$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json) Hash identifier: GfXmuxi3GUh6UhmXb1zy9QT2YqxgMVNCzkSzc5jYLLU= Subject key identifier: 14:27:EE:EC:D5:E7:83:30:14:78:8B:CF:55:3F:47:BB:9C:BF:93:81 Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft Manifest number: 063A Signing time: Thu 24 Apr 2025 22:24:00 +0000 Manifest this update: Thu 24 Apr 2025 22:23:59 +0000 Manifest next update: Thu 01 May 2025 22:23:59 +0000 Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: eB+7l+14mQOfPfRp6FBXd9iIXjBlzTAannK8/2WLwls=) 2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: 1AEXU+7Y4PfWz8jQxA5HlFwuXkljqopTv6bNdtPTBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Validity Not Before: Apr 24 22:23:59 2025 GMT Not After : May 1 22:23:59 2025 GMT Subject: CN=680aba00-5d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:67:81:93:23:8a:8b:9d:af:0d:be:c6:78: f2:31:2c:54:a7:41:80:92:91:29:84:12:4e:a5:37: f8:dd:44:42:ea:92:c0:26:c9:07:f2:60:38:c6:75: 00:84:58:65:10:a2:17:c8:3c:5f:6a:df:0c:da:06: 67:8a:f5:f1:da:47:02:31:a6:93:fd:7f:e1:eb:c3: 6f:da:a4:87:37:69:84:bf:6b:14:9c:3a:05:b3:19: 59:7f:a1:31:98:1c:49:b9:11:e1:c1:48:b6:a3:15: 4a:5e:40:72:71:52:74:f9:9e:57:e2:4c:82:53:63: c6:b4:cb:00:9f:3b:49:6f:40:49:51:0e:fe:fb:9a: 27:00:b3:1f:01:57:e3:f2:d7:46:65:e6:0f:f0:e7: d1:d2:84:be:75:b5:02:6b:4e:bb:bc:32:78:90:5d: 82:74:f2:78:b7:5d:f4:80:69:86:00:fa:9d:f9:20: a8:8a:0a:1b:47:1f:91:7e:9f:75:d4:e6:ae:b1:c6: ab:22:d6:4a:85:b4:b4:89:96:40:4c:62:9f:22:db: e8:d3:cd:4c:90:b8:e1:c7:6a:57:b0:a0:04:69:25: d2:ef:b3:97:2d:b4:1c:3a:f8:f4:66:f6:42:49:d8: e7:a8:36:1b:4e:f9:90:a4:6c:ed:06:f1:a1:3d:0c: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:27:EE:EC:D5:E7:83:30:14:78:8B:CF:55:3F:47:BB:9C:BF:93:81 X509v3 Authority Key Identifier: keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ce:5d:18:fb:12:29:68:fa:af:cd:2b:5a:b2:ee:e7:36:b8: aa:06:0c:78:bf:5f:5e:4c:de:9f:46:74:7e:6e:6e:e9:83:ad: 30:72:89:db:eb:f2:8e:43:8f:4f:44:b6:0b:12:0f:40:cc:c1: 71:80:22:7c:9c:df:d6:1f:dc:1a:f4:49:09:69:7f:bc:41:aa: 59:7b:75:31:98:52:50:95:d1:86:82:54:80:56:26:6b:8a:cd: b3:12:b2:e6:17:34:24:1a:e2:9f:6b:6b:06:9d:78:11:fe:69: b5:9c:4e:14:1e:6c:bf:7e:03:b5:80:71:4f:95:e6:35:11:a3: 8f:4c:6f:1a:65:35:7a:90:ce:07:3d:29:8f:34:20:25:15:d5: 3d:fe:76:af:d0:44:3d:f8:1a:3f:02:fc:2a:dc:1d:07:16:6d: c9:c8:12:f0:4c:b5:cf:c7:f2:30:b1:b1:dd:6d:50:2c:43:59: 92:ea:e5:a3:52:c8:d3:3e:2e:99:3e:c8:61:cc:d1:48:ca:74: 97:bb:c4:cf:67:a0:d2:96:f0:b0:a4:8d:3b:5a:0b:a3:fe:fe: 25:c1:96:12:4a:a3:ff:32:fc:13:01:70:5e:a6:10:ca:ee:7a: cc:e1:cc:9c:63:07:19:48:41:18:df:18:2a:28:06:be:54:e6: 26:73:e0:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1 QzZFRkMzN0IwHhcNMjUwNDI0MjIyMzU5WhcNMjUwNTAxMjIyMzU5WjAYMRYwFAYD VQQDEw02ODBhYmEwMC01ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUxngZMjioudrw2+xnjyMSxUp0GAkpEphBJOpTf43URC6pLAJskH8mA4xnUA hFhlEKIXyDxfat8M2gZnivXx2kcCMaaT/X/h68Nv2qSHN2mEv2sUnDoFsxlZf6Ex mBxJuRHhwUi2oxVKXkBycVJ0+Z5X4kyCU2PGtMsAnztJb0BJUQ7++5onALMfAVfj 8tdGZeYP8OfR0oS+dbUCa067vDJ4kF2CdPJ4t130gGmGAPqd+SCoigobRx+Rfp91 1OauscarItZKhbS0iZZATGKfItvo081MkLjhx2pXsKAEaSXS77OXLbQcOvj0ZvZC SdjnqDYbTvmQpGztBvGhPQwnuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQn7uzV 54MwFHiLz1U/R7ucv5OBMB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjzl0Y+xIpaPqvzStasu7nNriqBgx4v19eTN6fRnR+bm7pg60wconb 6/KOQ49PRLYLEg9AzMFxgCJ8nN/WH9wa9EkJaX+8QapZe3UxmFJQldGGglSAViZr is2zErLmFzQkGuKfa2sGnXgR/mm1nE4UHmy/fgO1gHFPleY1EaOPTG8aZTV6kM4H PSmPNCAlFdU9/nav0EQ9+Bo/Avwq3B0HFm3JyBLwTLXPx/IwsbHdbVAsQ1mS6uWj UsjTPi6ZPshhzNFIynSXu8TPZ6DSlvCwpI07Wguj/v4lwZYSSqP/MvwTAXBephDK 7nrM4cycYwcZSEEY3xgqKAa+VOYmc+Be -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:43 2025 by rpki-client