$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json) Hash identifier: Gz69Ae/prvuBPjbmJBW8tMaWfTcnQ2IlQhW9yHMW+Js= Subject key identifier: 51:F0:80:47:5A:6D:28:B1:E0:34:1A:D1:2C:20:E2:78:9F:CB:41:9E Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft Manifest number: D0 Signing time: Fri 25 Apr 2025 04:42:55 +0000 Manifest this update: Fri 25 Apr 2025 04:42:55 +0000 Manifest next update: Fri 02 May 2025 04:42:55 +0000 Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: 51VRb+v6ZMnLKj2bi0tPvfHdSKsXVo5CEiylU173u/Y=) 2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: yl/E8QHLka4/lwMsB6BevGouPJwrIPgnFEOjdbPwsG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B Validity Not Before: Apr 25 04:42:55 2025 GMT Not After : May 2 04:42:55 2025 GMT Subject: CN=680b12cf-0652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:82:ea:ce:bd:f0:af:cc:90:18:ef:d9:9d: e3:4c:c0:97:d4:2f:78:a6:06:22:e1:e3:a0:50:8d: ef:83:83:97:ed:fd:fe:f5:e3:39:66:e7:ea:6a:a5: b6:be:90:75:48:43:c4:6a:9f:7b:ff:96:84:a1:34: e7:8b:72:0d:44:a4:5d:20:12:9b:8b:e4:30:0a:b7: 75:ec:c2:51:05:c4:bc:c8:52:11:ec:d3:48:3e:cf: 87:c3:01:13:fd:5f:a4:70:b4:5d:64:c6:bf:96:36: 1f:74:97:c0:e8:a6:7a:a9:26:c1:1c:80:7c:c0:3f: da:70:1a:04:d3:8b:27:ac:42:c7:e1:f2:cd:4c:8d: 8a:cf:0f:87:ca:c4:ff:e4:d4:6c:ab:84:9b:29:cd: c6:8d:66:6c:ab:c9:b6:6c:31:a4:53:28:bd:30:da: df:a9:fe:f1:92:bc:f5:1a:6f:24:73:77:d7:36:5b: 2e:c4:0d:56:d2:6c:2f:fc:4c:ec:4d:8d:b3:de:b5: 83:f3:1b:87:97:e4:43:6c:2c:b7:ee:0c:77:a2:1b: d5:c9:1b:35:79:07:5e:46:8a:31:eb:fe:91:dd:a0: 0a:8f:55:db:16:49:8c:09:32:26:0d:94:4e:c7:dd: 4c:28:59:56:23:80:9d:76:26:63:b6:5f:16:67:d3: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:80:47:5A:6D:28:B1:E0:34:1A:D1:2C:20:E2:78:9F:CB:41:9E X509v3 Authority Key Identifier: keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:86:0a:24:ed:13:da:7f:9c:c8:88:27:b7:82:10:77:e5:3f: fe:46:7c:14:c4:25:30:91:9c:33:89:a3:39:c6:55:a8:9c:46: 9f:6d:88:fa:ba:38:eb:a3:a2:da:ad:3a:58:96:09:63:58:ec: a5:53:f3:35:b4:2b:a2:92:bc:04:07:d2:96:3b:23:17:ef:0c: d4:1e:db:98:b1:fb:08:fa:f0:5e:42:f9:32:e0:f3:be:81:09: a9:3a:57:ea:24:a7:cf:9a:f6:45:70:e3:3b:55:a0:3c:86:d4: 0c:28:95:0e:52:55:92:e6:f9:9f:3e:f6:fe:93:8f:d3:bf:7a: 09:a4:f0:c5:bd:88:71:d5:89:b8:ef:92:9b:b6:e9:58:9e:88: 3c:9c:cb:02:c1:aa:1e:74:5d:53:3b:27:e2:89:07:0b:66:ec: a4:15:84:b7:08:25:77:aa:f3:c4:b4:a7:1e:44:66:8b:79:01: e6:c4:5b:52:6d:f3:1c:b9:b3:66:d8:c7:be:fa:98:c8:91:f2: 68:64:81:13:f3:89:56:26:6f:7b:91:83:3c:b4:06:88:77:d2: 7e:ff:94:fc:a1:72:c2:4b:53:0e:07:34:9d:1a:a5:5a:4f:e3: ca:52:58:a8:91:93:b9:3e:58:37:86:4a:0e:55:3e:1d:25:16: f9:1d:25:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA1RDcxMTAvBgNVBAUTKDYxRTRGODYxNkI2MjQyNjYxQTkxRjdEMDEyQjZDRDFF NDA5Mzg5MEIwHhcNMjUwNDI1MDQ0MjU1WhcNMjUwNTAyMDQ0MjU1WjAYMRYwFAYD VQQDEw02ODBiMTJjZi0wNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyWC6s698K/MkBjv2Z3jTMCX1C94pgYi4eOgUI3vg4OX7f3+9eM5ZufqaqW2 vpB1SEPEap97/5aEoTTni3INRKRdIBKbi+QwCrd17MJRBcS8yFIR7NNIPs+HwwET /V+kcLRdZMa/ljYfdJfA6KZ6qSbBHIB8wD/acBoE04snrELH4fLNTI2Kzw+HysT/ 5NRsq4SbKc3GjWZsq8m2bDGkUyi9MNrfqf7xkrz1Gm8kc3fXNlsuxA1W0mwv/Ezs TY2z3rWD8xuHl+RDbCy37gx3ohvVyRs1eQdeRoox6/6R3aAKj1XbFkmMCTImDZRO x91MKFlWI4CddiZjtl8WZ9OFAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHwgEda bSix4DQa0Swg4nify0GeMB8GA1UdIwQYMBaAFGHk+GFrYkJmGpH30BK2zR5Ak4kL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDVENy8zQjUwRjEzMkU1 N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFtWWFrZmZRRXJiTkhrQ1Rp UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llVDRZV3RpUW1ZYWtmZlFFcmJOSGtDVGlRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDVENy8zQjUwRjEzMkU1N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFt WWFrZmZRRXJiTkhrQ1RpUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvhgok7RPaf5zIiCe3ghB35T/+RnwUxCUwkZwziaM5xlWonEafbYj6 ujjro6LarTpYlgljWOylU/M1tCuikrwEB9KWOyMX7wzUHtuYsfsI+vBeQvky4PO+ gQmpOlfqJKfPmvZFcOM7VaA8htQMKJUOUlWS5vmfPvb+k4/Tv3oJpPDFvYhx1Ym4 75KbtulYnog8nMsCwaoedF1TOyfiiQcLZuykFYS3CCV3qvPEtKceRGaLeQHmxFtS bfMcubNm2Me++pjIkfJoZIET84lWJm97kYM8tAaId9J+/5T8oXLCS1MOBzSdGqVa T+PKUliokZO5Plg3hkoOVT4dJRb5HSV/ -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:05 2025 by rpki-client