$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: fMH5y51O44fjbHWp1Z3fRmEWz0taTgHmo6Qon+2Miw0= Subject key identifier: C1:C6:DF:77:CC:F7:FF:94:BA:3E:2C:BB:51:7A:E5:39:45:88:55:AD Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:12:45 +0000 Manifest this update: Fri 25 Apr 2025 05:12:45 +0000 Manifest next update: Fri 02 May 2025 05:12:45 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: meTYAqwSTPsGfG6Nw3yuFGLMWXofvuukZj+aaB5i7nY=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: Etmj0xt/W0SmV0Orr2NUt8hTe4pIwfnUtLKYwnR9+RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Apr 25 05:12:45 2025 GMT Not After : May 2 05:12:45 2025 GMT Subject: CN=680b19cd-4455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:c6:8c:f4:4a:17:74:60:f7:75:2c:58:96: d9:53:83:9c:27:fe:53:75:bd:37:0c:1e:83:3c:33: d0:2b:f1:63:1e:a5:0f:cb:31:e9:03:6b:5c:ef:ec: 29:c8:4f:65:53:f8:58:de:f2:76:24:88:14:68:13: 54:0e:46:3b:81:81:04:4b:74:10:19:4f:fd:a7:02: 6c:64:15:cf:04:4e:3f:9b:97:5f:ed:0b:1b:de:2e: 21:42:ae:d8:66:e0:d2:01:0a:e1:0f:17:2c:1d:ae: 85:ab:49:75:dd:49:76:73:4c:33:15:75:e7:86:e1: 01:b2:80:8c:45:10:c9:b7:30:af:96:18:e9:19:ca: 35:3e:c6:38:15:96:fe:30:2e:50:8e:a9:12:fd:93: 0e:b7:9f:36:b9:4e:0e:07:bd:35:8e:0b:f6:a9:b4: 08:2a:06:04:09:a8:c3:e0:f8:2c:7e:d8:8d:11:51: fd:16:de:b5:d8:01:5c:a8:7c:0a:19:38:0c:55:f1: a8:f1:41:f9:60:82:fc:7f:2b:15:5a:fa:a0:37:68: 37:ef:8a:9a:b3:59:89:f5:49:39:5b:c2:4d:90:b0: 12:e1:bb:67:40:be:c9:98:34:62:54:11:bc:9d:09: 89:5d:de:cd:90:d9:42:4a:0b:3c:ce:8b:72:6d:f9: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C6:DF:77:CC:F7:FF:94:BA:3E:2C:BB:51:7A:E5:39:45:88:55:AD X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:12:cd:62:8f:4b:29:5b:db:8d:4d:9a:d4:22:85:d1:4f:29: 60:28:f0:5c:4f:35:96:7a:6c:c9:33:8f:b3:19:ea:2a:d8:e5: 27:9b:65:45:52:2a:ea:62:20:8f:1c:e9:f1:c3:5f:22:26:fe: 1a:39:08:29:e9:72:5c:d7:60:0a:98:21:94:af:ed:24:af:bd: 62:ec:d9:82:a7:e9:c3:33:25:f5:ad:38:69:cf:cc:b5:42:14: ac:91:41:77:af:ce:45:55:eb:4e:19:76:be:ee:cd:06:a2:f9: c5:3d:88:54:c2:f1:7e:44:a7:5e:e2:b3:59:e4:5b:4f:ca:a6: d4:f8:b4:f1:c0:52:3e:9a:c9:8a:b8:89:18:34:46:0f:82:ae: fb:a5:83:68:c9:42:a6:3b:69:57:10:94:de:db:fe:20:87:f3: 9c:fc:1e:51:5c:84:55:e8:2e:66:87:86:2e:33:c2:f1:2d:d1: c2:4f:ff:cc:ee:24:92:47:55:4d:0e:a1:23:8c:30:e8:22:b2: 95:0f:a0:b5:5b:ec:51:f1:6e:b0:06:95:83:ed:9c:aa:c7:ef: 92:52:6b:91:d6:4a:d9:87:c2:58:55:d2:b3:77:9d:c6:bf:3a: 4c:ae:d7:fc:0b:1c:33:61:2d:f7:98:7d:72:63:4c:91:5d:c9: e2:cb:20:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUwNDI1MDUxMjQ1WhcNMjUwNTAyMDUxMjQ1WjAYMRYwFAYD VQQDEw02ODBiMTljZC00NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsDGjPRKF3Rg93UsWJbZU4OcJ/5Tdb03DB6DPDPQK/FjHqUPyzHpA2tc7+wp yE9lU/hY3vJ2JIgUaBNUDkY7gYEES3QQGU/9pwJsZBXPBE4/m5df7Qsb3i4hQq7Y ZuDSAQrhDxcsHa6Fq0l13Ul2c0wzFXXnhuEBsoCMRRDJtzCvlhjpGco1PsY4FZb+ MC5QjqkS/ZMOt582uU4OB701jgv2qbQIKgYECajD4PgsftiNEVH9Ft612AFcqHwK GTgMVfGo8UH5YIL8fysVWvqgN2g374qas1mJ9Uk5W8JNkLAS4btnQL7JmDRiVBG8 nQmJXd7NkNlCSgs8zotybfmdeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHG33fM 9/+Uuj4su1F65TlFiFWtMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGEs1ij0spW9uNTZrUIoXRTylgKPBcTzWWemzJM4+zGeoq2OUnm2VF UirqYiCPHOnxw18iJv4aOQgp6XJc12AKmCGUr+0kr71i7NmCp+nDMyX1rThpz8y1 QhSskUF3r85FVetOGXa+7s0GovnFPYhUwvF+RKde4rNZ5FtPyqbU+LTxwFI+msmK uIkYNEYPgq77pYNoyUKmO2lXEJTe2/4gh/Oc/B5RXIRV6C5mh4YuM8LxLdHCT//M 7iSSR1VNDqEjjDDoIrKVD6C1W+xR8W6wBpWD7Zyqx++SUmuR1krZh8JYVdKzd53G vzpMrtf8CxwzYS33mH1yY0yRXcniyyAQ -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:11 2025 by rpki-client