$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: cyT2ikuMfcZasuQeF3zvfmzSJIk55uWvpIz7KFkrg18= Subject key identifier: 18:E4:77:F3:FC:91:07:17:CD:CF:ED:0D:C0:37:29:65:16:46:80:49 Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 0407 Signing time: Fri 25 Apr 2025 00:16:52 +0000 Manifest this update: Fri 25 Apr 2025 00:16:52 +0000 Manifest next update: Fri 02 May 2025 00:16:52 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: 4NcQrOBRcSj0ZUaJ/QgULLBVNPV/fvba1iuNUltAejU=) 2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: Apr 25 00:16:52 2025 GMT Not After : May 2 00:16:52 2025 GMT Subject: CN=680ad474-984d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:98:97:9d:4b:04:dc:77:d2:e3:a3:0e:64: c3:b6:67:d7:a0:88:6a:e7:c1:30:96:1e:fd:ad:84: 13:52:fe:c1:6c:b6:1c:39:4e:91:3a:4b:70:6c:84: a3:61:7a:d1:09:17:08:29:72:a0:18:85:e5:35:45: 7a:21:72:99:85:2e:54:86:c0:f0:8f:87:73:27:30: ba:47:7c:ce:6e:8a:a5:2f:b1:bd:87:ed:02:d0:b4: 42:f5:ed:dc:2c:b8:59:fb:87:05:1b:cc:10:bf:1f: dc:83:df:f9:b6:6b:63:b7:11:5f:c0:42:4f:5e:ab: 6f:8f:6d:5a:6a:06:77:1d:4b:82:1d:99:ef:c3:fc: 90:0f:0d:b9:f8:30:ad:d4:55:a4:4e:59:9a:13:f3: 7b:5d:a2:fd:e2:cb:bb:f8:b2:b5:1b:89:13:3c:6c: 56:9b:2a:46:4e:85:c7:e9:d8:c2:57:65:ea:ce:86: 98:d6:d6:c4:cf:6a:e3:33:96:5a:04:7b:7a:1e:17: 7f:a5:16:1e:30:b5:ca:b1:39:75:6c:e4:01:36:95: 01:02:b0:b4:62:f3:62:52:8c:c9:0f:9a:22:39:e9: 93:30:c3:54:32:55:41:27:01:c5:d8:f3:ec:37:6b: 07:9c:fe:78:8d:c1:db:bd:19:98:3c:1a:d1:9b:5a: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E4:77:F3:FC:91:07:17:CD:CF:ED:0D:C0:37:29:65:16:46:80:49 X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:03:0d:3f:24:52:32:2b:0a:9a:95:bf:28:cf:7d:56:42: 08:d2:ba:27:de:f5:e2:da:14:c1:b4:64:ee:3f:70:2c:bc:1c: 80:73:8d:06:20:e1:24:3f:4b:f7:da:26:5e:93:6e:1c:f8:d4: 73:95:2f:0b:ec:6a:2e:a7:bf:6a:7b:8f:ed:8e:67:40:75:31: 6f:3f:96:e8:c2:ad:2d:d0:6e:d5:ee:bb:27:9a:94:e2:f6:42: 81:96:38:22:6c:39:5c:5d:8a:64:32:e2:d2:6b:41:93:ab:6a: f9:50:6f:bf:eb:0b:20:d9:ae:ba:80:a0:0e:0f:c5:c7:56:fa: c6:14:c5:0e:a0:2c:31:ea:40:26:38:a8:5c:0e:7d:df:b3:5d: c3:64:81:00:2d:f4:85:c4:c3:cd:41:15:f5:fd:b1:a6:b0:6a: 52:ec:75:e2:25:76:0c:ce:46:0c:a6:2f:bd:c2:15:00:a4:29: 8a:0d:00:ee:3b:ab:56:9b:3b:5f:dc:56:d9:18:0c:f7:0d:cc: c4:52:3a:5b:24:56:62:5a:9d:a4:be:8e:67:0b:b0:63:37:18: 44:c8:5a:81:3b:69:a0:4e:50:10:0a:1b:38:2e:02:f4:85:a0: 73:4e:1b:47:d8:c8:a0:d2:d6:04:0f:ba:05:f8:59:92:36:92: a1:17:1a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjUwNDI1MDAxNjUyWhcNMjUwNTAyMDAxNjUyWjAYMRYwFAYD VQQDEw02ODBhZDQ3NC05ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza+Yl51LBNx30uOjDmTDtmfXoIhq58Ewlh79rYQTUv7BbLYcOU6ROktwbISj YXrRCRcIKXKgGIXlNUV6IXKZhS5UhsDwj4dzJzC6R3zOboqlL7G9h+0C0LRC9e3c LLhZ+4cFG8wQvx/cg9/5tmtjtxFfwEJPXqtvj21aagZ3HUuCHZnvw/yQDw25+DCt 1FWkTlmaE/N7XaL94su7+LK1G4kTPGxWmypGToXH6djCV2XqzoaY1tbEz2rjM5Za BHt6Hhd/pRYeMLXKsTl1bOQBNpUBArC0YvNiUozJD5oiOemTMMNUMlVBJwHF2PPs N2sHnP54jcHbvRmYPBrRm1oyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjkd/P8 kQcXzc/tDcA3KWUWRoBJMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzgMNPyRSMisKmpW/KM99VkII0ron3vXi2hTBtGTuP3AsvByAc40G IOEkP0v32iZek24c+NRzlS8L7Goup79qe4/tjmdAdTFvP5bowq0t0G7V7rsnmpTi 9kKBljgibDlcXYpkMuLSa0GTq2r5UG+/6wsg2a66gKAOD8XHVvrGFMUOoCwx6kAm OKhcDn3fs13DZIEALfSFxMPNQRX1/bGmsGpS7HXiJXYMzkYMpi+9whUApCmKDQDu O6tWmztf3FbZGAz3DczEUjpbJFZiWp2kvo5nC7BjNxhEyFqBO2mgTlAQChs4LgL0 haBzThtH2Mig0tYED7oF+FmSNpKhFxry -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:49 2025 by rpki-client