$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: 1eVa90jsBo1kiiJHRnSMLrskDNwHG3TZ6hxlA3/oeKQ= Subject key identifier: 7B:52:28:B7:91:31:C5:37:9B:92:1A:0D:0C:34:0A:86:EC:C4:7E:B7 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 0747 Signing time: Thu 24 Apr 2025 21:29:54 +0000 Manifest this update: Thu 24 Apr 2025 21:29:54 +0000 Manifest next update: Thu 01 May 2025 21:29:54 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: jEIqFFA9jYQp6pWhtgBwW0OdBPCuF6Q49p+g17mF7Bs=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Apr 24 21:29:54 2025 GMT Not After : May 1 21:29:54 2025 GMT Subject: CN=680aad52-9a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:89:c8:ee:8b:ab:81:2a:85:52:85:1f:61: ff:6e:ae:a3:2c:6d:f0:7c:81:6e:13:94:dd:f2:4e: 9e:46:22:be:35:eb:c4:c5:9b:9e:b4:62:f2:98:5b: 3f:50:48:69:e5:ab:f3:8d:dd:d9:5a:94:43:80:24: b0:f0:b7:89:c9:fc:aa:82:98:b5:15:7c:29:f6:4b: e1:94:5f:f7:62:0b:f4:18:5e:40:d4:c1:a2:05:92: 77:12:77:1e:0b:44:d4:a1:f8:d5:fc:a6:8d:e9:1f: e0:02:5f:e7:b8:76:44:0d:d3:2b:23:24:6c:27:62: ed:dd:9d:15:fb:01:e7:7e:48:4e:80:ab:7c:ca:47: 97:ab:85:c9:fa:79:f6:e5:61:48:5c:8f:6c:1f:5e: c2:c8:b8:b2:42:36:51:d0:3b:f0:9f:3c:de:a5:e3: ea:b0:ae:c7:c8:c2:9e:ec:5e:6d:1b:cc:56:bb:7b: 83:c4:81:2a:27:b9:ab:56:1e:76:af:b8:19:94:d7: 10:d7:30:04:e8:79:26:5f:2e:ab:d5:ed:45:e9:a2: c6:8d:7d:de:1b:f9:1f:b9:ed:4c:f4:22:8a:6f:85: bd:27:b8:17:44:77:af:15:e5:00:af:0d:52:b8:70: d7:17:e6:7f:b8:d8:bb:99:ee:bd:56:66:08:9c:7a: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:28:B7:91:31:C5:37:9B:92:1A:0D:0C:34:0A:86:EC:C4:7E:B7 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6f:56:90:73:f1:4e:1e:3c:38:ca:33:ff:ed:93:83:28:26: 83:01:e3:d5:2b:87:70:fe:56:db:f5:77:ed:be:3c:39:7d:9b: 5f:fe:54:f8:76:00:9c:2e:ec:33:de:7d:55:55:3b:44:7a:f2: a8:5b:4e:39:f9:62:49:8b:79:7a:da:13:3a:15:d5:6f:19:81: 7d:7c:b4:09:3f:4f:cd:1d:2f:1a:b5:8c:37:12:0c:b1:81:55: 34:83:ec:8b:96:b7:99:07:33:49:ef:e5:8c:9c:ff:e8:e5:23: ec:c4:40:f5:76:ba:4e:c0:6f:1f:82:10:de:11:8e:5d:cb:da: 40:75:b8:03:7e:ff:a7:13:70:51:6f:c7:2e:92:3a:91:d2:ff: d4:49:1d:a6:68:8b:9f:83:83:cf:fa:1d:16:14:ff:69:e8:1d: 65:c0:4c:e3:ae:96:9b:e4:70:23:05:43:c7:59:64:e5:7d:6a: 8d:68:d6:87:b2:b9:5e:22:d3:a2:48:8c:d3:70:4d:ab:79:41: 24:52:57:19:2e:94:f9:8b:01:1e:e1:3a:82:7f:10:fc:30:65: f4:ef:53:da:68:97:24:e9:bf:a1:c2:2d:27:e1:d3:45:73:fc: cd:a1:c5:89:7c:36:7e:4a:71:90:ab:7a:38:e0:4a:c0:63:9f: ba:cb:a3:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUwNDI0MjEyOTU0WhcNMjUwNTAxMjEyOTU0WjAYMRYwFAYD VQQDEw02ODBhYWQ1Mi05YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx6JyO6Lq4EqhVKFH2H/bq6jLG3wfIFuE5Td8k6eRiK+NevExZuetGLymFs/ UEhp5avzjd3ZWpRDgCSw8LeJyfyqgpi1FXwp9kvhlF/3Ygv0GF5A1MGiBZJ3Ence C0TUofjV/KaN6R/gAl/nuHZEDdMrIyRsJ2Lt3Z0V+wHnfkhOgKt8ykeXq4XJ+nn2 5WFIXI9sH17CyLiyQjZR0DvwnzzepePqsK7HyMKe7F5tG8xWu3uDxIEqJ7mrVh52 r7gZlNcQ1zAE6HkmXy6r1e1F6aLGjX3eG/kfue1M9CKKb4W9J7gXRHevFeUArw1S uHDXF+Z/uNi7me69VmYInHoUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtSKLeR McU3m5IaDQw0CobsxH63MB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhb1aQc/FOHjw4yjP/7ZODKCaDAePVK4dw/lbb9Xftvjw5fZtf/lT4 dgCcLuwz3n1VVTtEevKoW045+WJJi3l62hM6FdVvGYF9fLQJP0/NHS8atYw3Egyx gVU0g+yLlreZBzNJ7+WMnP/o5SPsxED1drpOwG8fghDeEY5dy9pAdbgDfv+nE3BR b8cukjqR0v/USR2maIufg4PP+h0WFP9p6B1lwEzjrpab5HAjBUPHWWTlfWqNaNaH srleItOiSIzTcE2reUEkUlcZLpT5iwEe4TqCfxD8MGX071PaaJck6b+hwi0n4dNF c/zNocWJfDZ+SnGQq3o44ErAY5+6y6NN -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:53 2025 by rpki-client