$ rpki-client -vvf rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft File: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft (raw, json) Hash identifier: dCZBs+iL3qMUkD11vqJeHdBiWe9xPYvVHa68v5981Z0= Subject key identifier: 4E:E4:51:A9:A8:17:60:A4:E5:F7:F9:EF:11:18:FC:D5:F2:E7:97:46 Authority key identifier: 63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12 Certificate issuer: /CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112 Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft Manifest number: 0518 Signing time: Thu 24 Apr 2025 23:20:17 +0000 Manifest this update: Thu 24 Apr 2025 23:20:16 +0000 Manifest next update: Thu 01 May 2025 23:20:16 +0000 Files and hashes: 1: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl (hash: j5FWVfnDmI9ZnWV+wft/PqQHC0uCR5jBy0mAieSWBZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298C7, serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112 Validity Not Before: Apr 24 23:20:16 2025 GMT Not After : May 1 23:20:16 2025 GMT Subject: CN=680ac731-f8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:68:b1:e4:55:6a:94:b7:05:21:55:f1:9b: 51:33:73:fc:ee:7b:ca:19:a0:1c:48:a2:63:65:76: 11:76:0f:9c:29:12:96:a7:0b:ba:05:7d:3d:e7:b5: 81:2f:36:0f:ca:af:db:b5:55:d7:b5:36:8d:4e:4c: 19:e9:72:e5:cd:7b:54:7b:54:c2:41:76:05:e7:23: 45:28:1e:3d:38:42:96:97:ec:45:60:89:75:31:c9: 23:99:8c:c6:a5:16:da:45:31:a0:42:08:7a:5e:ad: d1:01:3c:99:80:ee:02:18:35:7e:7a:11:2a:ce:d1: e3:d4:70:31:9d:99:45:e9:89:6b:e8:5f:3e:2f:e3: 1e:67:1a:aa:bf:51:f7:a0:99:71:e3:d1:6b:a1:c9: bc:6d:65:8f:02:cc:26:f7:55:8e:9c:14:50:86:fa: 7f:10:6e:5e:17:b4:5d:8a:06:d9:62:d0:01:46:ae: a0:53:9d:17:e2:20:92:60:ab:78:68:54:c0:8c:99: 81:80:ed:aa:8a:c1:a4:c3:30:bf:22:44:56:dc:81: 67:b3:50:35:5a:bf:72:58:07:ad:ab:ca:86:5e:9f: a7:08:a8:05:d3:49:c9:72:cc:e6:dc:95:11:0d:18: 6e:ab:ed:78:5f:5c:15:df:3c:6b:f7:68:90:4b:2b: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:51:A9:A8:17:60:A4:E5:F7:F9:EF:11:18:FC:D5:F2:E7:97:46 X509v3 Authority Key Identifier: keyid:63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f7:54:6c:7c:1f:e9:7c:d1:fc:82:34:73:d5:7f:0f:1f:bf: 43:e7:95:b7:07:c3:ab:3f:c6:bf:4f:79:8b:cb:c5:43:ff:df: 33:7c:ee:48:71:5d:fa:61:54:01:2c:60:da:70:bd:76:ae:1f: 5b:ca:7b:1c:20:e9:50:dd:32:df:ce:db:45:89:5b:23:67:13: a8:1e:4e:6d:a5:e4:5b:e3:d9:be:4b:1c:07:4e:3a:41:57:5b: ba:51:74:d1:76:1f:60:28:3a:92:5c:29:b3:a0:f0:97:98:c8: 49:cd:4f:79:3c:0d:68:31:99:5b:54:10:c8:84:38:66:2a:0e: ad:d7:f8:03:7a:00:c4:49:c5:f2:ba:64:c3:84:b9:1b:84:53: fd:71:50:27:3a:68:84:88:3c:d2:71:87:b7:09:88:e6:8a:69: 0e:c9:9c:82:e3:b0:07:20:85:9e:7b:fa:b8:5d:18:b0:b7:32: 5a:41:b5:cb:14:3b:02:f3:5c:53:0c:47:b6:21:fc:88:6d:dc: 3b:95:92:53:06:90:92:5b:89:e9:2b:a0:a5:16:80:9b:47:d2: 96:cf:fa:75:95:f9:93:83:22:35:aa:78:4c:ba:9c:1d:99:fa: 71:27:98:e4:4f:82:a5:d8:91:ca:7e:a6:7a:21:75:2d:53:af: f8:41:cb:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4QzcxMTAvBgNVBAUTKDYzM0FDQjhENTFEMkYwODg2OTlCOEE3MTQ5MUNDNzU1 M0VDMEMxMTIwHhcNMjUwNDI0MjMyMDE2WhcNMjUwNTAxMjMyMDE2WjAYMRYwFAYD VQQDEw02ODBhYzczMS1mOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeBoseRVapS3BSFV8ZtRM3P87nvKGaAcSKJjZXYRdg+cKRKWpwu6BX0957WB LzYPyq/btVXXtTaNTkwZ6XLlzXtUe1TCQXYF5yNFKB49OEKWl+xFYIl1MckjmYzG pRbaRTGgQgh6Xq3RATyZgO4CGDV+ehEqztHj1HAxnZlF6Ylr6F8+L+MeZxqqv1H3 oJlx49Frocm8bWWPAswm91WOnBRQhvp/EG5eF7RdigbZYtABRq6gU50X4iCSYKt4 aFTAjJmBgO2qisGkwzC/IkRW3IFns1A1Wr9yWAetq8qGXp+nCKgF00nJcszm3JUR DRhuq+14X1wV3zxr92iQSyv3HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7kUamo F2Ck5ff57xEY/NXy55dGMB8GA1UdIwQYMBaAFGM6y41R0vCIaZuKcUkcx1U+wMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThDNy9ENDk0QjhFRUZB N0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJaHBtNHB4U1J6SFZUN0F3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l6ckxqVkhTOElocG00cHhTUnpIVlQ3QXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThDNy9ENDk0QjhFRUZBN0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJ aHBtNHB4U1J6SFZUN0F3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA991RsfB/pfNH8gjRz1X8PH79D55W3B8OrP8a/T3mLy8VD/98zfO5I cV36YVQBLGDacL12rh9bynscIOlQ3TLfzttFiVsjZxOoHk5tpeRb49m+SxwHTjpB V1u6UXTRdh9gKDqSXCmzoPCXmMhJzU95PA1oMZlbVBDIhDhmKg6t1/gDegDEScXy umTDhLkbhFP9cVAnOmiEiDzScYe3CYjmimkOyZyC47AHIIWee/q4XRiwtzJaQbXL FDsC81xTDEe2IfyIbdw7lZJTBpCSW4npK6ClFoCbR9KWz/p1lfmTgyI1qnhMupwd mfpxJ5jkT4Kl2JHKfqZ6IXUtU6/4QctU -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:00 2025 by rpki-client