$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: EPEeaXqD81HW3rcqmdjO9STmDk50qoQ7xlDXJ8uoeQ8= Subject key identifier: 7E:9F:F7:9A:CD:2F:A9:C7:91:84:DA:E1:61:01:AB:FE:B2:B0:1B:C9 Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: E3 Signing time: Sat 31 May 2025 05:02:08 +0000 Manifest this update: Sat 31 May 2025 05:02:07 +0000 Manifest next update: Sat 07 Jun 2025 05:02:07 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: AgBk4AD0YVFhfZE5P81jAtXctlh3uu5OnisjO+wmdyU=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: May 31 05:02:07 2025 GMT Not After : Jun 7 05:02:07 2025 GMT Subject: CN=683a8d4f-8f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:e2:5a:f8:4d:92:ce:21:d2:13:19:05:6f: cb:b8:d6:63:5c:7d:de:b5:40:52:0d:df:dd:60:89: a1:a6:31:19:94:ee:e1:4c:2f:84:bf:cf:81:95:54: 17:ec:8f:b2:6e:bf:9a:20:31:26:cb:e1:82:f4:ed: 78:8f:0c:ce:90:aa:b7:6d:cd:d3:3c:1b:ff:a1:f6: 83:23:18:63:b7:2a:7d:70:f7:44:31:0e:d9:32:9b: ed:7e:dd:ad:dc:02:72:31:0b:af:4d:9b:30:a0:86: d1:30:f5:09:46:12:14:77:cd:71:e2:ca:36:31:54: b5:77:62:84:7f:65:f0:88:73:60:5d:d8:97:3f:1c: 3f:1f:d9:26:c0:ef:eb:ed:04:11:75:ca:15:9e:40: f0:4c:e4:8e:74:a0:87:08:ab:7d:3c:a2:71:1e:41: 0a:29:66:c2:79:ea:87:38:95:70:7c:c8:b3:16:0a: 3b:04:0b:d6:9b:95:c9:cf:6c:74:dd:5e:23:8a:c0: 0a:ad:dc:28:c9:a7:aa:34:4c:f5:18:f9:43:fb:e0: c9:51:28:1b:81:e9:ed:a1:c8:a5:76:29:d9:3d:8b: d3:35:40:c3:1d:4e:7b:71:f9:6a:b6:ea:2d:74:d0: 3e:48:13:31:c6:c8:8a:94:a6:43:1b:c2:c8:68:d3: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9F:F7:9A:CD:2F:A9:C7:91:84:DA:E1:61:01:AB:FE:B2:B0:1B:C9 X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7a:a5:65:1f:75:a3:19:f3:d8:7b:55:be:bb:37:e3:3c:e2: 31:5b:37:f9:09:94:f3:fd:b4:58:bf:68:50:87:6c:10:fe:12: f0:2a:39:90:fd:11:f6:6f:86:1b:49:61:8c:86:fc:db:db:35: 06:29:fc:2c:5f:87:e7:f3:91:3d:7a:1b:97:c7:65:5c:1e:40: d2:70:10:ed:8e:3b:52:c2:77:43:0f:d4:4b:b4:7e:b1:a0:ea: 1e:e7:ce:24:3a:f2:db:d6:09:35:c5:22:49:a3:f6:58:ce:32: 1d:fd:5c:77:c2:6a:70:bf:a5:ad:ea:cc:26:8d:95:e3:d9:40: c3:37:cc:e0:2e:83:22:70:5a:75:da:6b:84:63:87:f2:a7:7d: e8:9d:0d:d4:72:c6:35:cf:c7:d1:ad:a3:ec:46:32:64:07:ad: 30:45:28:e7:d7:12:10:07:14:40:3b:ed:6c:e6:2c:67:e1:1f: 47:ff:89:a6:e5:b3:5f:91:a2:dd:49:64:7c:3d:cd:b8:3f:37: ba:05:16:09:52:dd:7d:3c:73:d9:01:e6:4f:e5:90:61:25:ca: 95:3e:d4:6f:70:26:c0:73:d3:8f:ec:23:80:4e:ea:4a:80:3e: 75:b0:0b:fe:f4:78:f0:6b:99:54:ee:84:af:4a:1b:d5:66:8f: be:21:ec:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3OEIxMTAvBgNVBAUTKDMxODU1M0VEMDlDMjAwOTU4Q0IxNURDQ0UyNzdDQzQ4 QUE0MkEzODgwHhcNMjUwNTMxMDUwMjA3WhcNMjUwNjA3MDUwMjA3WjAYMRYwFAYD VQQDEw02ODNhOGQ0Zi04ZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFbiWvhNks4h0hMZBW/LuNZjXH3etUBSDd/dYImhpjEZlO7hTC+Ev8+BlVQX 7I+ybr+aIDEmy+GC9O14jwzOkKq3bc3TPBv/ofaDIxhjtyp9cPdEMQ7ZMpvtft2t 3AJyMQuvTZswoIbRMPUJRhIUd81x4so2MVS1d2KEf2XwiHNgXdiXPxw/H9kmwO/r 7QQRdcoVnkDwTOSOdKCHCKt9PKJxHkEKKWbCeeqHOJVwfMizFgo7BAvWm5XJz2x0 3V4jisAKrdwoyaeqNEz1GPlD++DJUSgbgentocildinZPYvTNUDDHU57cflqtuot dNA+SBMxxsiKlKZDG8LIaNMCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6f95rN L6nHkYTa4WEBq/6ysBvJMB8GA1UdIwQYMBaAFDGFU+0JwgCVjLFdzOJ3zEiqQqOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzc4Qi9DMTNBQTc3NkUw NTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FKV01zVjNNNG5mTVNLcENv NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzc4Qi9DMTNBQTc3NkUwNTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FK V01zVjNNNG5mTVNLcENvNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFeqVlH3WjGfPYe1W+uzfjPOIxWzf5CZTz/bRYv2hQh2wQ/hLwKjmQ /RH2b4YbSWGMhvzb2zUGKfwsX4fn85E9ehuXx2VcHkDScBDtjjtSwndDD9RLtH6x oOoe584kOvLb1gk1xSJJo/ZYzjId/Vx3wmpwv6Wt6swmjZXj2UDDN8zgLoMicFp1 2muEY4fyp33onQ3UcsY1z8fRraPsRjJkB60wRSjn1xIQBxRAO+1s5ixn4R9H/4mm 5bNfkaLdSWR8Pc24Pze6BRYJUt19PHPZAeZP5ZBhJcqVPtRvcCbAc9OP7COATupK gD51sAv+9Hjwa5lU7oSvShvVZo++Iez6 -----END CERTIFICATE-----Generated at Sat May 31 14:43:09 2025 by rpki-client