$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: u54lsO7AuIApQzYDJ784BQl5w8dDkcxd3LOI7+Z3n98= Subject key identifier: DF:DE:6E:F3:54:18:17:2C:0F:50:94:7A:94:B8:48:60:B4:BA:61:B8 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 0165 Signing time: Fri 25 Apr 2025 03:04:30 +0000 Manifest this update: Fri 25 Apr 2025 03:04:29 +0000 Manifest next update: Fri 02 May 2025 03:04:29 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: JLYH6Z4cDg3k+Q8dZvVaN4FQrGalbhv09PUa3Acatx0=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Apr 25 03:04:29 2025 GMT Not After : May 2 03:04:29 2025 GMT Subject: CN=680afbbe-0e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:f8:bd:15:e8:16:e4:3d:12:4d:9f:85:2a: 2d:50:33:b3:b5:fc:75:27:b8:c6:ae:8e:4c:df:62: 63:24:60:77:89:d8:19:df:d2:74:34:86:9b:8a:de: a1:31:94:21:e1:58:73:ed:42:7f:72:da:5a:1b:50: 40:44:e7:f3:4a:7d:d7:53:55:25:ef:6b:a8:1f:f9: 0e:9c:a4:14:21:c7:d3:4f:ee:91:84:84:6c:8f:4f: 26:4a:d0:20:f9:64:52:77:95:36:07:0a:7b:6b:43: 20:69:0a:f4:49:70:f1:b9:d5:86:0e:15:4b:3a:e8: 3a:59:f2:cf:a8:a5:32:63:47:bc:1a:13:02:02:97: 9d:3e:a6:cf:6e:0e:26:9f:22:8c:79:60:14:38:0f: 6b:65:f8:55:57:8d:32:a2:1b:ac:78:0e:cb:20:71: 0b:1e:57:45:bf:90:2a:5a:fc:c0:76:b9:57:35:fb: 1f:28:4b:78:8f:82:e3:91:e6:81:3c:26:33:fb:24: c8:56:e8:41:98:44:25:57:9f:49:ea:d5:9a:ae:fe: 64:d1:ec:4d:16:29:d6:0e:30:a9:ee:e8:9d:1b:94: 3c:4c:04:1c:bc:14:0c:a0:62:04:e4:17:41:03:e3: ee:b7:44:bb:e8:1e:09:9f:5f:4a:58:e3:37:f6:7a: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DE:6E:F3:54:18:17:2C:0F:50:94:7A:94:B8:48:60:B4:BA:61:B8 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f5:f1:f7:a3:75:b7:00:b9:48:91:3f:e0:c0:75:77:2d:97: 72:82:58:46:17:66:0f:d3:87:88:08:4b:fd:08:22:03:75:fa: f7:82:07:a0:f9:9c:8d:2e:b1:e1:43:76:90:04:ef:73:fa:3d: da:8f:a4:27:40:8f:69:84:32:1c:aa:eb:dc:b8:88:d6:15:51: b2:c2:17:e2:04:e1:bc:6a:06:85:18:e3:0f:43:12:2d:ab:73: b5:ed:15:87:f0:b6:7c:87:47:32:fa:e0:58:87:f1:cf:6a:f8: 9e:8d:3c:a6:44:e2:a6:cc:88:b3:a5:f7:d1:7f:e1:24:92:db: c6:db:14:74:03:b1:61:9f:5d:e4:27:c4:36:0e:cf:a5:a2:87: aa:6c:1e:33:a6:71:53:32:72:e7:67:e6:e7:1e:9f:de:75:07: d7:86:82:23:cc:e6:4d:cd:14:eb:cb:50:3c:f8:f4:29:13:23: 27:6e:9e:1d:f8:1b:df:ad:d1:7e:79:1e:4d:be:b1:3d:59:4c: c0:3f:c4:f8:34:b5:db:b3:f8:54:ac:e3:47:a8:5b:21:57:eb: 33:e5:36:42:93:5b:c9:bf:c1:8a:fd:07:79:18:4c:36:a5:19: cb:bf:65:4a:20:ec:90:73:72:26:76:f2:a9:bb:65:90:28:9d: be:05:6e:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUwNDI1MDMwNDI5WhcNMjUwNTAyMDMwNDI5WjAYMRYwFAYD VQQDEw02ODBhZmJiZS0wZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3v4vRXoFuQ9Ek2fhSotUDOztfx1J7jGro5M32JjJGB3idgZ39J0NIabit6h MZQh4Vhz7UJ/ctpaG1BAROfzSn3XU1Ul72uoH/kOnKQUIcfTT+6RhIRsj08mStAg +WRSd5U2Bwp7a0MgaQr0SXDxudWGDhVLOug6WfLPqKUyY0e8GhMCApedPqbPbg4m nyKMeWAUOA9rZfhVV40yohuseA7LIHELHldFv5AqWvzAdrlXNfsfKEt4j4LjkeaB PCYz+yTIVuhBmEQlV59J6tWarv5k0exNFinWDjCp7uidG5Q8TAQcvBQMoGIE5BdB A+Put0S76B4Jn19KWOM39npkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/ebvNU GBcsD1CUepS4SGC0umG4MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV9fH3o3W3ALlIkT/gwHV3LZdyglhGF2YP04eICEv9CCIDdfr3ggeg +ZyNLrHhQ3aQBO9z+j3aj6QnQI9phDIcquvcuIjWFVGywhfiBOG8agaFGOMPQxIt q3O17RWH8LZ8h0cy+uBYh/HPaviejTymROKmzIizpffRf+EkktvG2xR0A7Fhn13k J8Q2Ds+looeqbB4zpnFTMnLnZ+bnHp/edQfXhoIjzOZNzRTry1A8+PQpEyMnbp4d +BvfrdF+eR5NvrE9WUzAP8T4NLXbs/hUrONHqFshV+sz5TZCk1vJv8GK/Qd5GEw2 pRnLv2VKIOyQc3ImdvKpu2WQKJ2+BW4A -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:30 2025 by rpki-client