$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: VTQgDrD3pjRFNkAydK8HwfMj4qCpIZ4c0VzuyE3B/84= Subject key identifier: E9:E0:9A:4B:6C:76:2D:DE:A2:FE:89:EF:5E:4D:0F:A0:A7:A3:11:3A Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: DE Signing time: Fri 25 Apr 2025 04:34:47 +0000 Manifest this update: Fri 25 Apr 2025 04:34:47 +0000 Manifest next update: Fri 02 May 2025 04:34:47 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: tshNVEhANrK0tw3LXKGXX75FfwOalvpH+cCg3+GHJkw=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: FahO57/kleWU7XXU2TFFnm9z6kb0GxU9AkbmiTKJzXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Apr 25 04:34:47 2025 GMT Not After : May 2 04:34:47 2025 GMT Subject: CN=680b10e7-9d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:25:6e:bb:2b:ee:8a:47:db:1f:df:4d:cc: 1e:e6:c8:e5:27:d4:d8:0c:d5:e5:6e:5d:4b:e1:31: b7:3c:46:4e:5a:6a:ae:d4:cf:9a:0e:e1:5c:57:df: 02:e3:f0:c6:7b:aa:39:cb:21:fe:38:36:15:6a:3f: ab:7a:60:cd:ee:ce:3a:ec:54:e8:af:81:e2:36:6e: 6c:c5:e8:0c:bb:d4:b3:c1:fa:39:74:b0:2b:be:74: b6:e1:cc:02:48:76:81:87:43:68:49:6c:fd:fb:57: 93:aa:19:32:7a:92:76:8d:25:8c:39:78:7a:23:a7: 88:eb:95:23:35:53:4f:3c:8b:2f:a9:ea:5f:87:17: 55:60:8c:af:45:68:47:6c:e8:5d:d9:cd:97:1d:3d: 72:0d:d2:2c:f5:62:72:5b:1d:d7:ed:7f:0c:bc:5d: 4d:3c:bf:4e:2c:46:f9:5d:ed:90:27:dd:6b:c2:35: c9:50:61:1c:48:26:19:f1:1d:6d:4f:c0:46:73:1e: 1d:3d:7b:de:0c:3e:9d:8f:c7:49:5b:61:0d:d4:b5: 33:b1:9b:55:21:c5:9a:b5:60:54:5f:8e:7f:db:a9: 76:f2:4d:b0:9f:95:b2:6a:43:79:69:56:51:48:ef: 01:76:d1:a6:2b:11:a3:96:45:84:89:92:6d:49:6b: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:9A:4B:6C:76:2D:DE:A2:FE:89:EF:5E:4D:0F:A0:A7:A3:11:3A X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7a:76:ae:03:ea:e8:68:e5:c1:9a:8e:fb:75:1c:00:f3:9c: 45:b4:eb:21:32:98:99:ba:44:9a:d6:be:ec:26:64:33:91:2a: 5f:1f:75:68:ed:af:d2:5c:a7:90:11:34:09:55:e0:13:99:a5: 3a:b3:72:3b:73:f4:f5:42:91:a8:c7:7f:27:59:93:10:a4:14: bd:20:34:07:be:bf:cc:90:db:ee:5e:0e:b1:60:3d:e5:0c:49: c1:92:fb:9f:ad:e2:8f:f1:af:2b:dc:a9:0a:52:97:38:8c:8e: 6f:85:1f:a3:18:fb:c5:7c:7e:0a:ae:ee:5f:53:0c:b2:22:cb: ba:aa:d5:74:dc:f4:a0:fc:40:bb:e9:17:24:44:02:a9:4f:29: 5d:6d:c7:2c:9e:9e:d7:6f:91:c3:bb:85:df:14:e2:f2:67:c8: 34:a7:b5:67:eb:e5:56:42:92:ae:70:03:f8:3f:fe:72:7c:88: 3f:5d:6b:f4:e4:0f:cf:1b:d2:64:79:2d:48:7e:bc:18:06:4e: 58:e1:9a:94:8e:1b:5a:d3:0d:95:2c:73:43:84:58:b6:81:9c: 17:81:8d:ba:c4:b0:a7:1c:28:c3:76:6d:44:e5:bb:0a:76:ff: 60:ed:84:27:df:70:3a:1b:2a:74:22:f0:7a:e2:ca:81:f9:af: 98:3c:e8:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwNDI1MDQzNDQ3WhcNMjUwNTAyMDQzNDQ3WjAYMRYwFAYD VQQDEw02ODBiMTBlNy05ZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3wlbrsr7opH2x/fTcwe5sjlJ9TYDNXlbl1L4TG3PEZOWmqu1M+aDuFcV98C 4/DGe6o5yyH+ODYVaj+remDN7s467FTor4HiNm5sxegMu9Szwfo5dLArvnS24cwC SHaBh0NoSWz9+1eTqhkyepJ2jSWMOXh6I6eI65UjNVNPPIsvqepfhxdVYIyvRWhH bOhd2c2XHT1yDdIs9WJyWx3X7X8MvF1NPL9OLEb5Xe2QJ91rwjXJUGEcSCYZ8R1t T8BGcx4dPXveDD6dj8dJW2EN1LUzsZtVIcWatWBUX45/26l28k2wn5WyakN5aVZR SO8BdtGmKxGjlkWEiZJtSWtalwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOngmkts di3eov6J715ND6CnoxE6MB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFenauA+roaOXBmo77dRwA85xFtOshMpiZukSa1r7sJmQzkSpfH3Vo 7a/SXKeQETQJVeATmaU6s3I7c/T1QpGox38nWZMQpBS9IDQHvr/MkNvuXg6xYD3l DEnBkvufreKP8a8r3KkKUpc4jI5vhR+jGPvFfH4Kru5fUwyyIsu6qtV03PSg/EC7 6RckRAKpTyldbccsnp7Xb5HDu4XfFOLyZ8g0p7Vn6+VWQpKucAP4P/5yfIg/XWv0 5A/PG9JkeS1IfrwYBk5Y4ZqUjhta0w2VLHNDhFi2gZwXgY26xLCnHCjDdm1E5bsK dv9g7YQn33A6Gyp0IvB64sqB+a+YPOha -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:01 2025 by rpki-client