$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: kWdijjBqbDE4CNi/r4vzIWasJh6N2ba5GkQkLDcU1+w= Subject key identifier: A4:91:69:AA:9E:CD:F4:B3:3B:3D:C3:F8:00:14:B9:E3:8D:19:6A:6F Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: DF Signing time: Fri 25 Apr 2025 04:38:34 +0000 Manifest this update: Fri 25 Apr 2025 04:38:33 +0000 Manifest next update: Fri 02 May 2025 04:38:33 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: seO2of15pCZJZfJk+1BudGAaodliJxmnwW8qbhS6MzM=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Apr 25 04:38:33 2025 GMT Not After : May 2 04:38:33 2025 GMT Subject: CN=680b11ca-bcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:a8:d6:c8:c6:9f:67:e6:cc:14:b1:0f:95: 09:5f:c7:3b:d8:fb:15:25:8d:1a:e2:07:f5:4e:a8: 47:5d:9b:2f:3e:39:37:75:e3:3f:26:48:f2:12:4a: ec:b9:37:23:ba:96:c7:64:ea:3c:42:66:46:58:f9: bf:3f:fc:54:23:15:ef:da:59:20:6a:d1:9e:af:05: c6:3d:8a:92:b3:ba:4c:5a:b4:2a:d6:18:b4:09:11: 81:cb:d3:9e:5f:e0:47:69:10:04:6f:f0:3f:86:93: b9:26:c8:fd:6d:b9:09:2f:df:cd:06:69:bf:d6:51: 61:47:0a:e8:b0:8f:07:88:62:a7:48:f2:40:3c:8b: e3:d1:dc:f3:f5:72:57:20:82:15:53:ed:84:34:ab: ae:44:50:1e:dc:9f:5d:b3:b9:35:8c:4b:11:29:ca: 52:28:69:da:82:d9:d2:20:57:a4:b5:d3:20:6a:eb: ea:cc:b1:ae:10:af:73:56:03:c0:88:4a:b4:95:1a: 85:c9:95:64:50:07:81:ea:04:ef:b3:85:ed:ad:58: 82:eb:74:d2:47:a5:be:61:46:c3:b2:46:3a:fd:5a: 36:4f:2b:47:13:39:44:c6:4c:43:0d:9f:74:d3:81: ee:c5:ac:5a:28:0b:b4:91:48:47:d2:35:48:6d:7f: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:69:AA:9E:CD:F4:B3:3B:3D:C3:F8:00:14:B9:E3:8D:19:6A:6F X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c6:ce:1e:5a:8f:c8:7e:15:c1:df:8a:ef:c1:c3:ad:d9:a1: f8:5e:a5:fb:43:7e:f1:d8:c6:62:6c:d5:30:08:bd:17:e4:a2: e6:fd:64:79:0e:88:68:a0:0e:71:c8:87:44:d1:d2:5e:a6:1b: 7b:16:cf:2d:b5:d7:da:eb:08:54:bd:7d:c4:60:79:c9:b1:87: c3:f6:e2:fc:25:72:cc:49:d6:7b:09:f0:3a:4a:db:51:63:80: b3:23:de:5e:5d:d9:96:cb:41:f2:06:3a:a9:eb:37:59:18:8a: e1:c3:c3:49:9b:e2:e6:cb:95:da:df:48:cc:42:60:d9:7e:a7: 27:ef:b8:6b:10:fb:fa:3d:ca:c9:51:f6:80:8f:8c:30:c4:eb: 21:7e:3b:0f:56:d2:2d:e5:20:f1:28:6a:f3:ed:18:b6:7e:c1: d4:77:ee:fc:74:da:f0:7b:64:7f:45:0e:8e:e9:1d:b0:4a:69: 6b:2a:52:de:f5:05:ff:c5:d6:76:55:70:4c:20:c6:5b:3c:31: c1:38:99:7d:4b:11:2c:28:51:5d:32:71:a6:d8:be:cf:f4:2e: c4:b4:f3:f3:15:62:38:f0:58:63:26:3c:56:c9:36:a7:02:46: 2b:d6:df:f9:d0:01:ae:e6:c5:24:4e:5a:a6:10:a3:a6:85:7b: 8f:1b:1d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwNDI1MDQzODMzWhcNMjUwNTAyMDQzODMzWjAYMRYwFAYD VQQDEw02ODBiMTFjYS1iY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscKo1sjGn2fmzBSxD5UJX8c72PsVJY0a4gf1TqhHXZsvPjk3deM/JkjyEkrs uTcjupbHZOo8QmZGWPm/P/xUIxXv2lkgatGerwXGPYqSs7pMWrQq1hi0CRGBy9Oe X+BHaRAEb/A/hpO5Jsj9bbkJL9/NBmm/1lFhRwrosI8HiGKnSPJAPIvj0dzz9XJX IIIVU+2ENKuuRFAe3J9ds7k1jEsRKcpSKGnagtnSIFektdMgauvqzLGuEK9zVgPA iEq0lRqFyZVkUAeB6gTvs4XtrViC63TSR6W+YUbDskY6/Vo2TytHEzlExkxDDZ90 04HuxaxaKAu0kUhH0jVIbX/elwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSRaaqe zfSzOz3D+AAUueONGWpvMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATxs4eWo/IfhXB34rvwcOt2aH4XqX7Q37x2MZibNUwCL0X5KLm/WR5 DohooA5xyIdE0dJepht7Fs8ttdfa6whUvX3EYHnJsYfD9uL8JXLMSdZ7CfA6SttR Y4CzI95eXdmWy0HyBjqp6zdZGIrhw8NJm+Lmy5Xa30jMQmDZfqcn77hrEPv6PcrJ UfaAj4wwxOshfjsPVtIt5SDxKGrz7Ri2fsHUd+78dNrwe2R/RQ6O6R2wSmlrKlLe 9QX/xdZ2VXBMIMZbPDHBOJl9SxEsKFFdMnGm2L7P9C7EtPPzFWI48FhjJjxWyTan AkYr1t/50AGu5sUkTlqmEKOmhXuPGx0Y -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:25 2025 by rpki-client