$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: t9KhbmvYcedCBah5sKEQcrWFF8Kh1AUqee0ELA9QgHU= Subject key identifier: FB:BC:42:18:9A:A5:A6:A6:63:A8:6F:2A:AD:32:C6:03:99:6F:01:44 Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 51 Signing time: Fri 25 Apr 2025 06:34:20 +0000 Manifest this update: Fri 25 Apr 2025 06:34:20 +0000 Manifest next update: Fri 02 May 2025 06:34:20 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: SygG/hNUS+hBRvAFzbYWtskCgJyJYevSurvykhadxMI=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Apr 25 06:34:20 2025 GMT Not After : May 2 06:34:20 2025 GMT Subject: CN=680b2cec-8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:55:c2:ed:8f:a8:f1:56:34:2a:0d:3c:49: 05:6b:a1:36:42:1e:c6:31:2c:c7:e6:84:b5:4d:d8: f5:eb:5b:00:08:80:38:f6:85:2b:f6:10:3a:45:13: 2c:0e:2a:e5:52:31:fa:d8:70:25:7a:af:d7:1f:7e: 3d:ba:02:6d:b8:b4:b6:ef:4a:e1:fc:b7:fd:2e:2a: 30:a7:3e:b8:a6:82:7f:80:ca:bc:8c:25:75:b2:01: 24:3d:5f:54:74:15:58:ce:40:08:1b:1a:2e:57:fb: fd:fe:4e:b2:b2:cc:66:29:31:55:95:f2:52:b9:a4: d9:cf:62:a6:15:b0:37:73:92:70:82:0e:95:69:15: a5:24:09:76:fb:9a:bb:57:1a:ff:79:0f:da:18:38: 4b:79:8b:78:bd:33:a1:3b:a1:0c:e9:c7:9e:3a:8a: 8f:10:78:74:31:6b:7d:96:78:6b:50:14:25:e7:a0: 34:4f:28:4f:7e:97:9d:aa:0e:7a:ec:50:23:fb:f8: 13:80:b6:c1:9a:60:44:d7:a2:fc:bb:d9:46:8f:1a: 64:2f:69:98:8c:b0:97:79:6f:93:e9:51:2d:d6:b4: d8:fb:a1:09:38:53:47:40:40:76:17:f0:74:3b:71: 27:a9:a8:2a:26:f9:e0:b2:79:f0:f1:74:41:90:ed: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BC:42:18:9A:A5:A6:A6:63:A8:6F:2A:AD:32:C6:03:99:6F:01:44 X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2a:05:7d:43:61:2d:08:e8:48:52:0a:d4:c1:e2:bc:c6:e6: 10:31:94:a4:0e:29:da:e0:e8:c4:81:9d:a7:ad:3d:8f:cf:7b: 5b:62:33:de:d2:b1:02:e5:22:8e:d4:7b:27:db:f0:33:78:b9: b4:af:fe:9f:a7:3d:5d:e5:ca:e2:29:69:5c:26:27:e9:ec:aa: 3d:6b:3a:9d:ff:d3:1c:f1:9c:ca:7d:9c:c0:03:b6:b4:8c:cb: e0:98:ab:4e:91:8c:a9:37:04:8f:b8:fe:2c:e5:41:56:13:d8: ad:96:2f:4b:fe:1f:38:38:f8:28:07:93:66:bb:d7:72:8b:80: 85:8a:bc:64:5b:52:3c:96:21:7a:50:05:be:97:45:02:a3:8e: 96:55:50:78:17:d2:70:a7:cc:e8:aa:84:1f:1d:e2:63:45:ad: e5:8e:d8:0e:80:a4:0f:bd:1e:8b:be:45:0b:a4:04:7e:74:67: d7:c9:d0:1a:91:f1:8b:90:3b:c2:d4:6d:71:9f:a2:e5:fe:9f: e6:53:0a:b6:9e:47:fc:26:b0:03:2a:b9:6f:0c:5b:52:1b:7c: 2c:46:20:23:d0:15:b6:4e:31:af:5d:54:43:84:8b:1a:78:a2: e5:89:b2:7f:0d:44:83:fd:e1:ed:bf:87:b7:64:fa:05:c5:bb: ee:40:91:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoNjI0Qjk2RTFENjY1RUQ3OEU3OERGQUY2QzIyMDE5MTA3 M0RCNjZDQzAeFw0yNTA0MjUwNjM0MjBaFw0yNTA1MDIwNjM0MjBaMBgxFjAUBgNV BAMTDTY4MGIyY2VjLThjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrpFXC7Y+o8VY0Kg08SQVroTZCHsYxLMfmhLVN2PXrWwAIgDj2hSv2EDpFEywO KuVSMfrYcCV6r9cffj26Am24tLbvSuH8t/0uKjCnPrimgn+AyryMJXWyASQ9X1R0 FVjOQAgbGi5X+/3+TrKyzGYpMVWV8lK5pNnPYqYVsDdzknCCDpVpFaUkCXb7mrtX Gv95D9oYOEt5i3i9M6E7oQzpx546io8QeHQxa32WeGtQFCXnoDRPKE9+l52qDnrs UCP7+BOAtsGaYETXovy72UaPGmQvaZiMsJd5b5PpUS3WtNj7oQk4U0dAQHYX8HQ7 cSepqCom+eCyefDxdEGQ7fAjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+7xCGJql pqZjqG8qrTLGA5lvAUQwHwYDVR0jBBgwFoAUYkuW4dZl7Xjnjfr2wiAZEHPbZsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0MxMTJGNTVDRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWWt1VzRkWmw3WGpuamZyMndpQVpFSFBiWnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0MxMTJGNTVDRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hq bmpmcjJ3aUFaRUhQYlpzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8qBX1DYS0I6EhSCtTB4rzG5hAxlKQOKdrg6MSBnaetPY/Pe1tiM97S sQLlIo7Ueyfb8DN4ubSv/p+nPV3lyuIpaVwmJ+nsqj1rOp3/0xzxnMp9nMADtrSM y+CYq06RjKk3BI+4/izlQVYT2K2WL0v+Hzg4+CgHk2a713KLgIWKvGRbUjyWIXpQ Bb6XRQKjjpZVUHgX0nCnzOiqhB8d4mNFreWO2A6ApA+9Hou+RQukBH50Z9fJ0BqR 8YuQO8LUbXGfouX+n+ZTCraeR/wmsAMquW8MW1IbfCxGICPQFbZOMa9dVEOEixp4 ouWJsn8NRIP94e2/h7dk+gXFu+5AkbI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:39 2025 by rpki-client