$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: 0+k9Rrnw7bX8m5r140amSwvAwveH0evSSfPA7276Xag= Subject key identifier: 84:69:21:C1:CF:1D:91:A9:92:62:FA:4E:98:93:05:AA:9F:7D:11:EA Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 02CD Signing time: Sat 03 May 2025 01:27:55 +0000 Manifest this update: Sat 03 May 2025 01:27:55 +0000 Manifest next update: Sat 10 May 2025 01:27:55 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: +6FyLokQ+nvYmh6mbHD3z2x44A077pr8AgFTlU4uceQ=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 01:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: May 3 01:27:55 2025 GMT Not After : May 10 01:27:55 2025 GMT Subject: CN=6815711b-87fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:41:5c:c2:11:e2:93:45:e9:cb:af:8f:09: f6:c5:6f:e5:90:56:c7:c8:d4:90:99:36:d0:64:25: ee:09:99:b6:65:a6:f0:7e:bc:45:da:d0:7f:9d:77: a6:22:0e:9c:2a:27:32:ba:60:bd:90:3a:0b:9f:af: a5:9b:cb:0e:96:dd:52:2d:e9:28:c1:d0:4c:f2:d2: 1b:09:4e:bb:e9:a5:e4:0f:d9:75:7f:9c:3e:eb:7b: 32:13:07:75:70:7a:ea:b6:72:1b:12:70:ac:b4:a2: 7b:43:20:2c:29:9f:53:d2:c8:ca:65:e9:cf:62:b7: 5e:8b:b3:9c:91:c2:57:97:18:46:db:6e:64:be:9e: 34:9c:c2:31:9c:9f:42:46:98:5b:66:01:73:ee:05: 13:05:75:6f:b2:1e:16:b0:28:40:a7:d7:0a:63:ea: 33:a3:85:8f:63:9a:dc:7a:af:67:47:41:06:0a:4b: 48:aa:a2:c2:ee:a5:83:20:ce:0e:64:c2:43:76:f6: 58:d0:10:6e:75:aa:11:42:ab:24:8c:66:6d:71:d2: 31:e7:eb:6f:83:d8:b9:9d:43:e1:2f:19:e8:46:2c: b0:97:34:51:b4:0e:a0:ff:cf:cd:64:eb:88:3c:d7: 58:7a:a8:64:2f:07:d0:3e:01:07:06:ee:07:6b:13: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:69:21:C1:CF:1D:91:A9:92:62:FA:4E:98:93:05:AA:9F:7D:11:EA X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8b:85:1a:0d:51:95:df:31:4b:bd:fa:42:04:91:44:8f:ea: e9:29:ee:d5:f4:1a:34:52:0c:65:e4:3a:1a:92:8c:80:d8:67: 70:b4:a3:20:2d:58:14:8c:ab:9d:48:c7:11:01:3f:9a:97:40: 23:77:8d:b8:82:55:e1:39:dd:8e:a3:34:56:e0:88:e9:bf:a4: 5e:91:0f:4f:f4:96:0e:d8:c6:7a:19:db:cf:22:4c:98:1f:fe: 0e:11:79:26:4f:a2:af:49:1d:ad:24:8b:d2:a2:4a:f9:1b:c4: 04:c7:90:c8:5d:ca:b5:bd:98:90:a3:c0:e9:75:6e:18:7b:d4: c9:a7:af:14:cc:b8:62:7c:d3:79:66:48:1e:bb:c8:42:55:b1: f8:6e:d7:32:8b:a5:b9:01:de:f5:11:53:1d:94:e8:86:29:bc: 1e:b2:07:5f:3d:10:5d:80:34:bd:ed:fe:b7:9d:c6:d3:1d:81: da:02:b0:89:c2:a5:9e:07:af:ed:fd:24:51:37:de:93:d2:5b: 2e:13:2d:df:1d:4f:17:13:61:45:dc:4d:f4:d4:f8:34:b6:6b: bb:cc:65:ce:91:3a:ca:1e:4a:2b:35:b6:5e:1a:a5:4c:3e:ed: b6:ae:fc:5d:8e:11:d1:a8:c5:77:bb:3c:69:cf:dc:ed:2c:40: 2a:e5:de:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUwNTAzMDEyNzU1WhcNMjUwNTEwMDEyNzU1WjAYMRYwFAYD VQQDEw02ODE1NzExYi04N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XtBXMIR4pNF6cuvjwn2xW/lkFbHyNSQmTbQZCXuCZm2ZabwfrxF2tB/nXem Ig6cKicyumC9kDoLn6+lm8sOlt1SLekowdBM8tIbCU676aXkD9l1f5w+63syEwd1 cHrqtnIbEnCstKJ7QyAsKZ9T0sjKZenPYrdei7OckcJXlxhG225kvp40nMIxnJ9C RphbZgFz7gUTBXVvsh4WsChAp9cKY+ozo4WPY5rceq9nR0EGCktIqqLC7qWDIM4O ZMJDdvZY0BBudaoRQqskjGZtcdIx5+tvg9i5nUPhLxnoRiywlzRRtA6g/8/NZOuI PNdYeqhkLwfQPgEHBu4HaxM0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRpIcHP HZGpkmL6TpiTBaqffRHqMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAli4UaDVGV3zFLvfpCBJFEj+rpKe7V9Bo0Ugxl5DoakoyA2GdwtKMg LVgUjKudSMcRAT+al0Ajd424glXhOd2OozRW4Ijpv6RekQ9P9JYO2MZ6GdvPIkyY H/4OEXkmT6KvSR2tJIvSokr5G8QEx5DIXcq1vZiQo8DpdW4Ye9TJp68UzLhifNN5 Zkgeu8hCVbH4btcyi6W5Ad71EVMdlOiGKbwesgdfPRBdgDS97f63ncbTHYHaArCJ wqWeB6/t/SRRN96T0lsuEy3fHU8XE2FF3E301Pg0tmu7zGXOkTrKHkorNbZeGqVM Pu22rvxdjhHRqMV3uzxpz9ztLEAq5d6a -----END CERTIFICATE-----Generated at Sun May 4 00:10:15 2025 by rpki-client