$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: tevZMNi4tWt0Bt2cs9oGjEa3kW+dKYp7u7ipCknIEK8= Subject key identifier: BB:72:DA:7D:0D:FD:82:92:05:51:87:77:D7:63:DB:EA:3E:51:32:A9 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0DF6 Signing time: Fri 30 May 2025 18:01:42 +0000 Manifest this update: Fri 30 May 2025 18:01:42 +0000 Manifest next update: Fri 06 Jun 2025 18:01:42 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 01W62BcgmcPRgT4eZVKoCJfDTdh+DTfqHKHkpxW+DC8=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: May 30 18:01:42 2025 GMT Not After : Jun 6 18:01:42 2025 GMT Subject: CN=6839f286-88e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:7a:87:f6:f7:2f:8c:19:9e:d8:fd:fb:a9: 04:24:e4:3e:09:0d:6d:e2:1d:2a:04:67:6f:c0:0e: b6:11:39:12:9d:f3:6f:49:97:19:a6:06:18:1f:d2: 12:9c:6a:9b:7f:86:ec:d6:28:40:70:b2:80:58:3f: 18:36:5e:d5:d0:64:55:de:e7:de:d7:a4:59:9f:40: a6:fb:25:90:ff:d6:7c:87:79:9d:bf:6f:4b:b5:50: 44:ac:da:a4:f9:e2:a2:c1:ec:f6:f6:a7:a1:16:a5: 3f:c7:50:8c:f2:f3:30:b1:18:71:76:9b:e5:02:cc: c2:99:db:a7:c0:04:c0:59:50:d2:e6:8c:3f:35:73: 60:77:cc:86:74:fe:ff:64:ff:29:ab:28:c2:6a:ff: 5e:49:a6:16:73:ec:f4:55:e4:f3:30:74:85:b4:bd: 1d:4b:41:47:b7:77:5d:3b:d5:a6:74:0b:ec:86:10: 84:a9:6b:cd:bc:21:e8:73:d1:45:d1:ee:fa:38:ce: 21:61:2c:33:53:fa:94:d4:a9:d6:85:41:7d:ef:98: 94:c2:3e:c3:d3:14:83:b1:42:35:ff:9e:ed:4a:b5: fd:55:e4:92:88:89:1d:cd:9a:f0:d2:77:ff:ea:3a: ef:f3:73:24:be:d9:69:70:be:49:37:b2:13:23:01: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:72:DA:7D:0D:FD:82:92:05:51:87:77:D7:63:DB:EA:3E:51:32:A9 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:63:f3:73:b2:a7:b1:1b:8f:16:f0:4e:a0:78:7d:08:2b:1f: 7d:c3:65:c0:5f:5a:89:c1:e3:12:fc:75:6a:5e:7a:33:41:ed: a3:f4:7b:3f:ed:22:7d:2c:5b:1c:0f:e7:c7:b2:d5:57:e4:08: f4:83:85:f7:a4:07:dd:f7:3b:40:34:64:7d:55:5c:e4:a5:e5: 1e:8a:fd:c5:ef:20:da:b5:6c:3e:73:d1:71:b5:cd:2c:ad:13: a3:47:ed:f8:16:b7:8e:81:2f:2d:95:fe:fe:cc:db:09:9e:63: a9:88:6b:32:3d:8a:db:59:da:d3:44:e3:66:c5:bb:43:c9:c4: 97:d2:68:d5:1a:3d:8d:82:02:39:43:0c:e8:5a:2a:b5:7e:fe: f7:60:43:a2:0b:9b:38:8d:d4:41:03:69:dc:74:9b:80:f1:77: 1b:3f:db:75:3b:04:fb:77:a8:c4:56:bc:d1:41:65:1a:3e:5d: b3:b8:23:76:39:e3:31:56:93:54:e0:b9:c0:e1:93:c0:e6:6d: a2:d0:9f:0b:c2:47:e2:15:11:fb:d2:72:8b:f3:89:86:bb:31: 05:25:1b:51:a6:c1:3d:f4:f4:3a:46:c9:94:a0:06:ea:6b:ce: a2:52:83:d2:8c:56:f1:39:1b:7a:b5:75:39:f6:57:84:cf:23: 09:10:e9:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwNTMwMTgwMTQyWhcNMjUwNjA2MTgwMTQyWjAYMRYwFAYD VQQDEw02ODM5ZjI4Ni04OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cZ6h/b3L4wZntj9+6kEJOQ+CQ1t4h0qBGdvwA62ETkSnfNvSZcZpgYYH9IS nGqbf4bs1ihAcLKAWD8YNl7V0GRV3ufe16RZn0Cm+yWQ/9Z8h3mdv29LtVBErNqk +eKiwez29qehFqU/x1CM8vMwsRhxdpvlAszCmdunwATAWVDS5ow/NXNgd8yGdP7/ ZP8pqyjCav9eSaYWc+z0VeTzMHSFtL0dS0FHt3ddO9WmdAvshhCEqWvNvCHoc9FF 0e76OM4hYSwzU/qU1KnWhUF975iUwj7D0xSDsUI1/57tSrX9VeSSiIkdzZrw0nf/ 6jrv83MkvtlpcL5JN7ITIwG3DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLty2n0N /YKSBVGHd9dj2+o+UTKpMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsY/NzsqexG48W8E6geH0IKx99w2XAX1qJweMS/HVqXnozQe2j9Hs/ 7SJ9LFscD+fHstVX5Aj0g4X3pAfd9ztANGR9VVzkpeUeiv3F7yDatWw+c9Fxtc0s rROjR+34FreOgS8tlf7+zNsJnmOpiGsyPYrbWdrTRONmxbtDycSX0mjVGj2NggI5 QwzoWiq1fv73YEOiC5s4jdRBA2ncdJuA8XcbP9t1OwT7d6jEVrzRQWUaPl2zuCN2 OeMxVpNU4LnA4ZPA5m2i0J8LwkfiFRH70nKL84mGuzEFJRtRpsE99PQ6RsmUoAbq a86iUoPSjFbxORt6tXU59leEzyMJEOmr -----END CERTIFICATE-----Generated at Sat May 31 16:38:56 2025 by rpki-client