$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: 5S/P4kVouKaKsFFBLJdXMQyfL35R2iYhD4t5mZg7vUY= Subject key identifier: 0C:4C:14:1C:93:5A:BB:B1:0B:3B:D0:3F:EB:45:F0:C9:A6:76:4B:C7 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 0747 Signing time: Thu 24 Apr 2025 21:28:50 +0000 Manifest this update: Thu 24 Apr 2025 21:28:50 +0000 Manifest next update: Thu 01 May 2025 21:28:50 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: fKKirR4YXgW1Ktjvi31Ldsbpnt0KK0QluqUuKs/50AE=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Apr 24 21:28:50 2025 GMT Not After : May 1 21:28:50 2025 GMT Subject: CN=680aad12-ea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:02:cb:ff:8f:27:a8:78:88:14:c8:53:d5: 21:0d:61:b8:98:bd:04:a8:f6:cd:c4:17:e8:a5:76: c7:ba:05:d0:d0:dd:b4:82:2a:92:60:a0:22:ea:24: cb:a7:13:41:a1:4f:37:a7:00:5b:f8:69:1c:0f:96: 60:a3:a7:8e:9f:65:cb:ef:7b:1b:0f:77:e0:d1:5b: f9:f8:74:56:1b:6f:28:7f:0f:ab:74:30:f7:d6:ec: 9c:7a:9f:8e:20:16:4f:f4:b2:5a:0c:04:f9:1d:ab: 70:e4:6a:66:69:17:a5:1f:7f:57:35:e3:74:a5:7b: ed:41:79:e2:52:2c:cb:64:4c:94:21:b8:09:69:12: 10:96:92:1e:a5:6e:7b:8a:fa:da:86:87:f2:f8:e0: 0b:90:82:66:07:50:6d:df:ca:ca:37:71:3c:bc:ed: 6f:42:41:09:89:a2:25:92:35:11:b5:eb:31:d0:e8: 15:71:c8:48:57:9e:d0:40:29:e2:ad:68:00:95:e0: 9c:e2:85:db:f4:49:bd:ec:0d:a4:7c:37:d1:6c:9b: b6:78:08:0c:b7:5d:6c:d4:d4:f4:bd:29:39:35:2e: d0:f6:7d:2d:ae:a7:6a:ba:84:fa:6f:82:13:07:94: f7:db:ca:07:af:d9:3e:8f:12:a1:00:23:5f:e3:bd: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:14:1C:93:5A:BB:B1:0B:3B:D0:3F:EB:45:F0:C9:A6:76:4B:C7 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f8:76:9a:b5:4d:a9:45:8f:4c:1d:83:20:21:12:ab:56:76: da:63:2d:70:1c:b0:52:7d:4b:5b:2f:f4:93:8c:00:65:7e:1f: af:a6:0f:39:d6:4b:37:21:e8:ad:93:0f:a8:0d:36:63:9c:5e: 6f:06:4d:fe:99:8c:80:fc:26:c5:ee:40:63:c7:0e:ba:e7:da: 45:4c:9d:69:f5:a2:bf:d9:46:5c:24:39:a2:06:ed:76:96:28: 84:24:46:b7:a4:3f:77:b8:78:cb:46:b7:a0:97:0c:1d:36:e4: 1f:f7:0b:97:1c:b8:7e:c9:f4:89:fc:64:f5:b0:ea:f9:44:b4: 73:cb:c0:34:7d:6b:07:9e:4d:45:21:5a:d2:49:37:bb:50:37: dd:77:9e:20:ef:27:e2:ea:ff:70:e4:1f:1b:b0:cb:b8:fb:a2: 42:6c:2f:68:38:5c:f7:44:74:92:be:50:23:d9:b3:2a:36:29: 38:cf:f6:a7:56:0a:2c:ec:7c:6f:5c:30:5d:29:9f:64:75:ea: 24:8a:ac:0d:a8:c2:12:d5:4c:43:b4:e3:75:30:13:d6:b2:2d: a4:f5:ed:39:a8:e3:58:d6:d5:ad:62:f3:9e:14:d7:ca:e6:64: 76:d0:44:ed:e9:79:31:bc:34:50:74:15:cc:52:f8:ee:70:a6: e3:be:e0:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUwNDI0MjEyODUwWhcNMjUwNTAxMjEyODUwWjAYMRYwFAYD VQQDEw02ODBhYWQxMi1lYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkkCy/+PJ6h4iBTIU9UhDWG4mL0EqPbNxBfopXbHugXQ0N20giqSYKAi6iTL pxNBoU83pwBb+GkcD5Zgo6eOn2XL73sbD3fg0Vv5+HRWG28ofw+rdDD31uycep+O IBZP9LJaDAT5Hatw5GpmaRelH39XNeN0pXvtQXniUizLZEyUIbgJaRIQlpIepW57 ivrahofy+OALkIJmB1Bt38rKN3E8vO1vQkEJiaIlkjURtesx0OgVcchIV57QQCni rWgAleCc4oXb9Em97A2kfDfRbJu2eAgMt11s1NT0vSk5NS7Q9n0trqdquoT6b4IT B5T328oHr9k+jxKhACNf471OLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxMFByT WruxCzvQP+tF8MmmdkvHMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw+HaatU2pRY9MHYMgIRKrVnbaYy1wHLBSfUtbL/STjABlfh+vpg85 1ks3Ieitkw+oDTZjnF5vBk3+mYyA/CbF7kBjxw6659pFTJ1p9aK/2UZcJDmiBu12 liiEJEa3pD93uHjLRreglwwdNuQf9wuXHLh+yfSJ/GT1sOr5RLRzy8A0fWsHnk1F IVrSSTe7UDfdd54g7yfi6v9w5B8bsMu4+6JCbC9oOFz3RHSSvlAj2bMqNik4z/an Vgos7HxvXDBdKZ9kdeokiqwNqMIS1UxDtON1MBPWsi2k9e05qONY1tWtYvOeFNfK 5mR20ETt6XkxvDRQdBXMUvjucKbjvuAm -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:54 2025 by rpki-client