$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json) Hash identifier: P+WR6eVfDt/3Rd92SKJBS/WZ8QD3Jc+evdzWbSd+I6k= Subject key identifier: A9:D0:51:D0:4A:08:6D:32:84:83:D3:AA:1F:95:76:62:18:BC:FF:3E Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft Manifest number: 7A Signing time: Fri 25 Apr 2025 05:44:45 +0000 Manifest this update: Fri 25 Apr 2025 05:44:45 +0000 Manifest next update: Fri 02 May 2025 05:44:45 +0000 Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: 9nBk5ZDIIQAQk+krbAwuMgQpzeHZ6bOydPvh0qScysQ=) 2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: WL6knuhT+IT7g3hW2IRpH1KnEWqyPmGpIe/IXLQK6so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Validity Not Before: Apr 25 05:44:45 2025 GMT Not After : May 2 05:44:45 2025 GMT Subject: CN=680b214d-599f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:a2:2b:37:88:13:60:3e:e9:d1:a6:4a:33: 2a:c5:a8:05:66:d1:64:fc:e9:8d:4a:53:0a:c7:0b: a5:cb:90:c8:c5:c3:8f:74:2d:96:12:39:fe:8e:f4: 3f:08:65:c1:bb:e9:a4:01:0b:87:55:5c:c7:0c:1d: 9e:e6:d3:80:bf:bd:0d:5d:2a:aa:f5:7a:81:0a:a7: b1:24:18:f4:0e:f9:77:d2:bf:e2:5e:1d:d8:b7:cb: 30:96:c3:5b:6a:be:5d:94:63:5f:8a:cf:91:b6:59: ad:3a:3c:4f:d6:d1:ac:0f:d5:7f:aa:88:05:78:ac: e3:a9:41:c4:d8:13:99:c4:ae:76:6f:af:71:fe:21: f3:5b:3b:e2:c9:e3:b2:02:12:b8:1a:06:9c:27:22: 18:b8:29:2f:94:67:37:d6:e0:e4:0b:77:a8:5e:22: ef:1e:47:66:31:01:5a:d0:42:dd:f6:48:c8:97:6c: 88:cc:27:8f:bb:42:f4:0f:97:aa:45:5c:00:8e:32: 0f:bf:9d:8b:ee:2d:4b:2d:3f:bd:62:bb:b5:bc:23: 78:20:83:d5:06:b1:ca:8e:c5:38:eb:bd:be:14:eb: 99:fe:e1:2f:06:bf:b7:4f:50:11:51:cf:a2:36:3f: a0:15:8f:9d:d3:a7:f0:6e:5c:0b:59:a9:b8:a1:9c: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:51:D0:4A:08:6D:32:84:83:D3:AA:1F:95:76:62:18:BC:FF:3E X509v3 Authority Key Identifier: keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:c9:ab:40:c3:74:38:94:e1:b2:da:d8:c0:7d:4a:67:9a: 41:7c:01:f5:b4:b1:71:58:dd:7e:60:1f:2f:91:47:aa:cf:9d: 5b:eb:ab:a9:b1:22:81:bc:f9:3a:08:11:1c:1f:4e:ce:fb:d7: 69:0b:db:51:42:77:41:e0:09:64:d1:eb:18:36:a0:22:de:1b: d8:68:56:89:fc:2c:80:d9:75:7e:6f:8b:9f:12:76:ec:73:9d: 07:70:bd:a4:da:bf:c0:7a:38:73:d4:e1:fd:fa:b2:c4:53:64: b1:e0:ac:e1:a0:bb:2a:35:42:c7:4a:c7:df:6c:84:57:d0:37: c6:29:53:c2:0c:0b:93:08:df:15:aa:6a:eb:c5:b1:57:f4:8c: 83:4f:46:45:71:ce:92:a5:48:02:14:6e:e8:e9:a9:09:e0:ca: 51:e6:1c:62:9b:c4:8d:45:21:c2:45:bc:53:9b:93:87:0f:0b: f4:ee:bd:98:1a:26:1b:3e:bd:b7:59:42:74:eb:ba:27:85:36: c0:ba:88:9c:54:d9:74:e5:3b:65:63:94:5a:e3:ea:d4:a3:a6: 60:3f:a4:6a:d3:92:fb:ac:9b:ee:66:4a:f4:20:1d:85:86:c9: 89:40:2c:05:60:72:ec:7d:56:35:75:cd:bb:3a:f4:72:18:4f: 8d:91:ce:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUNCQTExMC8GA1UEBRMoOEQ4QTgwRUM3MjBBRTdFRDUzRkQyMTAzRThFNjlDODU1 NUFEMEY4NjAeFw0yNTA0MjUwNTQ0NDVaFw0yNTA1MDIwNTQ0NDVaMBgxFjAUBgNV BAMTDTY4MGIyMTRkLTU5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd66IrN4gTYD7p0aZKMyrFqAVm0WT86Y1KUwrHC6XLkMjFw490LZYSOf6O9D8I ZcG76aQBC4dVXMcMHZ7m04C/vQ1dKqr1eoEKp7EkGPQO+XfSv+JeHdi3yzCWw1tq vl2UY1+Kz5G2Wa06PE/W0awP1X+qiAV4rOOpQcTYE5nErnZvr3H+IfNbO+LJ47IC ErgaBpwnIhi4KS+UZzfW4OQLd6heIu8eR2YxAVrQQt32SMiXbIjMJ4+7QvQPl6pF XACOMg+/nYvuLUstP71iu7W8I3ggg9UGscqOxTjrvb4U65n+4S8Gv7dPUBFRz6I2 P6AVj53Tp/BuXAtZqbihnJrHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqdBR0EoI bTKEg9OqH5V2Yhi8/z4wHwYDVR0jBBgwFoAUjYqA7HIK5+1T/SED6OachVWtD4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQ0JBLzU4M0UyQjlBNkI2 NTExRUZBODU3RTgwQ0M0RjlBRTAyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvallxQTdISUs1LTFUX1NFRDZPYWNoVld0RDRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF Q0JBLzU4M0UyQjlBNkI2NTExRUZBODU3RTgwQ0M0RjlBRTAyL2pZcUE3SElLNS0x VF9TRUQ2T2FjaFZXdEQ0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfUyatAw3Q4lOGy2tjAfUpnmkF8AfW0sXFY3X5gHy+RR6rPnVvrq6mx IoG8+ToIERwfTs7712kL21FCd0HgCWTR6xg2oCLeG9hoVon8LIDZdX5vi58Sduxz nQdwvaTav8B6OHPU4f36ssRTZLHgrOGguyo1QsdKx99shFfQN8YpU8IMC5MI3xWq auvFsVf0jINPRkVxzpKlSAIUbujpqQngylHmHGKbxI1FIcJFvFObk4cPC/TuvZga Jhs+vbdZQnTruieFNsC6iJxU2XTlO2VjlFrj6tSjpmA/pGrTkvusm+5mSvQgHYWG yYlALAVgcux9VjV1zbs69HIYT42RzpI= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:43 2025 by rpki-client