$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: d4ds0J+/wvWG+NevDA5Z2yyF4J+v9ih8Rz2iypsh77U= Subject key identifier: 77:1F:FA:EE:80:E4:39:B3:EE:4B:7A:19:9C:E0:33:04:BD:48:23:56 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 38 Signing time: Sat 31 May 2025 07:08:32 +0000 Manifest this update: Sat 31 May 2025 07:08:31 +0000 Manifest next update: Sat 07 Jun 2025 07:08:31 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: Xk0KuO8fMb3zVkxQixIHu/1lcSq8Jzt7SMt74fG5W1w=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: wZLv0x5Ye2YsFJ9ksDDY7rn+/yu0V//tFuTwHUih6i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: May 31 07:08:31 2025 GMT Not After : Jun 7 07:08:31 2025 GMT Subject: CN=683aaaf0-6514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:91:f8:9b:5b:9a:5a:68:f1:32:e6:55:32: f0:db:8a:43:40:ad:8f:4f:39:3d:c3:0f:db:01:e9: 3d:2b:80:53:17:12:be:7b:11:5a:9a:11:fb:76:af: 2f:82:e8:e1:fb:00:fe:d6:c9:9f:9e:b1:5a:02:8d: 67:4e:0e:33:ac:d0:46:e0:d5:e0:e0:16:e0:20:9e: ac:b6:6a:52:2b:38:9b:b4:c9:ea:5c:40:c4:66:b2: e2:53:13:9c:1d:c2:89:7c:ef:49:7f:8b:78:fa:a6: c7:0e:3b:8c:af:0f:2a:f1:e5:5e:ca:b4:c2:b0:0d: 1c:70:67:4e:fc:80:2c:cb:22:70:40:d2:dd:9b:b2: 8c:27:b1:5b:07:30:f2:7c:0d:82:0f:4e:1d:02:84: 8d:28:e6:ac:e6:5c:51:e7:18:39:01:36:4b:2b:36: 09:49:e9:f3:9a:b2:4d:7f:95:d6:88:f1:f9:70:d4: cb:22:c1:b5:23:c9:96:96:ed:be:3e:98:a9:38:b8: 45:7c:d0:a6:8b:2a:66:e2:99:09:b1:0a:2b:cf:53: 63:66:85:6a:b9:19:2b:2f:72:d5:64:6d:fa:6d:9c: 6d:a9:b2:b2:0e:28:c3:67:70:1e:b1:bb:81:ed:82: 36:dc:26:df:8c:65:ca:e2:05:fe:67:a3:13:6f:a1: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1F:FA:EE:80:E4:39:B3:EE:4B:7A:19:9C:E0:33:04:BD:48:23:56 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ac:84:1a:8a:28:8a:26:f7:3c:a6:50:49:a3:32:43:32:2d: 19:18:4c:ea:e4:96:ab:48:d3:fe:d1:23:95:bf:e4:f4:e5:46: 67:84:90:7e:b3:21:39:ab:d8:cb:89:b2:34:5b:81:a7:a4:b2: bd:f0:18:7b:02:4b:37:56:76:0f:d6:51:e9:f7:d9:92:c6:8c: dc:36:9f:b0:66:46:70:bf:3a:02:af:2b:46:12:cf:53:36:4a: d0:6a:10:ed:e2:5c:47:cb:77:be:ee:61:9e:9d:df:b7:60:ac: eb:a9:db:88:84:57:ee:58:51:38:5e:7d:28:03:98:2c:2f:bc: ac:89:ae:1e:3b:c9:17:02:5b:13:45:b6:fd:53:13:f3:1c:cc: 41:5b:f1:0b:f1:2e:76:89:8f:ab:22:c3:b6:1a:8c:d5:37:24: 7c:63:fa:ad:b6:2b:a1:83:e9:9e:72:25:d3:5e:31:0a:6e:5c: e6:5c:43:1a:3a:4f:b5:4b:4c:d4:b8:c9:6e:5a:ce:bc:7a:01: 60:c6:cc:97:df:73:f5:d9:e8:a7:cb:bf:ad:2e:31:41:a0:90: 96:62:df:d6:7b:da:39:26:e9:d8:ae:87:80:07:16:93:4b:20: c1:49:64:1a:61:b5:cb:c2:9f:16:b1:21:2a:80:d1:f1:7a:fa: f8:2c:8b:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA1MzEwNzA4MzFaFw0yNTA2MDcwNzA4MzFaMBgxFjAUBgNV BAMTDTY4M2FhYWYwLTY1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/iJH4m1uaWmjxMuZVMvDbikNArY9POT3DD9sB6T0rgFMXEr57EVqaEft2ry+C 6OH7AP7WyZ+esVoCjWdODjOs0Ebg1eDgFuAgnqy2alIrOJu0yepcQMRmsuJTE5wd wol870l/i3j6pscOO4yvDyrx5V7KtMKwDRxwZ078gCzLInBA0t2bsownsVsHMPJ8 DYIPTh0ChI0o5qzmXFHnGDkBNksrNglJ6fOask1/ldaI8flw1MsiwbUjyZaW7b4+ mKk4uEV80KaLKmbimQmxCivPU2NmhWq5GSsvctVkbfptnG2psrIOKMNncB6xu4Ht gjbcJt+MZcriBf5noxNvoWw1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdx/67oDk ObPuS3oZnOAzBL1II1YwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACeshBqKKIom9zymUEmjMkMyLRkYTOrklqtI0/7RI5W/5PTlRmeEkH6z ITmr2MuJsjRbgaeksr3wGHsCSzdWdg/WUen32ZLGjNw2n7BmRnC/OgKvK0YSz1M2 StBqEO3iXEfLd77uYZ6d37dgrOup24iEV+5YUThefSgDmCwvvKyJrh47yRcCWxNF tv1TE/MczEFb8QvxLnaJj6siw7YajNU3JHxj+q22K6GD6Z5yJdNeMQpuXOZcQxo6 T7VLTNS4yW5azrx6AWDGzJffc/XZ6KfLv60uMUGgkJZi39Z72jkm6diuh4AHFpNL IMFJZBphtcvCnxaxISqA0fF6+vgsi3M= -----END CERTIFICATE-----Generated at Sat May 31 16:52:11 2025 by rpki-client