$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: nei2FRl+yq15rJU+1CkYOylrTMjo3olVZKyqe53KYoc= Subject key identifier: A9:3F:8F:8E:33:30:B8:4F:72:82:33:8D:C6:45:A9:7D:1E:9A:7D:7C Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 07A7 Signing time: Thu 24 Apr 2025 21:03:50 +0000 Manifest this update: Thu 24 Apr 2025 21:03:50 +0000 Manifest next update: Thu 01 May 2025 21:03:50 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: ns4dsRUAbws2sIzbmIlNNy/kABtbTcbJnvqfsSMzCEg=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Apr 24 21:03:50 2025 GMT Not After : May 1 21:03:50 2025 GMT Subject: CN=680aa736-bcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:ab:45:c4:68:7e:07:a1:5c:07:79:f6:0c: be:5e:19:e6:3c:75:16:47:67:bb:e0:73:e1:2d:81: d5:73:60:b3:db:80:63:d2:b9:2a:e0:21:94:d5:43: b4:f1:52:2f:9d:fc:f1:41:bb:45:87:0f:9a:fd:23: 5d:9e:68:b4:32:4d:af:95:77:96:7e:e3:25:31:97: 87:95:28:c7:79:85:4b:1a:6a:5d:04:c9:65:96:c9: 13:71:77:a9:dc:94:02:e7:4e:38:50:19:a9:8c:de: 63:93:b0:d6:89:38:6e:c7:12:f2:e6:54:d0:6c:74: 87:f1:55:e9:8f:87:11:a1:bd:c2:cf:d4:96:6e:2e: c8:b5:d2:74:38:31:91:54:b9:68:7e:29:fc:69:44: 54:03:f2:b1:a5:2a:76:d7:5f:08:75:c6:bf:2c:e0: b8:ab:4e:e1:45:a2:e7:52:b6:3f:ae:95:d7:48:5f: c0:62:4b:fa:4b:1b:35:2e:90:d3:b7:fb:91:38:58: 9b:5d:aa:39:ae:e0:12:21:04:c2:72:cf:e5:dc:27: 60:35:ea:5c:56:eb:43:8e:6d:0e:04:48:39:e7:9f: 12:d4:a4:62:45:fd:2e:6b:c4:4f:3d:7c:85:73:32: ef:40:e9:f1:6a:34:03:d7:04:94:e0:aa:da:75:3a: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:8F:8E:33:30:B8:4F:72:82:33:8D:C6:45:A9:7D:1E:9A:7D:7C X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:65:af:fd:00:a2:06:2d:96:4a:86:e4:7e:7e:30:1b:bc:e4: b9:3b:ce:6d:d8:e5:1c:86:99:7f:6a:11:28:70:b3:7d:d3:f1: 3e:b8:27:99:45:91:eb:12:80:ec:57:cc:a1:63:aa:d9:69:b6: de:86:e1:24:81:3d:22:a3:b7:50:42:09:6b:b1:69:bd:df:9d: 69:f5:4d:fb:b7:73:11:9d:e1:9a:eb:46:de:6f:6c:59:72:ad: 00:65:7d:95:01:dd:c0:85:88:c6:d6:ba:f9:c5:29:c5:50:5d: 08:48:8d:d7:2b:78:64:47:9f:25:3e:61:85:70:b6:92:7f:de: b7:c6:3e:24:71:e2:d2:86:c5:a7:b1:c3:95:7e:63:a9:05:db: fa:4e:47:3b:7a:1c:b7:c8:99:74:a2:31:64:a5:aa:5f:9e:50: 11:1f:66:04:c6:10:be:3d:30:c2:fc:0c:07:a9:2f:02:84:e0: 71:2c:b1:9d:ed:d9:5e:70:a5:f9:0a:d9:fd:cd:fd:6d:7c:77: 60:f0:04:51:ee:fd:41:02:de:ed:25:cf:62:f4:c9:93:14:61: 47:14:69:e9:17:b0:b6:bc:00:63:d2:87:0b:4f:17:cb:39:73: 0e:79:06:c5:32:4f:61:cc:20:da:fc:57:93:5b:88:fe:7d:56: b8:fe:91:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUwNDI0MjEwMzUwWhcNMjUwNTAxMjEwMzUwWjAYMRYwFAYD VQQDEw02ODBhYTczNi1iY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0syrRcRofgehXAd59gy+XhnmPHUWR2e74HPhLYHVc2Cz24Bj0rkq4CGU1UO0 8VIvnfzxQbtFhw+a/SNdnmi0Mk2vlXeWfuMlMZeHlSjHeYVLGmpdBMlllskTcXep 3JQC5044UBmpjN5jk7DWiThuxxLy5lTQbHSH8VXpj4cRob3Cz9SWbi7ItdJ0ODGR VLlofin8aURUA/KxpSp2118Idca/LOC4q07hRaLnUrY/rpXXSF/AYkv6Sxs1LpDT t/uROFibXao5ruASIQTCcs/l3CdgNepcVutDjm0OBEg5558S1KRiRf0ua8RPPXyF czLvQOnxajQD1wSU4KradTpOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk/j44z MLhPcoIzjcZFqX0emn18MB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOZa/9AKIGLZZKhuR+fjAbvOS5O85t2OUchpl/ahEocLN90/E+uCeZ RZHrEoDsV8yhY6rZabbehuEkgT0io7dQQglrsWm9351p9U37t3MRneGa60beb2xZ cq0AZX2VAd3AhYjG1rr5xSnFUF0ISI3XK3hkR58lPmGFcLaSf963xj4kceLShsWn scOVfmOpBdv6Tkc7ehy3yJl0ojFkpapfnlARH2YExhC+PTDC/AwHqS8ChOBxLLGd 7dlecKX5Ctn9zf1tfHdg8ARR7v1BAt7tJc9i9MmTFGFHFGnpF7C2vABj0ocLTxfL OXMOeQbFMk9hzCDa/FeTW4j+fVa4/pGh -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:09 2025 by rpki-client