$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: bQUSnE8ElAP1NHpjEhosXPmQxIT/IRXw2AVgwH3Tmt4= Subject key identifier: 7C:F6:90:ED:D6:F7:4B:5D:71:18:DB:62:9C:CC:FF:C6:9D:8D:B4:D2 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 25FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 25E7 Signing time: Thu 24 Apr 2025 15:44:14 +0000 Manifest this update: Thu 24 Apr 2025 15:44:14 +0000 Manifest next update: Thu 01 May 2025 15:44:14 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: /ff3iPCFI0A+6DuD98xvPPn5yZfxYEaUZibbqigoP6I=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9726 (0x25fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Apr 24 15:44:14 2025 GMT Not After : May 1 15:44:14 2025 GMT Subject: CN=680a5c4e-fca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:ac:48:69:c9:f1:48:37:6b:d2:e2:89:68: 99:27:ce:09:92:c9:af:92:65:c6:61:7a:b0:1a:ec: 5c:cf:77:93:21:36:1d:98:9d:d3:e5:06:72:41:32: 76:25:86:fb:83:06:2c:5a:ef:74:68:c6:ad:43:f9: 1e:ef:26:38:88:41:01:e5:7b:ae:8e:1f:12:7b:93: 44:32:14:4d:19:25:6b:53:4b:af:c8:fd:f7:a9:0e: ed:59:90:2c:2f:6c:03:8e:ee:04:96:e7:a1:7f:3f: e2:9f:bd:62:eb:2f:ec:a7:f8:be:6b:e4:83:d7:39: 77:a6:6c:fb:84:3f:68:8a:97:12:a7:14:d0:f5:d1: 96:e9:f8:8a:8b:df:51:e1:cc:0e:5d:eb:02:09:46: f5:ce:bf:1c:da:15:c1:ef:95:72:86:88:56:0a:de: 92:52:1a:81:f4:4f:fa:6d:63:c0:e4:c1:18:ad:e4: 6e:be:ca:30:4b:f5:9d:f1:aa:14:29:f2:09:2a:6b: e0:b8:42:29:dd:3e:85:df:16:3f:4c:8e:07:46:a6: 6d:6b:fa:80:f8:74:5c:cd:7c:b5:05:2a:22:73:e6: c4:0a:a5:b2:7f:3a:0f:16:c4:24:05:0f:8f:e3:86: 29:49:d0:a5:cf:e8:c5:b8:9f:5f:59:0b:f6:67:30: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:90:ED:D6:F7:4B:5D:71:18:DB:62:9C:CC:FF:C6:9D:8D:B4:D2 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8c:0f:8f:bb:20:eb:96:74:79:db:1d:b2:f1:97:dd:d0:d0: 47:4f:4e:19:bb:ae:72:c6:3b:43:d4:f1:c2:1e:25:1e:09:46: 27:58:38:52:bf:7c:10:4b:9b:28:4a:de:c0:dc:e1:4e:84:d8: 94:7f:9d:c9:46:02:14:fc:b3:96:89:04:ca:a7:90:3e:bf:3f: a0:68:1d:06:8d:f0:cc:84:25:b5:6b:a1:2b:e9:d5:5d:6c:87: ec:d8:80:07:ba:5b:b2:0b:5a:4f:2a:b7:7b:ad:b0:93:42:99: da:06:59:eb:51:09:00:4c:a3:ee:a0:96:6a:0d:0b:b8:cb:b2: df:da:7c:83:ff:f5:b6:93:ef:7a:ef:f6:45:3e:84:36:7f:f6: 9e:70:aa:74:78:af:71:9f:dc:ca:00:9c:47:22:22:01:a0:df: 1c:5c:2f:fc:66:da:4b:4f:bb:e3:48:c0:f2:d0:71:b0:46:3d: 0a:91:84:6d:d9:94:6a:0d:99:b6:38:0e:4c:de:8e:d6:60:f0: e0:33:6c:11:2a:b6:ba:44:a3:e6:3b:d6:61:de:2e:72:6a:30: 6f:d0:31:91:6d:d7:9c:21:cc:84:07:62:90:9e:30:cc:a4:e4: de:2d:ff:83:6c:19:25:33:16:6d:91:1b:18:2c:2f:27:5f:bc: be:0b:fd:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUwNDI0MTU0NDE0WhcNMjUwNTAxMTU0NDE0WjAYMRYwFAYD VQQDEw02ODBhNWM0ZS1mY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tKsSGnJ8Ug3a9LiiWiZJ84JksmvkmXGYXqwGuxcz3eTITYdmJ3T5QZyQTJ2 JYb7gwYsWu90aMatQ/ke7yY4iEEB5Xuujh8Se5NEMhRNGSVrU0uvyP33qQ7tWZAs L2wDju4Eluehfz/in71i6y/sp/i+a+SD1zl3pmz7hD9oipcSpxTQ9dGW6fiKi99R 4cwOXesCCUb1zr8c2hXB75VyhohWCt6SUhqB9E/6bWPA5MEYreRuvsowS/Wd8aoU KfIJKmvguEIp3T6F3xY/TI4HRqZta/qA+HRczXy1BSoic+bECqWyfzoPFsQkBQ+P 44YpSdClz+jFuJ9fWQv2ZzAWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz2kO3W 90tdcRjbYpzM/8adjbTSMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjA+PuyDrlnR52x2y8Zfd0NBHT04Zu65yxjtD1PHCHiUeCUYnWDhS v3wQS5soSt7A3OFOhNiUf53JRgIU/LOWiQTKp5A+vz+gaB0GjfDMhCW1a6Er6dVd bIfs2IAHuluyC1pPKrd7rbCTQpnaBlnrUQkATKPuoJZqDQu4y7Lf2nyD//W2k+96 7/ZFPoQ2f/aecKp0eK9xn9zKAJxHIiIBoN8cXC/8ZtpLT7vjSMDy0HGwRj0KkYRt 2ZRqDZm2OA5M3o7WYPDgM2wRKra6RKPmO9Zh3i5yajBv0DGRbdecIcyEB2KQnjDM pOTeLf+DbBklMxZtkRsYLC8nX7y+C/35 -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:28 2025 by rpki-client