$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: vJjVuSW2ZN6XG++9VE8hCdhpu7fZgyvpuz6nyG0SH+4= Subject key identifier: 3C:1E:CC:F0:59:F8:9C:6B:6F:4E:EC:D3:8F:68:75:FE:CA:34:1D:AD Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 0162 Signing time: Fri 25 Apr 2025 03:06:24 +0000 Manifest this update: Fri 25 Apr 2025 03:06:23 +0000 Manifest next update: Fri 02 May 2025 03:06:23 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: u5rISniiPs/W25/SdwFQdKsLeTHytCUll9acyscqRTs=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: dHhZT58EPueclWY/wjCtwq28vLwEg1BiZyhs8/2Uyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: Apr 25 03:06:23 2025 GMT Not After : May 2 03:06:23 2025 GMT Subject: CN=680afc2f-c65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:cd:c3:0a:01:f2:d1:c3:ce:74:7a:aa:14: e9:03:1a:9c:00:46:57:02:1a:0b:1b:19:63:a7:4b: dd:cc:c4:69:ca:57:89:fa:85:ed:4b:9c:5a:f5:5e: 10:3d:29:4f:f1:b0:a7:7b:a6:95:16:f1:ed:25:b8: be:5a:fa:0b:dc:eb:c2:23:41:d5:12:0b:9d:b4:e5: 79:89:0f:c5:07:c6:54:99:0b:89:60:15:fb:b8:bb: d4:b7:be:9a:93:45:29:c0:a3:1e:b9:4f:ea:5e:72: a4:2e:ea:1f:f0:4a:c3:eb:dc:e9:1b:87:b3:b7:48: c0:a2:14:e7:86:ae:02:8d:09:8e:ab:05:af:04:c2: b6:4e:96:8a:5c:0a:6f:a1:2c:67:34:d5:1f:83:8d: 6a:4a:34:26:dd:d0:e2:06:c1:ff:95:21:a0:99:0f: 4c:3a:68:fc:38:aa:f6:96:3c:dc:96:3b:7c:78:27: 24:6a:29:d6:23:e1:54:ff:0b:22:1b:c6:6d:9a:d4: 0f:b5:77:e9:01:52:52:42:17:1e:5d:84:08:91:7b: fa:c2:e5:1b:ad:94:1e:40:2c:4a:39:c8:dd:d6:5f: 41:36:19:4d:24:5d:2c:5f:de:63:0d:b9:59:b8:cf: d9:29:96:23:d3:c5:40:c1:93:91:7d:04:da:92:ca: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1E:CC:F0:59:F8:9C:6B:6F:4E:EC:D3:8F:68:75:FE:CA:34:1D:AD X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:16:2d:a9:6f:8a:e1:09:02:ec:18:aa:da:a9:14:a2:e6:b9: b4:c7:cb:d6:70:e4:5a:87:17:d8:6c:32:bb:d4:e9:b9:9d:f1: 78:2b:49:42:cf:7c:5d:19:c2:14:4d:3e:5b:20:49:2c:0b:4b: 89:68:72:15:eb:94:b6:ba:66:fc:db:c5:51:fe:7d:1f:9b:05: 8c:44:0f:f1:ef:d5:f6:d1:5e:6e:ef:47:fd:18:06:68:d1:58: 4c:15:4d:ef:17:5c:36:18:8e:aa:6b:5c:95:ee:35:40:a0:81: 78:59:99:f6:bd:bb:55:fc:ec:16:18:6b:f9:3f:36:cd:3b:bb: d1:44:d2:19:e0:00:8c:19:e0:32:6f:51:e3:aa:be:32:ab:05: 5d:4a:26:3d:22:de:c5:d0:c7:64:94:4d:1d:ad:76:7d:3d:86: 34:48:2c:12:5c:26:b2:7c:9c:12:d3:d5:a5:57:42:d1:f1:5a: 7e:ae:91:1c:8c:39:d4:e8:06:de:31:98:a6:1e:89:54:b2:01: f2:79:f2:bb:84:e5:e6:a3:14:ea:dc:67:cb:94:42:ae:e2:cf: 10:dc:03:d5:5b:51:59:c4:13:d1:d6:9d:96:0b:9d:e7:52:00: 35:d3:54:df:57:9b:c2:82:15:fa:c9:66:76:04:61:57:66:33: 8a:85:0c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjUwNDI1MDMwNjIzWhcNMjUwNTAyMDMwNjIzWjAYMRYwFAYD VQQDEw02ODBhZmMyZi1jNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyzNwwoB8tHDznR6qhTpAxqcAEZXAhoLGxljp0vdzMRpyleJ+oXtS5xa9V4Q PSlP8bCne6aVFvHtJbi+WvoL3OvCI0HVEgudtOV5iQ/FB8ZUmQuJYBX7uLvUt76a k0UpwKMeuU/qXnKkLuof8ErD69zpG4ezt0jAohTnhq4CjQmOqwWvBMK2TpaKXApv oSxnNNUfg41qSjQm3dDiBsH/lSGgmQ9MOmj8OKr2ljzcljt8eCckainWI+FU/wsi G8ZtmtQPtXfpAVJSQhceXYQIkXv6wuUbrZQeQCxKOcjd1l9BNhlNJF0sX95jDblZ uM/ZKZYj08VAwZORfQTaksoiawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwezPBZ +Jxrb07s049odf7KNB2tMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFi2pb4rhCQLsGKraqRSi5rm0x8vWcORahxfYbDK71Om5nfF4K0lC z3xdGcIUTT5bIEksC0uJaHIV65S2umb828VR/n0fmwWMRA/x79X20V5u70f9GAZo 0VhMFU3vF1w2GI6qa1yV7jVAoIF4WZn2vbtV/OwWGGv5PzbNO7vRRNIZ4ACMGeAy b1Hjqr4yqwVdSiY9It7F0MdklE0drXZ9PYY0SCwSXCayfJwS09WlV0LR8Vp+rpEc jDnU6AbeMZimHolUsgHyefK7hOXmoxTq3GfLlEKu4s8Q3APVW1FZxBPR1p2WC53n UgA101TfV5vCghX6yWZ2BGFXZjOKhQyO -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:11 2025 by rpki-client