$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: ujNpLVkL9ilue1ao5JUR0TPJZnIwKF1huTMxwSsltlU= Subject key identifier: 3A:2B:3A:68:78:A0:32:1F:41:43:75:7C:BC:A3:18:7A:AE:C6:F1:38 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 24B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 24A6 Signing time: Thu 24 Apr 2025 15:47:50 +0000 Manifest this update: Thu 24 Apr 2025 15:47:50 +0000 Manifest next update: Thu 01 May 2025 15:47:50 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: sVDMT7Rl1qt3fGvdMbv2u70LfEuO+MMYyerZEIgQl8E=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: VpHAZdWeijuNJKWvKLj0k1xE9YF+5hfOXRYAI6729SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9399 (0x24b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Apr 24 15:47:50 2025 GMT Not After : May 1 15:47:50 2025 GMT Subject: CN=680a5d26-4095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:bb:da:a5:3c:35:6e:86:1e:8e:33:8b:c3: 8b:47:60:58:1d:58:01:52:5f:46:d0:82:e3:7e:b4: 08:f4:46:e1:e7:0e:9a:56:13:55:f3:bb:cd:80:b3: 2f:eb:58:a4:e9:66:59:2a:a4:c2:8b:0d:e4:56:02: b0:3a:79:7e:e2:37:80:36:db:7f:27:ff:15:66:4f: a5:be:70:51:63:1f:eb:a8:7d:c3:0b:d9:02:e1:e3: 8f:f1:17:43:29:a0:1a:c4:06:68:d0:06:7e:3c:e5: 96:fb:d8:eb:38:64:2e:03:a4:39:32:50:0b:ac:7b: c7:84:51:dd:2a:e1:67:8b:53:42:57:d0:d6:42:7c: e6:7d:cc:56:46:79:57:95:68:3a:89:4c:dc:e4:0b: ed:0e:43:78:69:bb:67:79:e9:80:17:0a:16:1c:64: 55:f2:8b:47:e1:d3:23:07:68:4e:46:30:d4:23:50: 86:d1:65:b0:0c:9c:89:37:1c:1b:4b:cd:1d:37:6a: e3:54:6c:01:eb:f5:8d:41:69:87:0e:89:0f:59:0d: c3:5b:45:1a:54:6a:7a:75:a6:e2:3c:08:cc:4e:aa: c4:93:00:1e:c0:ac:20:a3:64:75:73:78:36:31:ef: 91:cd:2b:6e:cf:0d:e0:c3:d3:02:a4:06:1a:33:80: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:3A:68:78:A0:32:1F:41:43:75:7C:BC:A3:18:7A:AE:C6:F1:38 X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2d:63:5e:9d:1e:59:f7:aa:ad:8e:8d:45:26:dd:54:2b:4d: 6d:19:22:af:db:da:12:02:80:61:4c:a2:60:c4:b4:04:84:b1: a5:63:b0:e2:d8:51:e3:2b:5a:c8:15:96:49:07:a7:d1:17:e6: fc:2c:25:4d:ba:db:c5:b0:68:d9:64:4d:67:6c:c3:a3:d6:59: f9:ed:71:4d:0a:85:ad:a4:d4:6f:76:c5:20:79:27:9b:e5:9b: a1:3d:af:0b:f9:66:af:fd:9a:93:14:9b:d4:d1:34:36:09:33: 87:a5:fb:ce:16:01:5c:b5:c1:5e:7b:43:81:3f:4e:82:59:07: 71:f9:49:1e:2a:ad:ec:29:7e:8e:49:fe:45:e9:e1:88:05:31: 2d:f4:75:cc:a8:31:cf:0a:ca:95:51:d9:db:c3:74:ef:dc:64: 70:59:49:bf:56:02:ab:cd:f8:7e:f2:40:36:95:79:d0:d0:f7: 98:92:8d:70:d9:7f:77:fa:af:2d:49:53:f4:d3:3a:86:f0:ab: 28:f3:8c:6d:e2:21:85:8b:a6:3c:06:c6:b6:56:8f:b8:f1:af: 7a:49:d5:77:aa:7e:d6:f6:15:ea:0c:fa:2d:de:92:a7:50:84: f8:de:50:89:66:b7:e8:e3:31:ad:51:f3:28:5b:3d:a8:76:4d: 65:13:5f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUwNDI0MTU0NzUwWhcNMjUwNTAxMTU0NzUwWjAYMRYwFAYD VQQDEw02ODBhNWQyNi00MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFq72qU8NW6GHo4zi8OLR2BYHVgBUl9G0ILjfrQI9Ebh5w6aVhNV87vNgLMv 61ik6WZZKqTCiw3kVgKwOnl+4jeANtt/J/8VZk+lvnBRYx/rqH3DC9kC4eOP8RdD KaAaxAZo0AZ+POWW+9jrOGQuA6Q5MlALrHvHhFHdKuFni1NCV9DWQnzmfcxWRnlX lWg6iUzc5AvtDkN4abtneemAFwoWHGRV8otH4dMjB2hORjDUI1CG0WWwDJyJNxwb S80dN2rjVGwB6/WNQWmHDokPWQ3DW0UaVGp6dabiPAjMTqrEkwAewKwgo2R1c3g2 Me+RzStuzw3gw9MCpAYaM4A2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDorOmh4 oDIfQUN1fLyjGHquxvE4MB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLWNenR5Z96qtjo1FJt1UK01tGSKv29oSAoBhTKJgxLQEhLGlY7Di 2FHjK1rIFZZJB6fRF+b8LCVNutvFsGjZZE1nbMOj1ln57XFNCoWtpNRvdsUgeSeb 5ZuhPa8L+Wav/ZqTFJvU0TQ2CTOHpfvOFgFctcFee0OBP06CWQdx+UkeKq3sKX6O Sf5F6eGIBTEt9HXMqDHPCsqVUdnbw3Tv3GRwWUm/VgKrzfh+8kA2lXnQ0PeYko1w 2X93+q8tSVP00zqG8Kso84xt4iGFi6Y8Bsa2Vo+48a96SdV3qn7W9hXqDPot3pKn UIT43lCJZrfo4zGtUfMoWz2odk1lE19p -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:07 2025 by rpki-client