$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: DwiRueCCwdRWP6CE/5Rc/Lhj5OCsln7ZBd+RUrCScS4= Subject key identifier: 9E:02:32:E7:AA:CD:B8:52:36:30:EF:CB:C9:6B:7A:B6:2C:D2:CD:09 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: F0 Signing time: Fri 25 Apr 2025 04:23:24 +0000 Manifest this update: Fri 25 Apr 2025 04:23:24 +0000 Manifest next update: Fri 02 May 2025 04:23:24 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: NUxyYDhMzCrn2gg4zicv43BZHMdG5zTYE/wQ67Eoze4=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Apr 25 04:23:24 2025 GMT Not After : May 2 04:23:24 2025 GMT Subject: CN=680b0e3c-f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:d1:f9:f7:7d:9f:93:8e:03:18:6a:4e:f3: e3:a1:76:ef:da:25:36:eb:0f:c5:88:85:ca:5b:54: f1:65:31:30:31:68:c9:f1:a6:f4:00:bb:ff:d0:c1: 55:78:53:c3:e8:0a:0e:f0:f4:1d:fc:56:9d:02:61: c0:05:8a:8b:66:fe:4b:13:02:81:37:10:5d:73:b2: e4:95:bd:eb:37:26:90:d5:13:4d:0c:47:47:a5:0c: 10:ac:eb:7b:81:ac:1d:55:ff:29:47:1d:88:f0:71: b1:f8:83:67:7c:5f:2b:41:61:9c:c5:7d:db:d6:e8: fc:94:9e:34:e7:a7:78:42:c5:1f:4c:b8:f1:e8:51: d0:c3:13:cc:85:53:a2:fc:4d:c1:5d:3b:a3:0d:21: 4b:32:e9:e8:21:fb:b1:04:33:a5:34:80:c5:7b:1f: e7:26:26:cf:dc:8c:6a:6b:86:ee:46:6f:61:0c:9a: da:3d:fb:b1:2b:2a:7e:63:bf:bb:f2:be:20:2d:5e: 7a:78:51:c5:f9:c6:f2:0a:7b:47:a2:71:30:b5:c7: 65:16:5b:ce:c1:d1:e1:79:e1:85:5f:6f:46:82:25: 8e:c7:6f:18:9b:5e:c0:e9:9c:8f:aa:e7:05:ba:45: 94:9b:04:4d:46:b3:81:7c:df:bb:bc:89:fe:64:30: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:32:E7:AA:CD:B8:52:36:30:EF:CB:C9:6B:7A:B6:2C:D2:CD:09 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:50:43:03:61:5a:d2:36:95:6b:fe:ca:fa:42:fe:6d:11: 4d:3e:81:e6:8d:7c:77:c0:8a:66:fc:df:57:47:69:87:42:fb: 82:ce:37:ef:15:9a:44:5b:5c:7a:2f:90:50:62:5d:12:6d:40: e8:48:5d:98:d6:3e:13:91:ad:ac:a7:6b:f7:35:ae:72:94:64: 7a:42:c5:a4:e4:26:b6:2e:6b:07:d5:72:ad:36:b5:80:96:fd: ef:21:17:83:b9:65:b4:d2:7e:8c:b7:3e:e0:54:11:56:08:12: 39:9f:c4:65:b5:98:c1:2c:2e:7c:97:42:3d:42:88:6f:be:00: 3a:b2:c4:88:52:64:4e:8a:69:11:02:b6:16:51:d6:b8:76:c9: 09:e9:c6:d0:6d:22:33:93:be:01:e5:f6:d5:10:e7:d9:96:10: 30:39:31:da:d2:07:87:25:47:6e:b0:86:54:39:40:62:17:d7: 75:a2:7e:82:3c:8a:5a:7f:ee:a2:21:6d:d1:de:3e:44:b0:37: 1b:f8:aa:c1:b4:6e:46:4a:54:cc:0e:01:21:e6:63:99:0d:53: a4:b3:c5:12:1f:e4:52:32:88:fb:f9:6e:fc:e5:20:eb:49:35: e5:46:25:06:69:ed:30:c4:f2:77:6d:5e:7b:55:e4:11:f8:21: d3:68:77:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwNDI1MDQyMzI0WhcNMjUwNTAyMDQyMzI0WjAYMRYwFAYD VQQDEw02ODBiMGUzYy1mNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNvR+fd9n5OOAxhqTvPjoXbv2iU26w/FiIXKW1TxZTEwMWjJ8ab0ALv/0MFV eFPD6AoO8PQd/FadAmHABYqLZv5LEwKBNxBdc7Lklb3rNyaQ1RNNDEdHpQwQrOt7 gawdVf8pRx2I8HGx+INnfF8rQWGcxX3b1uj8lJ4056d4QsUfTLjx6FHQwxPMhVOi /E3BXTujDSFLMunoIfuxBDOlNIDFex/nJibP3Ixqa4buRm9hDJraPfuxKyp+Y7+7 8r4gLV56eFHF+cbyCntHonEwtcdlFlvOwdHheeGFX29GgiWOx28Ym17A6ZyPqucF ukWUmwRNRrOBfN+7vIn+ZDDkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4CMueq zbhSNjDvy8lrerYs0s0JMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZxlBDA2Fa0jaVa/7K+kL+bRFNPoHmjXx3wIpm/N9XR2mHQvuCzjfv FZpEW1x6L5BQYl0SbUDoSF2Y1j4Tka2sp2v3Na5ylGR6QsWk5Ca2LmsH1XKtNrWA lv3vIReDuWW00n6Mtz7gVBFWCBI5n8RltZjBLC58l0I9QohvvgA6ssSIUmROimkR ArYWUda4dskJ6cbQbSIzk74B5fbVEOfZlhAwOTHa0geHJUdusIZUOUBiF9d1on6C PIpaf+6iIW3R3j5EsDcb+KrBtG5GSlTMDgEh5mOZDVOks8USH+RSMoj7+W785SDr STXlRiUGae0wxPJ3bV57VeQR+CHTaHd+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:42 2025 by rpki-client