$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: W5wsDXaf6/fRIudkmQ1kHEqO/hbOz1UcSxuf7dlUyC8= Subject key identifier: 00:DA:BB:50:71:EE:69:CE:60:DD:87:68:9D:F8:04:96:82:59:CC:4B Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 015E Signing time: Fri 25 Apr 2025 03:10:46 +0000 Manifest this update: Fri 25 Apr 2025 03:10:46 +0000 Manifest next update: Fri 02 May 2025 03:10:46 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: JdIxHko3PhMlbgWfRWeJNn6Md2yckyeAakrnIkDf5ww=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Apr 25 03:10:46 2025 GMT Not After : May 2 03:10:46 2025 GMT Subject: CN=680afd36-28d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:60:56:aa:7c:e5:f2:70:cf:b5:db:75:02: a1:b7:b9:0c:21:1b:c9:53:18:66:29:20:6c:03:a1: 69:35:48:f4:bd:2f:e3:61:f9:8e:26:dc:73:2b:cd: 55:16:fe:55:f7:f4:d7:e3:c4:98:d7:c5:24:4d:eb: 74:fc:c3:81:71:42:6f:4b:f1:89:f2:e2:b8:57:5f: 68:b7:cc:b3:48:bc:8e:73:6d:f2:0e:23:ab:78:e0: cb:86:99:3d:a9:d6:29:f9:83:2f:4f:ef:56:10:82: 3e:e5:d1:a1:d7:72:c0:b1:15:ae:27:70:cc:14:58: 06:2e:1a:27:7e:fc:f8:62:43:b8:94:c9:07:9d:20: c0:ff:06:64:ed:87:f8:72:a2:1b:e6:9f:df:3f:ab: ce:5d:a3:45:63:73:4e:30:6a:33:38:a5:ab:5b:09: a2:81:c7:97:20:a0:16:15:7f:00:7f:e3:1f:95:24: 24:ff:05:d4:51:08:55:17:51:f0:da:05:6e:fd:1e: 39:58:05:c6:1c:bb:7f:95:86:59:36:98:9b:e7:fd: 66:53:bc:ae:c7:92:6c:4c:c1:60:e0:ea:01:d1:3b: fe:d8:43:f5:10:71:fe:be:4a:d3:89:2c:6e:68:26: 80:14:46:b7:0f:78:96:ea:71:0d:49:f4:75:16:b5: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:BB:50:71:EE:69:CE:60:DD:87:68:9D:F8:04:96:82:59:CC:4B X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:52:e0:a8:e6:b2:fe:2f:f1:5e:93:bb:bd:56:6e:06:54:4d: ed:9a:99:7c:5d:f4:03:04:42:a9:d3:71:c0:69:7d:1d:7c:71: 36:c5:8c:70:25:e5:de:c3:4f:49:c8:0a:f1:04:09:62:75:16: 80:f3:fd:3a:29:c9:7b:c6:3d:a3:81:85:c1:e5:4e:93:53:ac: 2e:99:00:bd:5e:3c:c2:7a:7f:b9:2e:f3:9e:e4:c2:f5:c8:be: 03:89:53:6a:88:38:68:b7:7a:58:24:2d:96:6e:d5:40:b1:3d: 06:45:db:27:e5:18:a7:4a:30:04:c2:38:e5:f0:cb:c2:0b:06: d0:c7:06:e7:04:f5:9a:85:97:8c:f9:ff:ab:f5:d6:f1:df:f3: db:e5:3f:46:9b:b8:7e:eb:ee:c3:38:e7:88:a8:da:57:e9:08: 0d:bb:6c:df:86:e6:93:4d:c2:3a:f5:c1:69:ce:6c:57:43:ef: f3:bf:26:d9:11:7d:7c:42:6a:97:18:ce:96:91:51:ff:ee:53: 3e:0a:04:93:67:84:40:78:6b:f8:96:df:be:ff:a0:3a:4f:f1: 70:03:cf:d3:8a:5c:53:79:b7:3b:60:89:e5:47:f9:4f:e8:b0: b9:49:9d:b0:27:62:bc:18:84:f5:0c:ce:4b:4b:1f:fd:4d:fd: 6f:8d:ec:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwNDI1MDMxMDQ2WhcNMjUwNTAyMDMxMDQ2WjAYMRYwFAYD VQQDEw02ODBhZmQzNi0yOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKNgVqp85fJwz7XbdQKht7kMIRvJUxhmKSBsA6FpNUj0vS/jYfmOJtxzK81V Fv5V9/TX48SY18UkTet0/MOBcUJvS/GJ8uK4V19ot8yzSLyOc23yDiOreODLhpk9 qdYp+YMvT+9WEII+5dGh13LAsRWuJ3DMFFgGLhonfvz4YkO4lMkHnSDA/wZk7Yf4 cqIb5p/fP6vOXaNFY3NOMGozOKWrWwmigceXIKAWFX8Af+MflSQk/wXUUQhVF1Hw 2gVu/R45WAXGHLt/lYZZNpib5/1mU7yux5JsTMFg4OoB0Tv+2EP1EHH+vkrTiSxu aCaAFEa3D3iW6nENSfR1FrUw/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADau1Bx 7mnOYN2HaJ34BJaCWcxLMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVUuCo5rL+L/Fek7u9Vm4GVE3tmpl8XfQDBEKp03HAaX0dfHE2xYxw JeXew09JyArxBAlidRaA8/06Kcl7xj2jgYXB5U6TU6wumQC9XjzCen+5LvOe5ML1 yL4DiVNqiDhot3pYJC2WbtVAsT0GRdsn5RinSjAEwjjl8MvCCwbQxwbnBPWahZeM +f+r9dbx3/Pb5T9Gm7h+6+7DOOeIqNpX6QgNu2zfhuaTTcI69cFpzmxXQ+/zvybZ EX18QmqXGM6WkVH/7lM+CgSTZ4RAeGv4lt++/6A6T/FwA8/TilxTebc7YInlR/lP 6LC5SZ2wJ2K8GIT1DM5LSx/9Tf1vjey6 -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:55 2025 by rpki-client