$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: jYTiJWCS0z7BRlO2Ft7xffOjpaY17zohhSR3PNejT44= Subject key identifier: C4:18:BB:93:33:90:81:7D:7E:A7:39:F5:DE:52:36:7C:AD:26:DA:CD Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 017E Signing time: Fri 25 Apr 2025 02:51:26 +0000 Manifest this update: Fri 25 Apr 2025 02:51:25 +0000 Manifest next update: Fri 02 May 2025 02:51:25 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: k/FgAfuhKvOgV/YgfXeOZdcnMeTRF2fpRmzN+YcHYbA=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: zBXFPWfaswR6Z/aWy5q3A7gzOnqOgIOIPnKiNURo3D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Apr 25 02:51:25 2025 GMT Not After : May 2 02:51:25 2025 GMT Subject: CN=680af8ad-6aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:b6:5f:1c:fc:e5:9b:d6:e0:2c:28:7b:fc: 6b:43:15:6c:72:a7:f5:8c:8f:74:67:a3:2c:de:23: 8e:92:dd:74:d9:f6:e8:14:a9:3f:aa:cd:83:b8:08: 5f:85:d5:c0:38:98:10:4a:c8:ed:47:92:7e:5b:33: 1d:d1:84:4c:13:3f:13:4f:11:7d:8d:7d:a2:ee:ee: 78:3a:c4:ef:e2:67:5f:da:1e:f6:e6:a7:f9:79:33: 30:8b:ea:c4:7d:c2:2e:68:fb:1b:4f:14:8f:25:43: 57:02:67:6d:28:44:b5:51:d8:e3:53:8d:62:0e:a3: d6:15:ff:b1:a7:bd:1e:41:cc:60:e4:4a:31:21:a0: 45:80:99:29:eb:5d:ea:83:98:ff:66:66:62:70:08: cb:a7:3c:39:92:7d:a5:07:8d:39:4a:ff:a0:57:54: ac:7d:e0:c3:20:f3:e4:50:67:91:56:f4:20:7c:af: ac:6f:5c:4e:23:3f:91:71:ae:81:09:a3:96:4a:6c: ca:f7:7f:54:40:3f:68:10:5d:93:23:5b:a9:1f:1d: 4e:4c:2d:b6:79:27:0a:9b:c2:b3:d2:d5:00:29:0f: c5:99:fc:0c:af:e4:1d:00:26:fe:56:7e:12:99:40: a0:cc:16:3f:87:ca:01:0c:05:02:65:eb:89:c4:fd: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:18:BB:93:33:90:81:7D:7E:A7:39:F5:DE:52:36:7C:AD:26:DA:CD X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:97:df:1f:75:38:68:03:70:d3:74:72:bb:48:8b:d4:eb:ab: 7a:35:27:a7:66:f4:2c:ac:13:b1:b4:9a:df:61:3e:2a:47:ec: 0a:9f:fa:0c:b5:df:57:4a:aa:6b:b2:a8:53:cf:10:da:8e:a7: 8a:99:72:61:50:d6:9f:87:af:5e:f8:30:b9:c9:77:6f:bb:13: 8b:00:00:41:47:20:6b:e9:cb:cb:d4:31:f8:ad:bc:ed:db:16: 79:cd:8c:93:3f:bd:c8:5b:0c:24:fd:de:35:7b:e0:68:09:b8: d5:2e:c1:da:42:64:63:d1:70:2f:6d:96:8a:f7:f2:78:b0:85: 46:44:4a:7b:89:25:f8:b9:2a:1c:e0:94:78:67:ca:85:dc:ca: ba:bd:e3:94:1c:2e:7e:31:4b:e2:db:6b:e5:18:c2:7e:a3:64: 99:81:a1:b1:b0:be:a0:3c:97:67:54:39:7c:bf:bf:6a:2c:ad: 95:cd:cf:e9:5c:af:4b:ec:48:14:84:c7:8b:61:ae:b2:dd:51: 2c:4a:c8:77:77:64:cf:cc:96:86:aa:eb:62:c2:f5:10:b7:07: 60:02:f7:90:ff:41:b5:e1:d1:4d:2d:aa:99:a4:66:27:9c:2c: 8c:88:b8:da:be:fe:a8:79:18:ea:d1:01:2e:ac:ce:68:ec:a2: 7b:1d:4f:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwNDI1MDI1MTI1WhcNMjUwNTAyMDI1MTI1WjAYMRYwFAYD VQQDEw02ODBhZjhhZC02YWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsli2Xxz85ZvW4Cwoe/xrQxVscqf1jI90Z6Ms3iOOkt102fboFKk/qs2DuAhf hdXAOJgQSsjtR5J+WzMd0YRMEz8TTxF9jX2i7u54OsTv4mdf2h725qf5eTMwi+rE fcIuaPsbTxSPJUNXAmdtKES1UdjjU41iDqPWFf+xp70eQcxg5EoxIaBFgJkp613q g5j/ZmZicAjLpzw5kn2lB405Sv+gV1SsfeDDIPPkUGeRVvQgfK+sb1xOIz+Rca6B CaOWSmzK939UQD9oEF2TI1upHx1OTC22eScKm8Kz0tUAKQ/FmfwMr+QdACb+Vn4S mUCgzBY/h8oBDAUCZeuJxP0vqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQYu5Mz kIF9fqc59d5SNnytJtrNMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQl98fdThoA3DTdHK7SIvU66t6NSenZvQsrBOxtJrfYT4qR+wKn/oM td9XSqprsqhTzxDajqeKmXJhUNafh69e+DC5yXdvuxOLAABBRyBr6cvL1DH4rbzt 2xZ5zYyTP73IWwwk/d41e+BoCbjVLsHaQmRj0XAvbZaK9/J4sIVGREp7iSX4uSoc 4JR4Z8qF3Mq6veOUHC5+MUvi22vlGMJ+o2SZgaGxsL6gPJdnVDl8v79qLK2Vzc/p XK9L7EgUhMeLYa6y3VEsSsh3d2TPzJaGqutiwvUQtwdgAveQ/0G14dFNLaqZpGYn nCyMiLjavv6oeRjq0QEurM5o7KJ7HU9O -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:39 2025 by rpki-client