$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: M1vgGChT3ZbdVZ0LytJBZTE+7r6vp6ZkLOcU8ae0ol0= Subject key identifier: 0B:A5:CE:7D:F3:59:4B:95:13:34:C5:8B:10:D2:9E:D3:DD:16:26:DF Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 36 Signing time: Sat 03 May 2025 06:57:21 +0000 Manifest this update: Sat 03 May 2025 06:57:20 +0000 Manifest next update: Sat 10 May 2025 06:57:20 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: aez1O8d3Ggjj/BLeCp3YM7SyxKShq9I2CGaJE6ZCCbg=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: u8mLTgdlzLOcst0PW7RFWtPWXwp8xBwUEW3SQOngh5k=) 3: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (hash: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: May 3 06:57:20 2025 GMT Not After : May 10 06:57:20 2025 GMT Subject: CN=6815be51-4b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:29:da:5f:5e:b3:84:54:95:af:fb:40:9b: 03:54:ea:04:cf:ed:bb:2f:df:f7:7c:8b:96:fc:b5: 9b:d3:f3:2e:c9:cd:04:74:c0:f3:32:33:2b:bd:34: 41:e1:42:07:06:49:62:44:12:dc:12:7d:f2:ab:da: b1:d9:47:2c:06:ed:79:71:ae:12:6b:61:3a:fb:20: f0:2f:32:93:7a:21:29:f7:98:b6:19:cb:7b:ea:df: 07:be:08:17:2e:bf:07:7f:e4:7c:af:8b:ba:cf:22: 08:44:a6:4b:17:a4:d0:93:00:54:ab:fc:b9:6c:e1: 97:fd:0c:2a:c3:87:4e:38:92:0b:3d:1a:8a:4d:60: 57:15:c9:9f:60:46:d1:06:a9:e4:68:d7:25:9c:b3: aa:95:40:cf:41:47:f9:47:3e:b0:64:c4:9b:bd:1a: 94:75:ad:4c:ad:71:99:0c:a0:fb:e7:d1:da:86:67: 89:e7:a5:22:0e:dc:72:ad:f5:04:65:9e:d0:db:1d: e3:b5:5c:03:86:68:12:e9:5a:83:12:53:3d:15:a8: f6:47:76:b8:8e:89:3f:da:e6:7a:e9:c2:a0:d7:48: a7:1e:91:bb:85:18:26:30:8d:9b:00:a4:a8:dd:06: 13:9f:5e:c7:a7:1b:28:c0:3e:be:ee:47:25:d1:73: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A5:CE:7D:F3:59:4B:95:13:34:C5:8B:10:D2:9E:D3:DD:16:26:DF X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:0a:ca:04:09:42:8f:cf:ea:a0:b9:de:34:9c:ed:46:9b: 59:b7:fb:d8:bb:c4:c2:90:a9:5c:bb:ae:86:31:0e:39:66:14: ca:90:65:2b:2e:88:09:94:44:b0:56:d1:71:0d:40:d5:f2:9e: c4:86:de:d8:ab:1c:ed:27:69:84:5f:db:c4:f4:95:c9:a5:e1: c4:6e:15:d9:86:fa:5b:8f:57:32:3a:1b:49:2b:b7:11:40:36: 46:aa:e5:1f:55:f9:e2:e1:37:44:e3:47:02:91:fa:e5:1e:70: 8c:d6:a6:b0:89:97:0b:cb:8d:c6:94:87:01:75:f2:0d:de:ec: 18:ca:9b:64:d5:4f:51:71:9f:29:ae:d7:95:64:22:2e:34:0a: c5:e8:f0:17:3d:d8:53:e7:26:de:5c:7f:b8:8e:cc:84:34:6d: f7:9a:d9:53:8d:e5:03:f5:c8:03:26:6a:88:fc:dd:b3:29:a5: cd:2a:5b:8d:a8:c4:d8:df:93:38:70:71:7b:b2:63:e5:d4:46: 3d:8f:ee:b0:22:f3:29:a4:c6:64:94:17:d0:02:e0:b3:3f:53: ea:f5:ab:f8:04:1b:21:00:42:f3:1e:94:1b:bd:06:cc:43:f7: 45:8b:3c:cc:1b:e0:ac:8e:30:fb:f1:ce:82:c5:07:25:7a:5c: bc:d6:b5:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA1MDMwNjU3MjBaFw0yNTA1MTAwNjU3MjBaMBgxFjAUBgNV BAMTDTY4MTViZTUxLTRiN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmMCnaX16zhFSVr/tAmwNU6gTP7bsv3/d8i5b8tZvT8y7JzQR0wPMyMyu9NEHh QgcGSWJEEtwSffKr2rHZRywG7XlxrhJrYTr7IPAvMpN6ISn3mLYZy3vq3we+CBcu vwd/5Hyvi7rPIghEpksXpNCTAFSr/Lls4Zf9DCrDh044kgs9GopNYFcVyZ9gRtEG qeRo1yWcs6qVQM9BR/lHPrBkxJu9GpR1rUytcZkMoPvn0dqGZ4nnpSIO3HKt9QRl ntDbHeO1XAOGaBLpWoMSUz0VqPZHdriOiT/a5nrpwqDXSKcekbuFGCYwjZsApKjd BhOfXsenGyjAPr7uRyXRc1fNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC6XOffNZ S5UTNMWLENKe090WJt8wHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJuCsoECUKPz+qgud40nO1Gm1m3+9i7xMKQqVy7roYxDjlmFMqQZSsu iAmURLBW0XENQNXynsSG3tirHO0naYRf28T0lcml4cRuFdmG+luPVzI6G0krtxFA Nkaq5R9V+eLhN0TjRwKR+uUecIzWprCJlwvLjcaUhwF18g3e7BjKm2TVT1Fxnymu 15VkIi40CsXo8Bc92FPnJt5cf7iOzIQ0bfea2VON5QP1yAMmaoj83bMppc0qW42o xNjfkzhwcXuyY+XURj2P7rAi8ymkxmSUF9AC4LM/U+r1q/gEGyEAQvMelBu9BsxD 90WLPMwb4KyOMPvxzoLFByV6XLzWtTM= -----END CERTIFICATE-----Generated at Sat May 3 20:39:27 2025 by rpki-client