$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: jBnBCbp1CF4R25Rvt27jP4wBKy1JqyBpSZMuCs0Td1w= Subject key identifier: 76:42:8F:1A:2B:BD:E1:34:A0:F4:EF:56:B8:11:9C:F5:BE:88:41:BF Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 067A Signing time: Thu 24 Apr 2025 22:07:35 +0000 Manifest this update: Thu 24 Apr 2025 22:07:34 +0000 Manifest next update: Thu 01 May 2025 22:07:34 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: JzZW9FObha7nkPXVxJ1bLivag2Y1f+g8ELv8aNvkxF8=) 2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: Apr 24 22:07:34 2025 GMT Not After : May 1 22:07:34 2025 GMT Subject: CN=680ab626-e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:39:89:8e:b9:c8:d4:81:54:43:ba:36:ad: 7c:fd:c4:21:be:d8:31:5e:58:a2:4f:36:21:41:47: 57:32:77:92:0f:04:75:b5:ae:e9:7c:f0:db:7c:53: 9c:02:df:94:f4:98:3c:af:f1:d5:d6:a2:09:44:4a: 22:d9:2b:26:09:73:f0:09:55:db:cd:1b:be:4d:35: 68:fa:41:f1:32:c0:c7:65:93:92:4f:1f:74:9f:93: 73:57:55:77:56:09:96:a4:52:62:42:6d:12:3a:88: 6e:3a:c7:d2:d7:d6:96:fa:fc:a8:18:12:d0:d9:05: b2:7f:e2:8c:78:21:3d:a7:5f:53:1a:27:22:e9:41: bf:48:34:35:07:9a:6c:3d:4b:db:44:14:a2:d5:a5: b3:b2:02:00:10:b1:73:20:60:17:11:d1:a3:22:fe: 14:48:a4:27:27:21:50:0a:ec:13:7a:5d:73:7d:92: 85:db:f6:3f:76:d8:d6:52:a2:14:2b:8e:43:8f:bd: 5c:85:83:d9:eb:da:72:55:6f:4b:72:be:aa:c6:6a: 4f:ec:1b:8c:30:03:de:c4:32:cd:55:bf:4e:85:d2: 7a:0e:e0:e3:20:c8:6d:8a:e0:3f:a6:ce:d2:c6:e1: 79:78:dc:91:49:fd:36:40:5c:91:43:8f:01:65:cd: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:8F:1A:2B:BD:E1:34:A0:F4:EF:56:B8:11:9C:F5:BE:88:41:BF X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:56:03:c9:45:30:2c:64:4c:bd:44:c8:88:79:69:1b:74: 72:f8:23:d2:20:1d:1d:c5:84:97:0f:29:27:7f:2f:da:66:77: f6:93:20:c1:a6:cc:78:8c:56:9e:73:b2:35:e1:3c:39:90:56: 00:01:a7:54:af:a1:77:28:b8:fa:4a:1c:94:4d:93:03:7a:89: f2:c2:d5:1b:83:f8:9f:f8:d9:5a:d1:f9:76:f4:07:b8:b8:e6: b3:01:89:e5:d7:ed:e2:51:c6:61:9b:4f:5c:16:4e:92:4c:ef: ab:f1:fa:6e:3f:e9:89:41:20:58:f5:ca:a2:ae:ef:72:28:22: 2d:6b:e8:e7:66:2d:fc:c4:cb:4c:4b:2b:6d:d0:3a:06:a0:66: 7a:5a:10:8a:c9:b8:6d:f1:3c:99:ef:d8:1c:48:38:2e:4f:c8: 8d:e1:64:5d:c1:20:25:84:72:12:c2:3f:dd:2b:15:3b:d0:0e: ea:d1:e5:bd:9d:c7:60:7f:69:ad:f5:1b:65:7b:0f:88:83:01: c7:ce:d7:4c:a7:3b:0a:69:58:bf:0c:2c:e4:f1:78:99:c3:7f: c6:3d:a0:d3:5a:90:48:04:54:83:ef:b4:00:ee:47:f1:53:93: 86:5a:f6:88:a9:20:76:83:2d:a3:83:73:8d:39:fa:4d:53:66: f6:27:3a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjUwNDI0MjIwNzM0WhcNMjUwNTAxMjIwNzM0WjAYMRYwFAYD VQQDEw02ODBhYjYyNi1lM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eM5iY65yNSBVEO6Nq18/cQhvtgxXliiTzYhQUdXMneSDwR1ta7pfPDbfFOc At+U9Jg8r/HV1qIJREoi2SsmCXPwCVXbzRu+TTVo+kHxMsDHZZOSTx90n5NzV1V3 VgmWpFJiQm0SOohuOsfS19aW+vyoGBLQ2QWyf+KMeCE9p19TGici6UG/SDQ1B5ps PUvbRBSi1aWzsgIAELFzIGAXEdGjIv4USKQnJyFQCuwTel1zfZKF2/Y/dtjWUqIU K45Dj71chYPZ69pyVW9Lcr6qxmpP7BuMMAPexDLNVb9OhdJ6DuDjIMhtiuA/ps7S xuF5eNyRSf02QFyRQ48BZc2ozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZCjxor veE0oPTvVrgRnPW+iEG/MB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpEVYDyUUwLGRMvUTIiHlpG3Ry+CPSIB0dxYSXDyknfy/aZnf2kyDB psx4jFaec7I14Tw5kFYAAadUr6F3KLj6ShyUTZMDeonywtUbg/if+Nla0fl29Ae4 uOazAYnl1+3iUcZhm09cFk6STO+r8fpuP+mJQSBY9cqiru9yKCIta+jnZi38xMtM Sytt0DoGoGZ6WhCKybht8TyZ79gcSDguT8iN4WRdwSAlhHISwj/dKxU70A7q0eW9 ncdgf2mt9Rtlew+IgwHHztdMpzsKaVi/DCzk8XiZw3/GPaDTWpBIBFSD77QA7kfx U5OGWvaIqSB2gy2jg3ONOfpNU2b2Jzrt -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:56 2025 by rpki-client