$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: scFi/uqrKv16FuhJgqnZhaFJLjXpNrBQwC5gcB15foc= Subject key identifier: 84:9D:7A:84:1C:EF:4E:B0:12:40:3E:4B:A7:B6:67:33:A2:5F:35:5C Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0B36 Signing time: Fri 30 May 2025 19:22:40 +0000 Manifest this update: Fri 30 May 2025 19:22:39 +0000 Manifest next update: Fri 06 Jun 2025 19:22:39 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: r8SbPJiBx3ZZOsc9udKmtUYAXCItCSo9wJx7CyxdMS0=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: F4+ANWrgSV1BYAbYrEyoAC+HEYBZsl5dMdzlHwWIwy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: May 30 19:22:39 2025 GMT Not After : Jun 6 19:22:39 2025 GMT Subject: CN=683a0580-8d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:5f:75:46:b6:5d:53:ac:a6:8c:50:b4:ca: 1d:2b:3d:26:c9:11:4a:89:5b:40:4a:4c:9d:50:60: 9a:33:31:16:e0:77:d7:c1:e2:66:18:34:64:5b:15: 8d:b7:96:6a:e9:ac:7f:fc:88:5a:f0:c4:ad:fc:68: 86:8a:0d:20:24:35:6f:2d:2e:49:66:c1:98:94:ef: f8:c9:ba:cb:98:da:9b:bb:9f:f3:80:31:ed:e7:cd: b6:87:b2:fd:33:8a:9b:f0:e0:32:75:4c:89:75:77: 18:8a:e9:fd:d8:b1:50:00:68:dc:bd:74:ec:f6:29: be:7e:07:dc:d7:fa:7e:53:00:df:f4:26:5f:77:b7: 22:c8:50:e6:f0:50:cb:5d:44:12:e9:65:13:ea:46: 98:b8:22:0e:eb:b9:55:09:d2:dd:67:05:ff:5f:57: 64:af:fc:5e:24:c1:f9:6e:78:99:25:d7:e9:92:6f: 67:e7:f3:a2:f4:d8:f5:d4:48:06:62:08:5a:0d:b2: e1:1d:74:9c:07:5c:7f:12:72:a9:d1:9a:79:70:f9: 3e:23:65:28:eb:58:5a:f6:d8:3b:e9:fc:1a:d2:45: ff:af:81:ea:d6:5f:2e:a8:48:b9:9e:8c:b6:7f:44: ca:0d:20:9f:73:ca:11:52:a7:a2:5b:88:26:72:bc: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9D:7A:84:1C:EF:4E:B0:12:40:3E:4B:A7:B6:67:33:A2:5F:35:5C X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ff:5b:78:8c:34:54:66:1e:d7:9f:d0:8b:2e:4b:4f:19:5a: 34:6c:4c:4f:bf:6d:b0:0c:58:b2:49:d9:8f:4f:62:65:d2:d3: 9c:90:3e:65:f5:c0:06:02:61:60:30:06:7d:de:7f:db:ba:9e: 62:36:9b:2d:94:f2:6e:78:c6:7e:a2:33:b9:88:5f:2a:4a:bc: f3:e2:2c:7b:1a:77:cb:54:a9:af:97:81:a7:e0:e1:3d:24:4e: 8e:ae:8a:e1:cb:b8:0f:88:b5:21:c2:3e:ca:f7:07:aa:ee:17: e8:67:4b:23:9c:d2:d8:08:41:dd:de:5c:32:12:81:22:c6:28: 83:e7:2e:16:79:6d:16:2b:12:11:d2:90:65:fb:5e:19:03:2a: 43:da:a4:bb:f0:67:70:a4:54:e7:5c:4a:e9:d6:88:82:bc:92: 61:98:82:91:25:20:ce:aa:4a:56:f1:f9:e2:19:58:25:e9:1a: 8b:0b:55:df:88:73:6a:53:35:83:9c:c5:e5:47:63:08:d4:39: e2:6a:be:90:a8:6a:df:b5:be:f6:73:df:87:bd:30:c5:a7:db: 62:98:a7:a1:1e:bf:2e:06:5e:af:6b:c1:5c:87:f8:1e:e5:b5: e9:15:bf:a4:c8:63:45:4c:fd:fc:56:02:13:aa:04:83:65:9a: 19:d6:5c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjUwNTMwMTkyMjM5WhcNMjUwNjA2MTkyMjM5WjAYMRYwFAYD VQQDEw02ODNhMDU4MC04ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37FfdUa2XVOspoxQtModKz0myRFKiVtASkydUGCaMzEW4HfXweJmGDRkWxWN t5Zq6ax//Iha8MSt/GiGig0gJDVvLS5JZsGYlO/4ybrLmNqbu5/zgDHt5822h7L9 M4qb8OAydUyJdXcYiun92LFQAGjcvXTs9im+fgfc1/p+UwDf9CZfd7ciyFDm8FDL XUQS6WUT6kaYuCIO67lVCdLdZwX/X1dkr/xeJMH5bniZJdfpkm9n5/Oi9Nj11EgG YghaDbLhHXScB1x/EnKp0Zp5cPk+I2Uo61ha9tg76fwa0kX/r4Hq1l8uqEi5noy2 f0TKDSCfc8oRUqeiW4gmcrzeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISdeoQc 706wEkA+S6e2ZzOiXzVcMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/1t4jDRUZh7Xn9CLLktPGVo0bExPv22wDFiySdmPT2Jl0tOckD5l 9cAGAmFgMAZ93n/bup5iNpstlPJueMZ+ojO5iF8qSrzz4ix7GnfLVKmvl4Gn4OE9 JE6Ororhy7gPiLUhwj7K9weq7hfoZ0sjnNLYCEHd3lwyEoEixiiD5y4WeW0WKxIR 0pBl+14ZAypD2qS78GdwpFTnXErp1oiCvJJhmIKRJSDOqkpW8fniGVgl6RqLC1Xf iHNqUzWDnMXlR2MI1Dniar6QqGrftb72c9+HvTDFp9timKehHr8uBl6va8Fch/ge 5bXpFb+kyGNFTP38VgITqgSDZZoZ1lwW -----END CERTIFICATE-----Generated at Sat May 31 16:39:45 2025 by rpki-client