$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: XAyo7WxOdiUuCMvAEPtvcbSFCXHPJIjUFmp2DpXAE3o= Subject key identifier: 76:06:E4:1E:70:8B:E9:35:5D:C2:9A:B7:B9:1B:37:D9:FB:64:6C:87 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 36 Signing time: Sat 03 May 2025 06:57:02 +0000 Manifest this update: Sat 03 May 2025 06:57:00 +0000 Manifest next update: Sat 10 May 2025 06:57:00 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: dXfRmJrKQ9BXrs6+0SgPmrvDReeTbnApdTvue4yhjpY=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: May 3 06:57:00 2025 GMT Not After : May 10 06:57:00 2025 GMT Subject: CN=6815be3d-4e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:d2:82:e2:22:b6:9c:56:86:1d:f4:a7:bd: 2b:f3:d3:b3:77:25:be:b6:58:b1:35:36:51:b4:24: 57:0b:df:6e:b2:33:5c:77:51:e9:dd:dc:71:57:53: 2c:1e:c9:8d:df:31:51:cf:42:6c:76:1b:0a:c8:72: cc:8f:b8:3b:f9:14:6d:d2:2a:88:d2:6c:e0:7c:96: b7:79:df:ed:08:40:65:0c:0d:ed:d6:77:f8:74:f8: 3a:75:75:97:f4:20:0e:9f:d6:13:46:91:2a:1b:4f: 4b:8c:8b:51:0c:7d:7d:e5:23:d1:55:d3:a6:ec:82: bf:02:ca:e4:8f:76:dd:c1:43:08:d2:e7:fe:c6:22: a8:4c:38:df:58:56:de:da:28:98:a5:9c:4b:14:70: 58:85:f6:71:5a:85:71:e1:ad:9d:d8:a2:fc:5d:07: 07:29:96:64:c1:24:10:c4:69:de:9f:a9:2a:30:52: bd:3a:46:58:56:93:c2:a6:cb:f0:7d:58:5f:53:b8: d2:38:ba:f1:ee:a9:37:8d:ba:85:37:a6:d1:78:ba: e0:6f:4c:a2:09:fd:22:0b:d1:f8:fb:b0:3d:53:e7: 57:55:7e:27:4e:ca:4c:02:61:f8:f7:8f:16:72:8c: ad:c3:7a:b7:a2:6e:a8:cc:f1:c8:e5:1b:33:93:ee: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:E4:1E:70:8B:E9:35:5D:C2:9A:B7:B9:1B:37:D9:FB:64:6C:87 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a0:04:75:57:95:de:74:8d:40:0f:0f:73:7f:29:e9:5d:00: fd:1a:73:f1:8f:5d:ca:af:51:34:7e:47:95:4e:d1:7c:03:7e: 13:76:69:55:41:2a:70:18:a5:57:16:67:34:79:05:74:8d:90: ab:5b:95:24:20:49:29:56:ce:8e:c3:36:cf:ff:bd:e5:30:1e: 74:0b:18:e7:b3:f5:24:ae:8e:fb:3f:09:e7:8c:3c:6c:11:82: f6:24:9f:cd:98:9d:f2:73:07:df:0e:8c:8d:7d:df:4f:41:fa: 58:50:2c:f7:9c:88:11:25:62:d9:54:5a:6d:67:f4:42:f2:9d: b7:69:60:a9:5c:2a:41:f6:83:aa:2b:80:8e:c9:f7:e1:0f:57: 1f:4c:1f:ae:df:c9:95:0c:c3:dc:20:dc:04:4f:6c:92:da:15: 47:2c:31:bb:1f:e7:18:59:fd:1f:8c:55:a0:12:30:64:7c:d1: c6:c0:d2:4d:ed:00:a4:c1:64:97:f5:24:72:a9:aa:e5:39:ab: 8a:39:95:a5:9a:d8:29:0c:a2:73:3f:4e:ab:64:49:67:1e:53: 2a:3f:cc:64:d4:b0:6c:b7:63:7c:2b:24:ff:ed:3d:4b:f8:cb: b5:6e:b9:c7:9c:62:57:a1:d1:72:9d:8b:63:ff:07:43:3b:c9: c9:52:5c:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA1MDMwNjU3MDBaFw0yNTA1MTAwNjU3MDBaMBgxFjAUBgNV BAMTDTY4MTViZTNkLTRlNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIrNKC4iK2nFaGHfSnvSvz07N3Jb62WLE1NlG0JFcL326yM1x3Uend3HFXUywe yY3fMVHPQmx2GwrIcsyPuDv5FG3SKojSbOB8lrd53+0IQGUMDe3Wd/h0+Dp1dZf0 IA6f1hNGkSobT0uMi1EMfX3lI9FV06bsgr8CyuSPdt3BQwjS5/7GIqhMON9YVt7a KJilnEsUcFiF9nFahXHhrZ3YovxdBwcplmTBJBDEad6fqSowUr06RlhWk8Kmy/B9 WF9TuNI4uvHuqTeNuoU3ptF4uuBvTKIJ/SIL0fj7sD1T51dVfidOykwCYfj3jxZy jK3DereibqjM8cjlGzOT7q0vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdgbkHnCL 6TVdwpq3uRs32ftkbIcwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACGgBHVXld50jUAPD3N/KeldAP0ac/GPXcqvUTR+R5VO0XwDfhN2aVVB KnAYpVcWZzR5BXSNkKtblSQgSSlWzo7DNs//veUwHnQLGOez9SSujvs/CeeMPGwR gvYkn82YnfJzB98OjI19309B+lhQLPeciBElYtlUWm1n9ELynbdpYKlcKkH2g6or gI7J9+EPVx9MH67fyZUMw9wg3ARPbJLaFUcsMbsf5xhZ/R+MVaASMGR80cbA0k3t AKTBZJf1JHKpquU5q4o5laWa2CkMonM/TqtkSWceUyo/zGTUsGy3Y3wrJP/tPUv4 y7VuucecYleh0XKdi2P/B0M7yclSXAs= -----END CERTIFICATE-----Generated at Sun May 4 10:21:06 2025 by rpki-client