$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: Y2CUX1XZfhcHO4A6pOl4qs7s4VSicolYTa4rO0pdDsA= Subject key identifier: 30:02:9E:0A:60:7A:78:71:7B:6A:5C:24:3D:73:17:22:73:14:DE:67 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 0293 Signing time: Fri 25 Apr 2025 01:19:18 +0000 Manifest this update: Fri 25 Apr 2025 01:19:17 +0000 Manifest next update: Fri 02 May 2025 01:19:17 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: Wf3xvvg7xtJHbaICbLn6ZsLIqcB7t7lSezYUJEnpfx8=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Apr 25 01:19:17 2025 GMT Not After : May 2 01:19:17 2025 GMT Subject: CN=680ae315-b1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:b7:87:24:df:3e:0b:d9:dd:32:0e:5d:ea: f8:f9:10:ec:b5:e3:5a:eb:13:ae:30:e3:92:61:1d: e3:f7:62:0a:5a:2a:ff:48:62:cd:72:fa:b0:11:c0: 52:b7:9a:84:77:50:5c:9f:d2:5f:ea:f4:f1:c1:c5: f9:df:01:b9:c9:15:bd:a9:ac:20:59:ce:43:9c:9b: 2c:38:4c:7a:56:3c:09:df:0e:ef:ae:7b:d2:64:ff: 49:22:fe:bc:81:24:35:1e:4f:53:78:45:98:9d:03: 15:fa:fa:b3:20:83:1e:c8:ed:b4:05:f8:97:cc:2f: 7d:3f:0e:12:b2:be:39:c8:a1:da:d4:83:51:7f:c8: cb:8a:91:2b:4d:ea:45:fa:22:59:2d:71:5a:2b:3a: 2e:c5:85:51:bd:7b:6d:93:42:dc:08:f1:04:68:ce: 14:4a:43:96:9a:fd:33:bb:c9:93:7f:12:2c:c3:bc: 26:c8:94:fc:31:92:5b:a5:02:4d:8d:3a:da:49:38: 88:62:67:85:95:83:45:94:47:5e:df:33:7a:30:e7: 67:83:50:b0:0d:9e:d3:9e:79:54:57:6d:3e:d4:a1: 0c:97:a1:c1:ae:09:9a:52:ac:9d:0c:48:c6:85:d0: 85:27:2e:d9:b7:73:1a:d7:88:8e:c2:32:00:ee:a0: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:02:9E:0A:60:7A:78:71:7B:6A:5C:24:3D:73:17:22:73:14:DE:67 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6d:56:80:ab:61:80:60:ac:6c:d6:02:a9:2e:46:74:0f:10: 56:4a:d7:75:16:f3:a6:e5:36:af:0a:5d:d4:42:26:87:28:7c: 3c:1e:29:58:34:f9:af:cf:bc:95:77:ed:a1:48:5b:65:98:70: 1d:23:2a:41:b3:89:a5:be:53:9e:48:a3:6e:a9:4a:ed:7d:8a: 3e:3f:ec:62:c6:20:c8:e9:ed:f1:ad:10:74:3d:ee:6a:b5:5a: a7:47:ee:94:a2:38:44:db:ad:ae:0f:02:6a:6d:ca:1d:bb:55: e7:ad:98:4c:4c:d0:6e:0b:64:19:7c:65:a6:cd:8b:e5:b0:5e: 6b:f7:83:e5:53:8e:ba:2b:18:e9:22:ef:ce:37:11:a4:32:f0: 3d:2c:ad:81:c1:4e:63:19:27:13:98:b4:b1:f6:3e:a7:c0:2f: 4c:80:ee:4f:e9:b5:7a:e7:a8:88:0e:42:36:4c:e1:ca:e1:ff: 53:4b:f0:56:b4:90:e4:66:54:ab:d6:87:17:f3:eb:74:13:1e: 47:36:a4:38:2d:bf:87:86:52:21:90:fb:17:03:d5:74:cb:30: 52:47:8c:97:c9:21:8d:69:05:cf:77:9e:00:5c:fb:b4:c7:76: af:02:74:91:5c:2f:3c:c3:f8:e7:89:ea:29:a4:66:cf:c6:dd: 38:1d:c1:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwNDI1MDExOTE3WhcNMjUwNTAyMDExOTE3WjAYMRYwFAYD VQQDEw02ODBhZTMxNS1iMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPa3hyTfPgvZ3TIOXer4+RDsteNa6xOuMOOSYR3j92IKWir/SGLNcvqwEcBS t5qEd1Bcn9Jf6vTxwcX53wG5yRW9qawgWc5DnJssOEx6VjwJ3w7vrnvSZP9JIv68 gSQ1Hk9TeEWYnQMV+vqzIIMeyO20BfiXzC99Pw4Ssr45yKHa1INRf8jLipErTepF +iJZLXFaKzouxYVRvXttk0LcCPEEaM4USkOWmv0zu8mTfxIsw7wmyJT8MZJbpQJN jTraSTiIYmeFlYNFlEde3zN6MOdng1CwDZ7TnnlUV20+1KEMl6HBrgmaUqydDEjG hdCFJy7Zt3Ma14iOwjIA7qBCZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDACngpg enhxe2pcJD1zFyJzFN5nMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXbVaAq2GAYKxs1gKpLkZ0DxBWStd1FvOm5TavCl3UQiaHKHw8HilY NPmvz7yVd+2hSFtlmHAdIypBs4mlvlOeSKNuqUrtfYo+P+xixiDI6e3xrRB0Pe5q tVqnR+6UojhE262uDwJqbcodu1XnrZhMTNBuC2QZfGWmzYvlsF5r94PlU466Kxjp Iu/ONxGkMvA9LK2BwU5jGScTmLSx9j6nwC9MgO5P6bV656iIDkI2TOHK4f9TS/BW tJDkZlSr1ocX8+t0Ex5HNqQ4Lb+HhlIhkPsXA9V0yzBSR4yXySGNaQXPd54AXPu0 x3avAnSRXC88w/jnieoppGbPxt04HcHC -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:41 2025 by rpki-client