$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: FEyqRQf3nII/SOtRuv4KTXhei3d99EnM0BxpCWPgrxU= Subject key identifier: 11:35:1D:47:94:1E:29:74:6E:3C:39:8E:12:7B:59:7A:E8:D9:F3:2F Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B3A Signing time: Thu 24 Apr 2025 19:06:30 +0000 Manifest this update: Thu 24 Apr 2025 19:06:30 +0000 Manifest next update: Thu 01 May 2025 19:06:30 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: hA9YSsWD+1fkYy+rfR7D1vVlc/UAOYR4g3MiMjZ47YU=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Apr 24 19:06:30 2025 GMT Not After : May 1 19:06:30 2025 GMT Subject: CN=680a8bb6-f55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:09:09:24:e7:86:7e:64:65:e2:be:5f:f5: e8:78:95:4a:0e:84:e9:8a:6e:bb:d4:c9:b0:5b:12: 14:a5:18:21:43:db:f6:05:99:f6:f9:35:f1:99:4a: 7c:ad:a5:2c:10:40:7b:af:45:9f:63:3b:93:68:c6: f3:3e:6c:10:6c:2f:e6:56:ba:b2:8b:e8:b1:cf:b3: df:2f:44:0a:2d:89:8f:2e:e4:18:c2:af:0f:0f:cf: 00:a1:01:22:96:6c:5b:44:1e:47:59:e4:df:4a:6a: e9:75:c1:f6:33:e8:da:7f:7e:74:ec:4d:c3:11:39: 39:79:e4:25:63:f0:52:00:f3:4f:b4:42:2c:ae:21: a9:c5:d1:cd:ab:7d:97:04:4d:10:d2:c5:b4:6b:e0: bc:50:ea:73:ed:61:20:58:8e:27:df:7a:4a:d9:9c: f4:4b:dc:95:fc:be:60:30:7c:78:d1:38:4d:37:84: bb:55:71:77:48:02:69:b6:41:c5:34:d7:40:1c:21: fb:de:08:4c:f9:f4:69:a7:27:30:87:7b:3e:92:73: 9f:a6:b0:31:0e:ce:58:bc:84:15:54:36:7c:fc:fc: 4f:3d:e4:70:f2:01:d2:f5:46:8c:9b:58:ec:34:24: 51:73:36:b5:30:e3:9a:92:a0:7e:3d:b2:8f:84:70: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:1D:47:94:1E:29:74:6E:3C:39:8E:12:7B:59:7A:E8:D9:F3:2F X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:d4:fd:1c:d3:10:25:72:03:16:96:ae:fb:00:ae:7e:3e: 5a:ef:b5:57:f9:6a:94:cd:a8:97:76:ab:79:3e:1a:de:21:7f: cf:39:a8:d4:fc:0a:0f:90:30:fa:b4:56:d1:d6:68:e2:c2:a1: 80:4c:5c:53:0e:a7:7c:97:ac:59:9b:1c:d3:69:31:56:40:ce: 3e:38:6b:bf:6e:5a:89:21:30:68:36:6f:d3:82:43:d1:5a:01: 4a:a8:4c:b3:4b:dd:b1:c1:8f:1f:a1:5f:cd:23:ff:b2:cf:05: da:c0:74:8c:7f:69:1a:5f:13:76:e9:c1:e9:06:ee:b5:36:1c: 19:40:ca:b5:31:fe:ce:75:ef:b0:e3:2a:cb:71:9c:49:e1:b5: 0b:af:f2:7c:57:fd:23:f2:87:e0:12:e0:94:f3:04:de:99:f4: 17:51:08:90:70:99:3a:3d:23:df:f8:8e:64:9f:21:94:ea:a2: 50:32:5f:53:be:c2:a5:b3:8f:cf:84:56:be:76:28:d4:72:d8: 90:d6:91:6d:ba:0e:ac:28:06:c9:d7:42:6d:b7:1a:59:48:55: 13:45:e9:a9:8c:bc:ad:16:1c:db:69:75:35:bc:04:aa:6b:56: 4a:e8:b1:56:a8:7b:36:f3:25:df:f0:d4:2f:50:75:47:74:9b: 83:eb:a6:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwNDI0MTkwNjMwWhcNMjUwNTAxMTkwNjMwWjAYMRYwFAYD VQQDEw02ODBhOGJiNi1mNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/wJCSTnhn5kZeK+X/XoeJVKDoTpim671MmwWxIUpRghQ9v2BZn2+TXxmUp8 raUsEEB7r0WfYzuTaMbzPmwQbC/mVrqyi+ixz7PfL0QKLYmPLuQYwq8PD88AoQEi lmxbRB5HWeTfSmrpdcH2M+jaf3507E3DETk5eeQlY/BSAPNPtEIsriGpxdHNq32X BE0Q0sW0a+C8UOpz7WEgWI4n33pK2Zz0S9yV/L5gMHx40ThNN4S7VXF3SAJptkHF NNdAHCH73ghM+fRppycwh3s+knOfprAxDs5YvIQVVDZ8/PxPPeRw8gHS9UaMm1js NCRRcza1MOOakqB+PbKPhHCZvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE1HUeU Hil0bjw5jhJ7WXro2fMvMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUi9T9HNMQJXIDFpau+wCufj5a77VX+WqUzaiXdqt5PhreIX/POajU /AoPkDD6tFbR1mjiwqGATFxTDqd8l6xZmxzTaTFWQM4+OGu/blqJITBoNm/TgkPR WgFKqEyzS92xwY8foV/NI/+yzwXawHSMf2kaXxN26cHpBu61NhwZQMq1Mf7Ode+w 4yrLcZxJ4bULr/J8V/0j8ofgEuCU8wTemfQXUQiQcJk6PSPf+I5knyGU6qJQMl9T vsKls4/PhFa+dijUctiQ1pFtug6sKAbJ10JttxpZSFUTRempjLytFhzbaXU1vASq a1ZK6LFWqHs28yXf8NQvUHVHdJuD66Zi -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:31 2025 by rpki-client