$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: 4v1d5sveTtcefFPq/i0ziLrFqPH7+kfeqeA+UR8eYdM= Subject key identifier: 9A:35:C2:80:29:3F:7E:A5:A9:44:93:96:39:FC:AE:44:0B:E6:6A:65 Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: 9D Signing time: Fri 25 Apr 2025 05:17:08 +0000 Manifest this update: Fri 25 Apr 2025 05:17:07 +0000 Manifest next update: Fri 02 May 2025 05:17:07 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: gnvhClC031C2HzEvVztwB7gJK5upI1H+ywwEfkpK7dk=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Validity Not Before: Apr 25 05:17:07 2025 GMT Not After : May 2 05:17:07 2025 GMT Subject: CN=680b1ad3-c379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:b5:92:78:f1:68:b1:45:81:5f:8e:05:37: 3e:2e:a0:fc:e6:ca:1f:7c:59:4c:4a:87:f7:19:69: fa:35:7a:05:55:4c:12:aa:e5:03:95:f3:e5:1e:c1: c8:9a:a7:92:ef:99:2f:c1:7d:3c:54:d0:05:9a:90: 71:41:be:04:45:95:9b:1d:18:98:33:b6:17:ed:3f: df:61:8b:a0:a0:2d:d9:75:b9:82:be:86:5a:90:bc: d3:5f:39:a0:76:a0:61:55:74:af:d5:b5:10:28:10: b4:58:d0:0e:57:ee:18:74:d9:2e:02:4b:fd:48:f7: 70:de:1f:89:43:e2:bd:99:b0:c9:db:8f:2f:39:20: 40:84:8a:68:8a:7c:5b:e6:62:0d:d6:49:4e:ad:11: 70:9c:f9:a5:44:a6:09:53:f3:1e:60:47:a1:db:be: 74:1a:df:3d:a1:2b:7f:d0:fc:de:69:99:09:03:c7: 00:79:82:12:96:6b:be:57:56:16:35:8a:5f:c7:a6: 70:9b:32:6d:d9:31:c0:62:52:9b:7f:d6:e6:40:13: 42:43:b3:1e:03:80:a4:cb:a3:1f:5c:bc:97:40:a5: f6:b6:66:fc:fc:b8:e7:a7:3d:ef:9b:e1:ea:39:0a: 80:7c:14:d6:37:a4:e2:60:bd:bd:b1:cb:8e:7b:49: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:C2:80:29:3F:7E:A5:A9:44:93:96:39:FC:AE:44:0B:E6:6A:65 X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6a:a2:d1:ca:02:db:c6:da:e1:84:dc:e8:92:d5:10:74:10: 36:43:0c:58:2a:76:f0:09:a0:c9:f5:30:d2:ce:c6:13:71:ba: 29:af:7d:ed:bc:2f:41:6f:67:d0:da:0d:61:2c:6b:32:3f:cc: f2:39:49:f0:ff:0c:a8:9e:81:6d:d2:c2:b9:04:63:5e:17:c8: 96:dc:ec:0e:db:f1:50:6b:41:a0:6c:6b:e0:2b:b6:89:70:42: 18:be:11:6c:f5:3f:d8:b3:01:ab:9d:5b:51:c5:2f:7d:20:58: b7:de:13:d9:f5:1a:d9:46:98:cc:a9:77:32:66:27:36:5c:88: 81:54:a1:0e:b4:ff:ee:37:40:47:5f:d7:af:4c:7a:60:4d:82: c6:0b:98:51:b9:06:07:1c:a1:7c:2d:e1:d3:82:e3:b4:a2:58: 6f:28:8a:5a:2a:8a:f0:25:f2:2c:66:1c:f6:e7:56:15:91:32: 4b:9b:3a:3d:e7:e7:40:2b:15:4f:29:e4:33:5c:b1:0a:3c:f4: 69:74:a1:6c:a0:a9:9f:22:4a:77:9a:67:3e:f0:53:f0:b6:d6: 57:4e:e6:89:68:b6:61:a6:31:47:a7:bf:33:02:86:96:0d:9d: 8c:53:06:ca:32:1a:91:91:41:7b:f9:10:72:23:9b:75:25:2c: 95:3c:8f:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjUwNDI1MDUxNzA3WhcNMjUwNTAyMDUxNzA3WjAYMRYwFAYD VQQDEw02ODBiMWFkMy1jMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4+1knjxaLFFgV+OBTc+LqD85soffFlMSof3GWn6NXoFVUwSquUDlfPlHsHI mqeS75kvwX08VNAFmpBxQb4ERZWbHRiYM7YX7T/fYYugoC3ZdbmCvoZakLzTXzmg dqBhVXSv1bUQKBC0WNAOV+4YdNkuAkv9SPdw3h+JQ+K9mbDJ248vOSBAhIpoinxb 5mIN1klOrRFwnPmlRKYJU/MeYEeh2750Gt89oSt/0PzeaZkJA8cAeYISlmu+V1YW NYpfx6ZwmzJt2THAYlKbf9bmQBNCQ7MeA4Cky6MfXLyXQKX2tmb8/Ljnpz3vm+Hq OQqAfBTWN6TiYL29scuOe0n7rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo1woAp P36lqUSTljn8rkQL5mplMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzaqLRygLbxtrhhNzoktUQdBA2QwxYKnbwCaDJ9TDSzsYTcbopr33t vC9Bb2fQ2g1hLGsyP8zyOUnw/wyonoFt0sK5BGNeF8iW3OwO2/FQa0GgbGvgK7aJ cEIYvhFs9T/YswGrnVtRxS99IFi33hPZ9RrZRpjMqXcyZic2XIiBVKEOtP/uN0BH X9evTHpgTYLGC5hRuQYHHKF8LeHTguO0olhvKIpaKorwJfIsZhz251YVkTJLmzo9 5+dAKxVPKeQzXLEKPPRpdKFsoKmfIkp3mmc+8FPwttZXTuaJaLZhpjFHp78zAoaW DZ2MUwbKMhqRkUF7+RByI5t1JSyVPI+k -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:47 2025 by rpki-client