$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: rSh9RFRFjjZxgdoHxbsgIyPG32qPaG/LXoWS+lMr8eU= Subject key identifier: 02:B6:B7:1A:AB:94:0B:F9:96:1C:68:2F:9A:8A:35:9C:6C:ED:38:82 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0118 Signing time: Fri 25 Apr 2025 03:55:21 +0000 Manifest this update: Fri 25 Apr 2025 03:55:21 +0000 Manifest next update: Fri 02 May 2025 03:55:20 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: 2wm232Cjcahyc5T2wBt2zHLVVQyaJtkNx5/+DBSIUR4=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Apr 25 03:55:21 2025 GMT Not After : May 2 03:55:20 2025 GMT Subject: CN=680b07a9-9f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:fc:4b:29:be:17:d6:6b:f1:f8:8a:f7:20: bc:42:4c:32:a5:27:55:7f:55:be:fb:72:35:bc:26: 70:6a:c9:6e:7d:f9:8a:36:4f:ce:67:96:f0:58:73: ae:8c:ed:3c:17:f6:7f:d8:74:6a:71:a0:3c:8a:01: 56:23:be:67:bc:8d:4e:91:a8:98:a5:c3:16:a3:2e: c2:00:3b:88:a6:93:df:9e:2a:20:c5:3b:16:66:a0: 2d:47:e1:a3:2b:5b:92:ff:7d:8a:c6:47:9c:77:08: 49:d2:de:fd:4b:2e:de:6d:9c:f6:34:77:37:b8:28: a0:ba:55:b8:a7:8e:34:06:ec:7b:ea:4d:f5:9c:f8: 12:4b:bd:b2:b7:30:f2:9b:10:30:68:69:f9:01:bb: 92:a6:a8:27:e0:69:47:5a:fc:85:3e:59:4e:82:53: a9:f1:60:37:44:8b:91:35:79:90:2f:5b:77:61:40: e7:30:c2:df:90:c4:a3:1b:c5:4e:dc:35:9b:9b:2c: 58:6d:cf:4e:98:3a:a8:7d:78:06:18:aa:5f:31:75: 7b:b6:21:72:c4:19:01:03:e8:9d:56:8a:51:5c:a1: e2:4c:f0:51:60:b4:b2:fd:4f:93:c2:cb:29:0b:a3: be:f3:8b:46:c8:2b:b4:0f:1f:ff:58:26:78:ee:67: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:B7:1A:AB:94:0B:F9:96:1C:68:2F:9A:8A:35:9C:6C:ED:38:82 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:8f:cc:0c:df:c7:b0:a3:4e:04:12:1e:22:d7:de:8a:83:9c: d9:bc:d0:82:51:5c:68:a6:65:db:86:bf:09:6b:6c:af:73:78: 49:11:5c:cd:ab:c5:5c:4b:1e:84:64:ec:59:0d:be:4a:f5:f2: 3c:5f:2f:14:fb:e0:d5:6f:95:52:82:ae:66:4e:49:af:f2:78: 72:2d:5d:e6:2c:86:d5:2e:64:86:ca:04:e6:04:ab:e4:b2:58: 41:5a:a8:70:1e:7c:26:cc:d7:7b:32:97:08:35:76:67:3e:6f: 6f:68:06:75:39:42:77:14:1e:14:0f:20:4f:6a:54:14:4f:69: c1:df:78:e9:aa:bf:9e:11:0e:95:a4:43:c1:8c:b3:f8:a5:57: e2:0d:57:80:be:a8:39:50:4b:43:8d:a3:8f:33:00:18:b3:1d: a9:4a:35:ff:12:b4:06:21:b4:d6:a0:c7:16:72:79:d0:51:84: 67:70:f7:01:7b:f5:71:66:af:76:04:03:ce:35:28:51:5a:40: cb:cb:47:9a:55:94:20:bd:77:77:92:6c:f3:a0:a1:c7:89:ff: c8:5e:92:fe:5a:d8:21:5e:cf:47:77:32:e2:a1:99:2b:48:d4: 57:b6:48:4f:31:a9:0c:e9:9f:c3:71:b3:eb:69:87:6f:e3:1d: 62:d7:5f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNDI1MDM1NTIxWhcNMjUwNTAyMDM1NTIwWjAYMRYwFAYD VQQDEw02ODBiMDdhOS05ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/X8Sym+F9Zr8fiK9yC8QkwypSdVf1W++3I1vCZwasluffmKNk/OZ5bwWHOu jO08F/Z/2HRqcaA8igFWI75nvI1OkaiYpcMWoy7CADuIppPfniogxTsWZqAtR+Gj K1uS/32KxkecdwhJ0t79Sy7ebZz2NHc3uCigulW4p440Bux76k31nPgSS72ytzDy mxAwaGn5AbuSpqgn4GlHWvyFPllOglOp8WA3RIuRNXmQL1t3YUDnMMLfkMSjG8VO 3DWbmyxYbc9OmDqofXgGGKpfMXV7tiFyxBkBA+idVopRXKHiTPBRYLSy/U+Twssp C6O+84tGyCu0Dx//WCZ47mexnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK2txqr lAv5lhxoL5qKNZxs7TiCMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVj8wM38ewo04EEh4i196Kg5zZvNCCUVxopmXbhr8Ja2yvc3hJEVzN q8VcSx6EZOxZDb5K9fI8Xy8U++DVb5VSgq5mTkmv8nhyLV3mLIbVLmSGygTmBKvk slhBWqhwHnwmzNd7MpcINXZnPm9vaAZ1OUJ3FB4UDyBPalQUT2nB33jpqr+eEQ6V pEPBjLP4pVfiDVeAvqg5UEtDjaOPMwAYsx2pSjX/ErQGIbTWoMcWcnnQUYRncPcB e/VxZq92BAPONShRWkDLy0eaVZQgvXd3kmzzoKHHif/IXpL+WtghXs9HdzLioZkr SNRXtkhPMakM6Z/DcbPraYdv4x1i11+X -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:47 2025 by rpki-client