$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: X7wljhjG7kg9oXGGe4xhjlPfci/HfSiBGNaojjQGFPk= Subject key identifier: 30:5F:A0:D0:20:5A:FC:47:44:1A:83:54:9F:92:49:42:12:6C:98:EC Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 0452 Signing time: Thu 24 Apr 2025 23:58:09 +0000 Manifest this update: Thu 24 Apr 2025 23:58:08 +0000 Manifest next update: Thu 01 May 2025 23:58:08 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: Bq63XC3DhD1MvnS6RSus5TkvaipqQ2yE2XZnkSd5TWo=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Apr 24 23:58:08 2025 GMT Not After : May 1 23:58:08 2025 GMT Subject: CN=680ad011-a597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:4e:41:f5:21:b9:3b:75:68:0a:70:50:7b: 52:22:5e:db:d8:93:c2:7d:f4:06:d2:8a:c3:94:08: 02:53:f3:05:a0:3e:2b:22:e0:31:13:6e:ad:3e:24: b1:65:e7:a5:00:ca:7a:15:6c:f7:e4:40:43:ea:34: 1d:8c:43:35:d4:4f:26:6f:0c:ee:bf:52:53:aa:28: 31:2d:86:40:b7:d9:50:a9:e0:aa:a9:87:9c:c8:0c: e3:c5:c4:21:c2:a5:c1:eb:8c:08:36:da:48:8d:1e: 21:d9:b0:b3:2a:f6:c9:be:fe:4b:57:3f:69:55:d7: 61:d0:34:95:bc:fb:4c:17:16:c3:4c:7e:c0:f3:ac: e3:75:cb:b3:8c:f0:97:81:c3:67:f1:f7:51:73:f4: 03:68:8c:3f:b5:57:d2:bb:dc:58:7c:da:38:85:82: 83:28:1b:a1:8c:e8:fa:d9:d9:7a:82:98:fe:31:99: de:4c:8d:08:a1:dd:4a:93:3d:95:0e:2e:94:61:f4: 89:f8:b6:e3:9c:20:fe:50:cc:24:8f:ee:25:a3:d8: 1d:b5:d0:c5:12:f2:9b:14:a9:7c:b5:74:7a:00:e4: 79:84:bc:bf:9e:b9:77:f3:dd:40:70:96:38:af:21: fb:58:0a:15:71:cb:ac:83:a1:93:39:e2:e4:4c:d2: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5F:A0:D0:20:5A:FC:47:44:1A:83:54:9F:92:49:42:12:6C:98:EC X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8c:74:cc:2b:99:d8:a9:2d:3d:78:44:2e:3f:d2:78:f0:54: 33:04:b0:54:ae:83:1f:9e:f3:5b:95:35:ba:4c:be:ca:24:ba: 23:d9:98:40:3d:c8:3f:9b:f5:6b:d5:b4:c4:e2:17:8c:45:02: 63:8e:e0:07:cc:e3:60:46:9e:6e:df:ca:88:87:33:ae:47:78: b1:6f:c0:6c:00:fb:71:ab:b9:11:82:4f:05:05:a8:94:0f:d2: 8e:d2:7e:15:2f:65:e2:03:99:d6:dd:f3:d2:fe:a3:ba:f1:fc: c8:88:b8:74:8b:98:ec:f0:a4:a0:d8:1c:00:58:8a:f8:80:b8: e6:70:80:a0:59:e6:dc:15:18:69:8b:d7:8a:48:b3:5c:2c:70: 2a:4e:d8:71:78:3d:8a:34:cd:91:3c:80:cb:16:fa:7a:ea:5d: c9:3a:cc:95:c4:4d:04:7e:14:59:a9:6a:73:0e:bf:e4:c7:33: e5:23:4d:4c:4e:f4:81:20:6d:0a:09:5a:e2:9b:a1:a3:ec:bd: 24:b3:e9:51:d9:33:1d:46:4d:f3:8e:59:30:b9:b1:00:75:87: 29:29:c4:11:db:4d:33:0b:57:70:7e:35:35:55:15:de:78:f7: ff:ab:bd:81:b0:4c:4f:dc:cd:21:10:1f:24:df:00:2a:7f:da: 15:00:45:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwNDI0MjM1ODA4WhcNMjUwNTAxMjM1ODA4WjAYMRYwFAYD VQQDEw02ODBhZDAxMS1hNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGpOQfUhuTt1aApwUHtSIl7b2JPCffQG0orDlAgCU/MFoD4rIuAxE26tPiSx ZeelAMp6FWz35EBD6jQdjEM11E8mbwzuv1JTqigxLYZAt9lQqeCqqYecyAzjxcQh wqXB64wINtpIjR4h2bCzKvbJvv5LVz9pVddh0DSVvPtMFxbDTH7A86zjdcuzjPCX gcNn8fdRc/QDaIw/tVfSu9xYfNo4hYKDKBuhjOj62dl6gpj+MZneTI0Iod1Kkz2V Di6UYfSJ+LbjnCD+UMwkj+4lo9gdtdDFEvKbFKl8tXR6AOR5hLy/nrl3891AcJY4 ryH7WAoVccusg6GTOeLkTNK1ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBfoNAg WvxHRBqDVJ+SSUISbJjsMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnjHTMK5nYqS09eEQuP9J48FQzBLBUroMfnvNblTW6TL7KJLoj2ZhA Pcg/m/Vr1bTE4heMRQJjjuAHzONgRp5u38qIhzOuR3ixb8BsAPtxq7kRgk8FBaiU D9KO0n4VL2XiA5nW3fPS/qO68fzIiLh0i5js8KSg2BwAWIr4gLjmcICgWebcFRhp i9eKSLNcLHAqTthxeD2KNM2RPIDLFvp66l3JOsyVxE0EfhRZqWpzDr/kxzPlI01M TvSBIG0KCVrim6Gj7L0ks+lR2TMdRk3zjlkwubEAdYcpKcQR200zC1dwfjU1VRXe ePf/q72BsExP3M0hEB8k3wAqf9oVAEXq -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:58 2025 by rpki-client