$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: KhNC1VbdNB84k28nrUZ/fAJB5hEOVLQlXm/qaWlPZCs= Subject key identifier: EB:1F:B8:61:D9:BA:15:42:82:5F:38:7A:BE:EC:79:EF:DB:86:2C:9A Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 07C9 Signing time: Thu 24 Apr 2025 20:57:56 +0000 Manifest this update: Thu 24 Apr 2025 20:57:55 +0000 Manifest next update: Thu 01 May 2025 20:57:55 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: FZWq+Suea3ocOqvU/2YmCJcwfN3gUQSTmVaz3H3oudA=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Apr 24 20:57:55 2025 GMT Not After : May 1 20:57:55 2025 GMT Subject: CN=680aa5d3-c8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:d1:8f:1b:71:ca:7a:c3:8c:3e:ec:23:6a: 28:12:d7:c6:54:20:a9:96:20:f2:55:f1:04:ff:8d: 98:f2:20:22:9b:ef:73:23:87:ed:32:6a:a6:4f:3f: 87:57:11:74:41:c2:45:ef:3d:f3:cf:8f:9a:25:c9: 5e:5c:4a:78:dc:aa:94:79:97:6b:fe:8e:e4:3b:a3: e5:ba:ed:7e:ae:89:a9:8a:18:a8:9f:e8:cc:51:8a: 95:73:8f:3c:4d:67:0e:18:f0:64:cf:4a:c7:6a:73: c8:12:33:68:06:c6:b8:81:d1:ef:fd:d0:cd:90:fa: 64:8a:68:68:2e:21:08:27:a7:ac:98:2a:28:ef:98: f2:37:23:81:34:4f:dc:fa:4a:a5:c4:b8:e1:77:63: 7a:3c:2f:29:7f:02:5c:a5:8d:e8:73:f7:3b:1f:6c: dc:07:70:1a:8d:8f:37:19:b2:eb:3b:dc:ad:f8:06: aa:ac:12:80:ae:77:09:12:77:ab:d1:9a:a9:45:f3: 5e:b0:82:c5:1b:af:e1:37:0d:02:a5:36:5c:d2:1c: 40:86:ce:3d:dd:88:e9:87:98:82:43:dc:84:ff:4a: 18:d8:f1:e2:b2:5d:a6:78:67:9c:8f:3a:01:d0:b7: 5e:1b:ed:1c:27:20:66:11:94:ef:10:56:0d:b7:c0: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:B8:61:D9:BA:15:42:82:5F:38:7A:BE:EC:79:EF:DB:86:2C:9A X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:31:24:2f:69:ec:4e:7e:c5:0f:58:85:3a:6a:91:ba:7c:93: c6:f7:8b:d3:05:23:b7:bd:12:8f:1e:72:7a:f3:8b:70:15:2d: f0:d9:e6:69:78:95:aa:d4:a2:fb:8c:98:17:63:ac:4a:39:0c: aa:b6:77:ff:ca:e8:3a:84:15:d5:fc:8e:3c:b9:75:dc:9b:c4: f8:9e:64:dc:68:6f:7c:8b:f0:66:7e:27:c8:99:25:77:d9:5b: 65:cf:9f:c9:be:a4:56:fd:72:c0:54:65:97:48:e9:0a:02:f7: e0:e5:89:10:19:69:73:e3:d3:2a:41:47:59:4e:ff:08:63:0c: d3:ff:a8:ec:fa:a3:12:e5:48:c9:3d:df:b0:e3:14:9d:8a:87: 58:58:e3:b7:4f:d1:61:c2:10:a6:b3:50:e3:13:b9:53:c9:86: f8:a8:38:1c:74:94:b3:1d:28:a0:90:2a:a1:c2:af:51:9c:e0: 56:bd:62:d0:6f:c3:f7:5f:8d:b9:b8:e1:af:cc:87:a5:18:57: e6:43:63:e5:e3:93:cc:11:08:8b:27:72:41:7a:74:9b:f9:aa: 19:bc:e0:83:ea:0a:41:0b:d0:cc:30:cd:9a:77:65:d2:08:35: 41:10:5f:ae:fc:f8:97:a3:0b:24:02:38:3f:49:cc:92:dc:ee: b4:77:b1:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUwNDI0MjA1NzU1WhcNMjUwNTAxMjA1NzU1WjAYMRYwFAYD VQQDEw02ODBhYTVkMy1jOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrjRjxtxynrDjD7sI2ooEtfGVCCpliDyVfEE/42Y8iAim+9zI4ftMmqmTz+H VxF0QcJF7z3zz4+aJcleXEp43KqUeZdr/o7kO6Pluu1+rompihion+jMUYqVc488 TWcOGPBkz0rHanPIEjNoBsa4gdHv/dDNkPpkimhoLiEIJ6esmCoo75jyNyOBNE/c +kqlxLjhd2N6PC8pfwJcpY3oc/c7H2zcB3AajY83GbLrO9yt+AaqrBKArncJEner 0ZqpRfNesILFG6/hNw0CpTZc0hxAhs493Yjph5iCQ9yE/0oY2PHisl2meGecjzoB 0LdeG+0cJyBmEZTvEFYNt8CUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsfuGHZ uhVCgl84er7see/bhiyaMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGMSQvaexOfsUPWIU6apG6fJPG94vTBSO3vRKPHnJ684twFS3w2eZp eJWq1KL7jJgXY6xKOQyqtnf/yug6hBXV/I48uXXcm8T4nmTcaG98i/BmfifImSV3 2Vtlz5/JvqRW/XLAVGWXSOkKAvfg5YkQGWlz49MqQUdZTv8IYwzT/6js+qMS5UjJ Pd+w4xSdiodYWOO3T9FhwhCms1DjE7lTyYb4qDgcdJSzHSigkCqhwq9RnOBWvWLQ b8P3X425uOGvzIelGFfmQ2Pl45PMEQiLJ3JBenSb+aoZvOCD6gpBC9DMMM2ad2XS CDVBEF+u/PiXowskAjg/ScyS3O60d7E3 -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:46 2025 by rpki-client