$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: lPYNxghG4wDj9d7OzyUlHZ3YAkf/heLND75rqaNAhPY= Subject key identifier: 10:88:85:37:30:27:AA:FA:74:2A:4D:6D:8B:76:37:CA:41:72:5A:03 Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 0929 Signing time: Sat 31 May 2025 20:21:32 +0000 Manifest this update: Sat 31 May 2025 20:21:31 +0000 Manifest next update: Sat 07 Jun 2025 20:21:31 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: joz+Yd4vyTEj2otu+ovnCaKIN0dN8srAWyDiadYyG+M=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: F/lUPKZHFm1sIOo7h73Lh8+bzw8LraoeACifeBa4ogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: May 31 20:21:31 2025 GMT Not After : Jun 7 20:21:31 2025 GMT Subject: CN=683b64cb-9886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:b2:83:4b:30:5c:8d:4f:d0:74:4b:33:3e: fd:5c:76:00:16:98:d0:cf:c6:20:e8:ae:91:eb:88: f6:29:d5:e8:c4:19:74:42:da:ac:cb:bf:05:cb:b9: 12:e8:4a:54:f1:ce:91:aa:d6:1e:b3:c0:1a:e6:7e: 28:07:5f:47:c8:47:bc:73:c5:b0:6f:5f:5f:2b:38: a9:ca:18:65:00:6c:30:23:e9:dc:0d:ef:39:83:aa: a6:57:f8:15:59:55:c8:34:08:fd:c4:d4:79:19:8f: 84:be:e5:0c:df:ff:16:73:61:d2:80:c7:fa:1a:6c: cb:0d:c9:6e:7f:b0:8b:a5:6e:d1:f5:66:33:9d:63: 02:3a:c2:81:b8:d4:9b:18:88:f7:ad:e1:d6:7c:eb: df:25:c9:0f:23:8a:9b:3d:da:11:06:a6:e6:41:e7: c3:9b:0a:85:41:b7:3f:ed:9d:34:6e:8e:2b:84:6b: 8c:b1:e7:9d:81:91:12:0a:2d:79:fb:3f:6e:61:e1: 73:8b:d1:90:26:7f:9d:be:1d:0a:01:1c:45:56:36: 46:b8:f0:23:69:16:df:07:d8:3f:bb:fe:ae:bf:c6: 5c:f6:c3:4f:43:bf:4b:8f:b1:e7:3b:98:05:fa:a6: 60:da:fd:ce:43:39:97:46:fc:8b:e3:cb:60:4e:ce: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:88:85:37:30:27:AA:FA:74:2A:4D:6D:8B:76:37:CA:41:72:5A:03 X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e1:3e:fb:4b:e6:78:aa:be:e7:12:05:e0:2f:20:ee:4c:8e: f8:44:c2:07:3a:81:cf:68:10:52:36:6e:52:4b:8a:3c:fe:7d: 96:80:10:62:1c:fd:9d:e6:67:78:6c:cf:b4:05:64:7f:4a:8c: ea:1e:60:3a:30:dd:03:19:e0:3c:7c:5d:e1:74:50:dc:c4:4c: 98:0d:32:df:c0:92:41:82:ed:11:04:c5:8e:98:41:e9:2d:c7: 24:a7:b8:f6:59:1c:b8:94:af:52:70:26:ad:b5:d7:29:92:f6: 59:05:66:a4:b8:85:d3:a3:a7:f6:35:d3:cd:fd:c9:fc:d6:5c: e1:5a:ef:74:08:32:9e:c1:ae:97:e7:01:2e:32:ec:6e:8a:d3: 99:c1:a5:52:89:d2:50:31:7b:2e:48:eb:45:e1:da:23:8b:2a: ab:a3:c2:94:2f:a9:91:0c:d7:ba:18:df:ea:d6:4d:78:10:76: 8d:6a:c7:3d:90:be:9c:32:a5:be:39:dd:2b:38:7b:c4:a4:99: 6d:46:20:8c:5e:d6:fc:42:37:fa:1d:0d:fe:11:0d:bf:05:93: 64:33:49:2c:68:dc:5f:22:3c:a9:81:91:26:2f:71:09:67:33: 4d:f6:76:4b:81:23:1c:04:6a:4f:10:40:85:21:b5:74:0a:64: e0:81:db:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjUwNTMxMjAyMTMxWhcNMjUwNjA3MjAyMTMxWjAYMRYwFAYD VQQDEw02ODNiNjRjYi05ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnSyg0swXI1P0HRLMz79XHYAFpjQz8Yg6K6R64j2KdXoxBl0Qtqsy78Fy7kS 6EpU8c6RqtYes8Aa5n4oB19HyEe8c8Wwb19fKzipyhhlAGwwI+ncDe85g6qmV/gV WVXINAj9xNR5GY+EvuUM3/8Wc2HSgMf6GmzLDcluf7CLpW7R9WYznWMCOsKBuNSb GIj3reHWfOvfJckPI4qbPdoRBqbmQefDmwqFQbc/7Z00bo4rhGuMseedgZESCi15 +z9uYeFzi9GQJn+dvh0KARxFVjZGuPAjaRbfB9g/u/6uv8Zc9sNPQ79Lj7HnO5gF +qZg2v3OQzmXRvyL48tgTs5QtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCIhTcw J6r6dCpNbYt2N8pBcloDMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa4T77S+Z4qr7nEgXgLyDuTI74RMIHOoHPaBBSNm5SS4o8/n2WgBBi HP2d5md4bM+0BWR/SozqHmA6MN0DGeA8fF3hdFDcxEyYDTLfwJJBgu0RBMWOmEHp Lcckp7j2WRy4lK9ScCattdcpkvZZBWakuIXTo6f2NdPN/cn81lzhWu90CDKewa6X 5wEuMuxuitOZwaVSidJQMXsuSOtF4dojiyqro8KUL6mRDNe6GN/q1k14EHaNasc9 kL6cMqW+Od0rOHvEpJltRiCMXtb8Qjf6HQ3+EQ2/BZNkM0ksaNxfIjypgZEmL3EJ ZzNN9nZLgSMcBGpPEECFIbV0CmTggdtT -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:26 2025 by rpki-client