCfkWnggPuy5sF5OS0fU9GiRRn8B26 lk6kYEabOkRE+bi9xNycQlGCuZ9zv1jYh0F5Lv/ssFMBd9o7VqFvHhtVDUbXIVb8 FEpcrikaFSwH6ZK48HRTwfWEfD0y2Z9KFMMUBpnkHfvIj1ceZ0Xu3y9mBsGqzs1k TxXFpWJna6Gi8Lq45J4QUhAq1l64trmUML6QEqk7S00xPRylePjpMtRUwmGDgZ99 yN5yTi+g6o3f8cmpaIhynPtn9Yg3TJ2X -----END CERTIFICATE-----Generated at Sat May 31 14:44:56 2025 by rpki-client