$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft File: ySmS1w7OQRpiVb9AueCkUhSUQA0.mft (raw, json) Hash identifier: 41CjX00UxUQbS4ranKJGsQOjzNbUwcH6YWUjKNMAogM= Subject key identifier: EF:6D:00:80:39:BA:91:7A:32:81:25:D1:0F:48:1A:65:C3:25:36:3D Authority key identifier: C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D Certificate issuer: /CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Certificate serial: 0A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft Manifest number: 11B9 Signing time: Thu 24 Apr 2025 19:36:45 +0000 Manifest this update: Thu 24 Apr 2025 19:36:45 +0000 Manifest next update: Thu 01 May 2025 19:36:45 +0000 Files and hashes: 1: ySmS1w7OQRpiVb9AueCkUhSUQA0.crl (hash: P3sJ6IDQLI2xvkP3Ecejc4QaJs/zGitDcmCwP0aD8Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Validity Not Before: Apr 24 19:36:45 2025 GMT Not After : May 1 19:36:45 2025 GMT Subject: CN=680a92cd-309d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:0d:2f:57:f2:08:81:00:3a:b8:ef:49:82: 1c:7b:c1:ae:d3:0a:6b:5f:45:6b:95:e7:95:e0:1f: 6d:e7:25:5a:c1:2f:bc:3d:4c:51:04:bd:82:63:63: e8:ab:fe:76:f1:ec:92:77:fe:e6:01:99:71:f0:83: 19:c9:46:ca:fb:6c:18:88:3d:fe:4e:3a:ad:3a:77: 7f:fa:a4:06:54:2a:8e:9a:66:2e:eb:60:b8:24:fd: 5c:16:b6:16:1c:6b:af:c8:1e:95:bc:63:df:fc:ab: 78:96:88:25:da:d8:34:87:e6:83:09:e0:4f:5f:c3: ca:12:a0:d7:2a:5f:ba:3e:8b:e2:17:d0:d1:c9:38: 65:51:b7:40:4e:60:a1:22:f1:fe:c7:22:aa:eb:8a: 18:8f:6d:9c:2f:13:f0:a9:06:c1:1d:11:c3:63:53: 86:94:c0:20:68:ac:6f:a1:d3:71:f4:ed:c2:9b:3f: b0:ed:6c:0c:40:6f:72:f5:8e:d9:5e:43:7d:5f:6e: 03:8b:6e:d6:42:50:fb:e6:31:64:bb:00:d1:4f:c0: e5:e7:e2:f9:fc:86:da:cf:de:d8:f4:0f:f6:7a:1d: 0f:34:31:68:7b:6b:f5:8e:55:cf:fc:60:11:a3:48: 6c:e0:eb:bd:fc:55:f1:f3:9d:25:ff:5b:10:08:63: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6D:00:80:39:BA:91:7A:32:81:25:D1:0F:48:1A:65:C3:25:36:3D X509v3 Authority Key Identifier: keyid:C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ec:f3:5c:8e:52:cf:83:7c:86:f7:cc:b9:cc:49:74:04:36: 8a:ad:92:e4:24:38:04:7b:07:70:20:b2:d2:3b:c1:00:fd:48: 8c:30:74:79:fb:16:00:4f:92:22:07:32:89:ba:be:c5:3c:76: e7:19:21:11:a7:ea:ae:4f:77:eb:e5:c1:10:52:6d:be:30:20: 9d:0d:7c:40:53:01:81:4c:b7:4f:de:d8:34:96:ee:1e:d0:25: 6d:98:e4:b2:9a:d1:98:eb:1e:f4:50:27:a0:99:3b:9a:44:c8: 80:98:28:e4:5d:88:7c:80:8f:e2:b3:6f:64:b8:3c:be:2f:a1: fe:b5:9b:2c:75:0e:20:c0:b8:6a:a4:13:c0:5b:ec:bf:1d:9f: 15:55:82:df:f2:b5:60:c4:cd:28:09:49:11:85:3d:2b:86:60: 66:bc:82:61:25:6e:79:96:ed:90:e4:29:34:72:13:c4:4c:72: 43:76:05:82:fa:c8:3d:81:f8:04:f4:8a:ec:51:a9:96:6c:cf: ce:ba:9d:c6:b1:2a:73:b2:8b:2d:31:8c:6f:2e:9c:44:99:7c: 4b:80:fb:53:d1:d9:17:8a:cb:ac:1d:7a:4a:55:b3:fc:a0:90: 13:fe:33:98:8b:1c:19:b7:00:22:52:b2:4a:57:42:df:cf:56: 48:1f:b1:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEM5Mjk5MkQ3MEVDRTQxMUE2MjU1QkY0MEI5RTBBNDUy MTQ5NDQwMEQwHhcNMjUwNDI0MTkzNjQ1WhcNMjUwNTAxMTkzNjQ1WjAYMRYwFAYD VQQDEw02ODBhOTJjZC0zMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHwNL1fyCIEAOrjvSYIce8Gu0wprX0VrleeV4B9t5yVawS+8PUxRBL2CY2Po q/528eySd/7mAZlx8IMZyUbK+2wYiD3+TjqtOnd/+qQGVCqOmmYu62C4JP1cFrYW HGuvyB6VvGPf/Kt4logl2tg0h+aDCeBPX8PKEqDXKl+6PoviF9DRyThlUbdATmCh IvH+xyKq64oYj22cLxPwqQbBHRHDY1OGlMAgaKxvodNx9O3Cmz+w7WwMQG9y9Y7Z XkN9X24Di27WQlD75jFkuwDRT8Dl5+L5/Ibaz97Y9A/2eh0PNDFoe2v1jlXP/GAR o0hs4Ou9/FXx850l/1sQCGMVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9tAIA5 upF6MoEl0Q9IGmXDJTY9MB8GA1UdIwQYMBaAFMkpktcOzkEaYlW/QLngpFIUlEAN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FScGlWYjlBdWVDa1VoU1VR QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTbVMxdzdPUVJwaVZiOUF1ZUNrVWhTVVFBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FS cGlWYjlBdWVDa1VoU1VRQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF7PNcjlLPg3yG98y5zEl0BDaKrZLkJDgEewdwILLSO8EA/UiMMHR5 +xYAT5IiBzKJur7FPHbnGSERp+quT3fr5cEQUm2+MCCdDXxAUwGBTLdP3tg0lu4e 0CVtmOSymtGY6x70UCegmTuaRMiAmCjkXYh8gI/is29kuDy+L6H+tZssdQ4gwLhq pBPAW+y/HZ8VVYLf8rVgxM0oCUkRhT0rhmBmvIJhJW55lu2Q5Ck0chPETHJDdgWC +sg9gfgE9IrsUamWbM/Oup3GsSpzsostMYxvLpxEmXxLgPtT0dkXisusHXpKVbP8 oJAT/jOYixwZtwAiUrJKV0Lfz1ZIH7El -----END CERTIFICATE-----Generated at Sat Apr 26 07:49:22 2025 by rpki-client