$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft File: YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json) Hash identifier: /ATy8PrCpx2wyYOn7uCufduPvR4jhrpj7sCiY8zCEdE= Subject key identifier: 59:D8:6F:85:1C:3A:43:2D:C0:77:81:A9:1E:D5:53:C3:43:2C:7F:85 Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 Certificate issuer: /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft Manifest number: 0A Signing time: Fri 25 Apr 2025 07:07:35 +0000 Manifest this update: Fri 25 Apr 2025 07:07:35 +0000 Manifest next update: Fri 02 May 2025 07:07:35 +0000 Files and hashes: 1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: OgOEoxqgvx8OsRPmRISslSku6gBIJW7sfvAvbLpIPME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Validity Not Before: Apr 25 07:07:35 2025 GMT Not After : May 2 07:07:35 2025 GMT Subject: CN=680b34b7-3441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:ec:37:88:6d:97:85:73:f3:35:a1:2f:4e: 29:29:44:c7:eb:5c:f6:21:72:c9:95:cc:96:ad:f7: d7:36:5a:fc:d5:a7:e9:f1:48:64:4d:70:82:87:e9: 5d:88:ef:c2:4d:69:9b:3e:6b:33:89:42:49:5a:39: de:8d:90:29:29:1b:11:c0:06:54:9d:69:b3:ea:c1: 24:d6:26:e9:f2:1a:4c:11:6c:69:4c:44:c1:51:c0: e4:21:5c:9e:cc:b3:91:99:3b:96:fe:58:0c:25:dc: 6b:14:3e:ea:90:73:81:58:2e:2b:2f:96:25:61:d9: fe:2b:ac:10:25:ef:3f:04:b2:64:96:b8:c1:39:54: 48:bf:9b:84:ad:ac:0d:64:e2:f5:a6:55:fa:7c:bf: ac:44:70:de:95:a5:3e:78:a5:1b:41:71:93:22:e9: 6c:8a:b7:79:bb:fa:ee:04:c3:cf:ca:52:91:1d:7f: 17:65:d1:fd:8b:5c:4d:2d:55:be:56:5d:c5:37:77: de:89:41:ba:83:fb:a1:34:c7:45:1e:8e:6f:75:34: 93:b1:86:98:92:ea:6c:d8:a5:42:60:2e:c9:5e:54: 39:47:bb:ba:9d:d9:18:e6:8a:7a:04:35:8e:d9:e9: 9b:2e:09:e2:a0:dd:33:d9:33:52:4e:f7:5e:98:e3: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D8:6F:85:1C:3A:43:2D:C0:77:81:A9:1E:D5:53:C3:43:2C:7F:85 X509v3 Authority Key Identifier: keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:31:6c:a1:8c:f9:f1:2d:2c:19:1a:38:e6:f4:df:64:21:63: f9:d4:82:a8:85:50:28:eb:66:4a:8c:2f:4c:75:d2:2f:bb:d5: e1:10:f5:68:c2:57:e2:f8:e2:4c:09:20:49:5b:52:08:99:88: b3:c5:68:18:d3:c5:7b:f7:df:0a:ff:a2:89:0a:57:85:1d:9a: 80:c8:fa:f7:28:24:97:4a:9e:41:70:dc:1b:45:5c:ee:1f:b7: 98:d4:59:a7:a8:24:9f:c4:85:31:1c:ec:7b:15:08:c7:b8:95: af:4c:dc:3e:8f:23:d7:1a:e6:aa:7d:b0:6f:b4:51:20:ee:a7: 0c:41:b4:2c:28:b3:64:22:7c:c6:fe:56:23:0c:f4:1e:52:34: ec:ef:ec:c0:b9:29:97:4f:00:4a:a5:48:30:ae:8c:6e:c8:a4: fa:04:4d:8a:be:72:d8:e9:27:55:cd:cb:f1:a3:8c:72:40:bf: c9:0f:12:50:71:7e:c9:cf:49:85:3a:42:f4:4e:b9:b5:7d:f9: e9:70:ad:95:12:1a:a6:82:9b:c7:2f:75:ab:15:af:26:c1:33: 75:67:0b:98:83:18:07:cd:bb:00:34:66:00:38:5e:8b:97:5d: 80:22:44:9e:28:4b:9b:03:bd:0d:17:c1:6a:0c:d3:fb:50:0c: 9c:11:4c:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoNjE4QUUwOUU3NDcxMzZENjZGMTE2NUE3QjhGRUEyRkY3 Mzg2N0RGNjAeFw0yNTA0MjUwNzA3MzVaFw0yNTA1MDIwNzA3MzVaMBgxFjAUBgNV BAMTDTY4MGIzNGI3LTM0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAEOw3iG2XhXPzNaEvTikpRMfrXPYhcsmVzJat99c2WvzVp+nxSGRNcIKH6V2I 78JNaZs+azOJQklaOd6NkCkpGxHABlSdabPqwSTWJunyGkwRbGlMRMFRwOQhXJ7M s5GZO5b+WAwl3GsUPuqQc4FYLisvliVh2f4rrBAl7z8EsmSWuME5VEi/m4StrA1k 4vWmVfp8v6xEcN6VpT54pRtBcZMi6WyKt3m7+u4Ew8/KUpEdfxdl0f2LXE0tVb5W XcU3d96JQbqD+6E0x0Uejm91NJOxhpiS6mzYpUJgLsleVDlHu7qd2RjminoENY7Z 6ZsuCeKg3TPZM1JO916Y4yirAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWdhvhRw6 Qy3Ad4GpHtVTw0Msf4UwHwYDVR0jBBgwFoAUYYrgnnRxNtZvEWWnuP6i/3OGffYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzBENDY4ODNDMTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRadkVXV251UDZpXzNPR2Zm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVlyZ25uUnhOdFp2RVdXbnVQNmlfM09HZmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzBENDY4ODNDMTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRa dkVXV251UDZpXzNPR2ZmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKExbKGM+fEtLBkaOOb032QhY/nUgqiFUCjrZkqML0x10i+71eEQ9WjC V+L44kwJIElbUgiZiLPFaBjTxXv33wr/ookKV4UdmoDI+vcoJJdKnkFw3BtFXO4f t5jUWaeoJJ/EhTEc7HsVCMe4la9M3D6PI9ca5qp9sG+0USDupwxBtCwos2QifMb+ ViMM9B5SNOzv7MC5KZdPAEqlSDCujG7IpPoETYq+ctjpJ1XNy/GjjHJAv8kPElBx fsnPSYU6QvROubV9+elwrZUSGqaCm8cvdasVrybBM3VnC5iDGAfNuwA0ZgA4XouX XYAiRJ4oS5sDvQ0XwWoM0/tQDJwRTHA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:46 2025 by rpki-client