$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: o8QGUAcp7rQz5YBMG/vBs6VvdokrtJJa6HAgH9W/4jo= Subject key identifier: EB:46:D6:9D:69:7B:11:55:AF:86:8C:7B:D5:97:93:34:37:5D:FF:F8 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 08D9 Signing time: Fri 30 May 2025 20:39:02 +0000 Manifest this update: Fri 30 May 2025 20:39:01 +0000 Manifest next update: Fri 06 Jun 2025 20:39:01 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: dAKH0FBWfgb6lC4utKG1+YVAa9+efLXF8RBtRmkUBe4=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: May 30 20:39:01 2025 GMT Not After : Jun 6 20:39:01 2025 GMT Subject: CN=683a1765-ab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:24:cf:af:03:21:24:92:34:ac:10:e4:10: 11:4c:0c:7d:ce:60:94:a7:d9:92:b5:fd:de:bd:0f: ca:3d:bc:65:7a:18:f2:9a:09:da:d9:5d:fd:4f:d6: fb:21:5d:ce:56:81:ba:c2:84:3e:5c:15:d3:7c:ae: 3f:c1:2c:7e:7d:78:3a:b1:56:65:bf:c3:e8:9c:76: 13:82:50:80:64:ca:71:f0:8b:e1:17:4b:db:e1:40: 36:ad:6d:eb:49:dc:42:0e:c0:e7:de:89:d7:86:c0: cb:87:d0:65:3b:86:65:4e:d3:2c:d9:57:d2:47:20: 14:2a:33:52:7b:1a:97:a0:03:90:0e:3e:23:31:d2: 12:fc:d4:71:7e:01:06:34:8d:ae:ea:a1:60:35:ab: 2c:c1:75:06:a2:85:83:c8:a4:b1:72:74:ac:7c:9f: 47:66:35:e1:3d:94:ad:fa:94:6e:b5:b9:b1:f7:48: 07:d6:da:c9:52:ff:58:c2:26:3d:fc:9d:aa:f3:0f: 0e:8a:44:9a:99:25:65:89:42:0c:97:ca:59:0e:a5: 51:7f:ef:d4:39:1c:29:6b:a2:21:52:c9:54:02:45: 8c:66:ba:1a:6b:25:b9:c6:17:2e:df:94:10:2f:a0: dc:1b:fc:26:c0:23:a6:f6:f7:da:23:c2:34:67:42: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:46:D6:9D:69:7B:11:55:AF:86:8C:7B:D5:97:93:34:37:5D:FF:F8 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:7f:70:c7:8c:e3:26:6d:e7:26:a3:34:8f:c4:ba:63:e8: 19:c4:03:dd:8e:87:25:77:ba:3b:55:92:1b:02:03:fa:6c:25: ae:db:0d:db:5d:d2:a8:bd:3a:94:48:d9:3a:0a:22:92:06:f6: d6:04:52:8c:7c:17:e0:ae:a7:50:60:58:49:50:37:58:97:f5: 37:d9:61:2e:75:a3:0d:b6:84:2c:e1:9f:2a:84:cb:47:37:48: c0:9c:b6:e9:55:b2:ed:16:ed:90:21:67:01:a3:29:3a:94:29: 46:e4:f7:31:13:91:bb:25:8d:7f:6c:83:e7:89:1f:c2:5f:c3: c3:44:74:d1:5d:d2:70:8f:31:8a:1a:3d:25:d4:f1:a9:8f:f8: 13:1f:37:de:62:04:1c:01:06:21:85:e5:81:e6:ae:40:8e:a3: ef:2d:dd:4b:b5:6c:b5:d8:40:cf:2c:14:51:35:bd:4b:fe:36: d4:45:b5:84:4c:3f:4a:13:6c:fd:e3:f3:bd:06:e6:47:ad:fb: 2f:02:04:fb:cd:6d:c5:dd:dc:14:40:78:91:af:42:ef:53:1d: 65:a0:86:60:54:e6:93:6a:87:26:75:cd:86:a4:ff:c8:42:b7: cc:6e:76:51:55:94:e6:a2:b9:d2:f6:6f:0f:76:96:b4:65:5a: 43:b2:bb:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUwNTMwMjAzOTAxWhcNMjUwNjA2MjAzOTAxWjAYMRYwFAYD VQQDEw02ODNhMTc2NS1hYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWckz68DISSSNKwQ5BARTAx9zmCUp9mStf3evQ/KPbxlehjymgna2V39T9b7 IV3OVoG6woQ+XBXTfK4/wSx+fXg6sVZlv8PonHYTglCAZMpx8IvhF0vb4UA2rW3r SdxCDsDn3onXhsDLh9BlO4ZlTtMs2VfSRyAUKjNSexqXoAOQDj4jMdIS/NRxfgEG NI2u6qFgNasswXUGooWDyKSxcnSsfJ9HZjXhPZSt+pRutbmx90gH1trJUv9YwiY9 /J2q8w8OikSamSVliUIMl8pZDqVRf+/UORwpa6IhUslUAkWMZroaayW5xhcu35QQ L6DcG/wmwCOm9vfaI8I0Z0JNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtG1p1p exFVr4aMe9WXkzQ3Xf/4MB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/n9wx4zjJm3nJqM0j8S6Y+gZxAPdjocld7o7VZIbAgP6bCWu2w3b XdKovTqUSNk6CiKSBvbWBFKMfBfgrqdQYFhJUDdYl/U32WEudaMNtoQs4Z8qhMtH N0jAnLbpVbLtFu2QIWcBoyk6lClG5PcxE5G7JY1/bIPniR/CX8PDRHTRXdJwjzGK Gj0l1PGpj/gTHzfeYgQcAQYhheWB5q5AjqPvLd1LtWy12EDPLBRRNb1L/jbURbWE TD9KE2z94/O9BuZHrfsvAgT7zW3F3dwUQHiRr0LvUx1loIZgVOaTaocmdc2GpP/I QrfMbnZRVZTmornS9m8Pdpa0ZVpDsrux -----END CERTIFICATE-----Generated at Sat May 31 16:38:58 2025 by rpki-client