$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: VHBFCPj151yDriGFZXK6X0nsx6crxyY3oScuUqmBp4U= Subject key identifier: A3:D3:89:B3:59:E2:E4:98:68:77:B0:D9:70:EB:65:F2:E6:98:AA:9C Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 1166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 1140 Signing time: Thu 24 Apr 2025 17:16:30 +0000 Manifest this update: Thu 24 Apr 2025 17:16:29 +0000 Manifest next update: Thu 01 May 2025 17:16:29 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: UidDlZ+9XXojNjSPaQQ7f9ub8COsHTinFlO8y//c0rw=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4454 (0x1166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Apr 24 17:16:29 2025 GMT Not After : May 1 17:16:29 2025 GMT Subject: CN=680a71ee-3b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:7c:83:05:55:d2:80:a2:b0:ba:02:3a:23: a6:d6:32:0c:3b:77:a1:61:1d:ad:6e:2a:d2:9c:55: 6d:c2:0a:63:63:0f:d7:24:f7:98:c8:d3:16:e4:8b: 9c:c2:68:e4:6c:b3:fd:16:ef:d5:f0:cf:9b:41:6c: 33:85:d2:40:b7:6c:7a:71:02:82:e1:55:df:c6:57: f3:85:0c:75:49:d4:20:87:8c:cf:b2:ad:2b:54:29: a9:c1:bd:00:54:aa:a0:08:55:b2:ea:df:6d:c8:5f: d3:89:04:ba:78:72:1c:6a:79:44:36:f7:f3:e1:c4: b7:1b:3e:3b:9b:ad:71:36:1d:90:86:07:80:93:26: ff:a8:4a:eb:c0:ef:92:2c:ae:ef:12:f1:18:a9:dd: 0f:66:1c:dc:36:cd:6b:33:7f:b9:54:c3:21:29:dd: d6:14:bf:2a:92:66:71:fb:b7:75:9b:bb:bf:a3:9a: 39:30:49:03:58:12:0e:0b:af:5a:7a:e9:c3:1a:0b: 68:2e:4c:37:56:b5:c1:1d:0b:1a:e2:c1:84:25:ae: b7:88:c2:17:1d:7e:62:e4:30:01:27:07:fc:1f:f3: 30:34:66:ef:13:fe:71:c3:15:30:12:5d:df:b5:ad: 9e:a9:5f:90:a5:9c:40:af:0e:de:15:7c:61:c3:1a: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D3:89:B3:59:E2:E4:98:68:77:B0:D9:70:EB:65:F2:E6:98:AA:9C X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:55:1d:b2:e8:d9:ae:13:d6:cd:96:94:40:11:0c:7d:8e:5e: 98:02:b3:49:51:20:cb:08:0c:bd:fb:3e:95:31:fb:86:e3:9c: f4:67:e5:f3:ef:84:6f:c5:f1:12:54:35:39:85:b4:05:b5:c7: 9b:a8:80:19:50:d9:f3:54:be:67:37:cb:fe:bf:f5:fb:a4:5a: e7:1d:b6:98:7f:30:c7:06:3e:cf:ca:77:53:2d:17:de:53:b1: 7d:2d:48:37:51:76:5c:4b:1d:d8:44:00:81:9e:7d:ce:2b:ac: 58:60:77:56:d5:dd:94:6d:31:e1:4d:1a:7f:1b:a8:b4:4a:3c: 1c:de:29:66:a6:26:bd:43:33:89:73:ff:97:db:58:72:22:48: bd:48:a2:4f:0e:77:00:02:5e:ea:34:bb:37:a0:ea:ac:81:a3: 79:4d:6b:bf:36:42:8e:67:de:81:11:1b:10:ff:db:f1:08:28: c7:26:12:e8:b5:03:1e:46:4f:3c:dd:d1:b8:ea:53:1e:03:40: 5a:19:f9:b2:98:52:44:ff:ae:0d:35:07:3e:9c:54:a3:07:8c: 85:b0:d4:79:bc:52:5a:d6:2a:25:05:55:cc:c0:b1:f0:70:c0: a4:61:8f:74:31:d0:ea:41:de:db:48:b5:41:6b:a9:45:2f:1b: dd:a1:61:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwNDI0MTcxNjI5WhcNMjUwNTAxMTcxNjI5WjAYMRYwFAYD VQQDEw02ODBhNzFlZS0zYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOp8gwVV0oCisLoCOiOm1jIMO3ehYR2tbirSnFVtwgpjYw/XJPeYyNMW5Iuc wmjkbLP9Fu/V8M+bQWwzhdJAt2x6cQKC4VXfxlfzhQx1SdQgh4zPsq0rVCmpwb0A VKqgCFWy6t9tyF/TiQS6eHIcanlENvfz4cS3Gz47m61xNh2QhgeAkyb/qErrwO+S LK7vEvEYqd0PZhzcNs1rM3+5VMMhKd3WFL8qkmZx+7d1m7u/o5o5MEkDWBIOC69a eunDGgtoLkw3VrXBHQsa4sGEJa63iMIXHX5i5DABJwf8H/MwNGbvE/5xwxUwEl3f ta2eqV+QpZxArw7eFXxhwxrS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPTibNZ 4uSYaHew2XDrZfLmmKqcMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VR2y6NmuE9bNlpRAEQx9jl6YArNJUSDLCAy9+z6VMfuG45z0Z+Xz 74RvxfESVDU5hbQFtcebqIAZUNnzVL5nN8v+v/X7pFrnHbaYfzDHBj7PyndTLRfe U7F9LUg3UXZcSx3YRACBnn3OK6xYYHdW1d2UbTHhTRp/G6i0Sjwc3ilmpia9QzOJ c/+X21hyIki9SKJPDncAAl7qNLs3oOqsgaN5TWu/NkKOZ96BERsQ/9vxCCjHJhLo tQMeRk883dG46lMeA0BaGfmymFJE/64NNQc+nFSjB4yFsNR5vFJa1iolBVXMwLHw cMCkYY90MdDqQd7bSLVBa6lFLxvdoWEX -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:58 2025 by rpki-client