$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: 8Pix2B7VDD12U8XFwmgHNovO5G8jL5w2m0NT87n3xLg= Subject key identifier: B4:6E:2C:EE:CA:46:B7:29:4A:0A:82:0B:2C:D0:C3:6F:A9:CF:C6:9E Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 0776 Signing time: Thu 24 Apr 2025 21:15:00 +0000 Manifest this update: Thu 24 Apr 2025 21:15:00 +0000 Manifest next update: Thu 01 May 2025 21:15:00 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: bqCvZyw7Noqjxtn5+LoWXz607eE7gRETMOxcVTMRXNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Apr 24 21:15:00 2025 GMT Not After : May 1 21:15:00 2025 GMT Subject: CN=680aa9d4-ff69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:6f:62:f9:3f:fb:88:28:92:4a:49:78:5a: 93:ce:c8:f4:37:90:75:99:be:e8:d3:0a:e7:57:a3: 3b:54:f8:86:8f:80:75:a6:57:ef:06:16:9d:fa:55: cd:c1:7e:5a:be:e6:d3:9f:e5:37:78:af:aa:d5:33: 02:34:4c:f4:32:53:ab:9a:11:1c:72:a8:34:c1:90: 3c:5f:f5:14:da:81:24:ee:f3:4b:79:31:43:15:61: 86:bd:3e:57:d6:c0:d8:3c:48:cb:48:db:b2:c3:9a: b8:92:25:4a:c4:59:63:a8:d3:bc:a8:83:fc:59:30: 1c:69:bc:5b:9b:98:51:46:13:c2:0f:5d:62:35:a3: 13:f3:d8:b5:52:41:b0:4e:db:85:36:65:8d:8d:25: 40:2b:27:1b:14:9e:c5:46:19:3b:af:92:94:a8:be: f9:99:d1:c1:1f:92:9d:22:05:e0:ee:a9:23:f6:6f: a9:31:9f:c1:98:0f:22:47:18:58:2c:ea:68:2c:03: 6e:46:40:e2:8c:1a:64:8a:01:f9:4f:3d:97:6b:fb: 3c:66:d5:a4:19:92:52:09:ee:6a:6e:0e:dc:74:f6: 49:7e:76:27:d2:a5:4e:4c:0e:24:e9:6d:43:35:f4: ae:ec:59:a7:36:d2:4b:4e:d9:c4:e5:ca:85:62:b5: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:2C:EE:CA:46:B7:29:4A:0A:82:0B:2C:D0:C3:6F:A9:CF:C6:9E X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:20:5d:2b:c1:da:65:fe:2a:1d:af:18:52:e7:f4:9e:83: 7b:9b:5c:ac:1f:45:a5:27:f1:e2:27:c0:fe:d9:a3:a0:1e:b6: e9:47:54:e0:ac:e7:77:2c:72:33:5e:cb:24:90:99:11:b3:b5: e2:af:8e:15:db:da:80:c4:b4:d2:d8:a9:cb:23:84:c1:89:2d: 90:d2:86:33:fa:af:07:26:73:3c:38:60:eb:4f:b6:db:83:e7: db:a6:1e:26:43:96:4e:0f:08:10:e8:41:26:bb:49:92:96:bd: 8d:75:a2:f0:a1:9a:2c:b7:7b:1e:28:28:d7:8c:ec:e4:de:36: 29:73:81:a6:f4:31:ae:06:65:41:bf:f0:ea:49:58:65:a7:be: b7:09:d4:2e:d0:3f:b1:22:bc:d5:4d:ff:3a:59:07:ac:a0:9f: 23:dd:5f:6d:98:b2:b5:5c:34:24:1e:c2:71:83:b0:f7:2f:8a: 0b:84:fd:05:fe:e5:ef:71:e2:49:fa:91:9b:24:0d:96:b2:25: 48:60:6c:eb:1e:61:73:c3:83:80:14:1f:97:38:3c:8e:13:09: 1e:4c:4a:14:8a:6e:27:56:ed:a0:17:ae:c3:46:8b:49:d6:1f: 51:b4:3a:0c:01:d0:9a:21:24:04:28:f0:03:69:23:97:d7:64: 7d:6f:73:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwNDI0MjExNTAwWhcNMjUwNTAxMjExNTAwWjAYMRYwFAYD VQQDEw02ODBhYTlkNC1mZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0xvYvk/+4gokkpJeFqTzsj0N5B1mb7o0wrnV6M7VPiGj4B1plfvBhad+lXN wX5avubTn+U3eK+q1TMCNEz0MlOrmhEccqg0wZA8X/UU2oEk7vNLeTFDFWGGvT5X 1sDYPEjLSNuyw5q4kiVKxFljqNO8qIP8WTAcabxbm5hRRhPCD11iNaMT89i1UkGw TtuFNmWNjSVAKycbFJ7FRhk7r5KUqL75mdHBH5KdIgXg7qkj9m+pMZ/BmA8iRxhY LOpoLANuRkDijBpkigH5Tz2Xa/s8ZtWkGZJSCe5qbg7cdPZJfnYn0qVOTA4k6W1D NfSu7FmnNtJLTtnE5cqFYrU//wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRuLO7K RrcpSgqCCyzQw2+pz8aeMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzoyBdK8HaZf4qHa8YUuf0noN7m1ysH0WlJ/HiJ8D+2aOgHrbpR1Tg rOd3LHIzXsskkJkRs7Xir44V29qAxLTS2KnLI4TBiS2Q0oYz+q8HJnM8OGDrT7bb g+fbph4mQ5ZODwgQ6EEmu0mSlr2NdaLwoZost3seKCjXjOzk3jYpc4Gm9DGuBmVB v/DqSVhlp763CdQu0D+xIrzVTf86WQesoJ8j3V9tmLK1XDQkHsJxg7D3L4oLhP0F /uXvceJJ+pGbJA2WsiVIYGzrHmFzw4OAFB+XODyOEwkeTEoUim4nVu2gF67DRotJ 1h9RtDoMAdCaISQEKPADaSOX12R9b3M0 -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:54 2025 by rpki-client