$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json) Hash identifier: N5rYIbX+D2Rqniwvlt6hcElhtlS/wWRn9II3qIgCiXQ= Subject key identifier: B6:23:FE:4A:1C:A3:E5:1A:87:AB:08:CF:F2:5A:CC:A5:0A:15:A7:A7 Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft Manifest number: 0987 Signing time: Thu 24 Apr 2025 19:59:17 +0000 Manifest this update: Thu 24 Apr 2025 19:59:17 +0000 Manifest next update: Thu 01 May 2025 19:59:17 +0000 Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: HYImBAbVzrTv2Ns9O74D4IkciEsLfCRol90iYBzuC8s=) 2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: LX76oihYc6Vcq0IqMjxINDxugVvobb/j/buf30BAPmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Validity Not Before: Apr 24 19:59:17 2025 GMT Not After : May 1 19:59:17 2025 GMT Subject: CN=680a9815-47b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:71:6b:3e:1f:8f:6c:03:e4:5d:89:b6:3b: 94:22:d6:af:81:ea:e7:1f:78:31:43:4b:b7:82:10: bd:10:0f:a2:cc:63:4a:8f:be:dd:8b:0b:76:c4:81: fa:59:ff:07:b4:80:d5:69:7a:dc:d2:9b:43:4b:00: dd:a1:7a:5f:11:5f:13:fc:6e:74:b5:11:89:7e:a3: 9e:51:d7:11:63:3c:5c:7f:81:ff:72:a2:a1:65:74: e7:9e:83:7c:4d:ab:52:41:50:2d:3e:2b:62:2c:7a: 22:14:a3:4f:e6:fb:e4:90:ae:8f:e3:b4:b6:96:54: b7:46:41:c6:3c:16:6b:b7:e4:3f:97:8e:0b:eb:e9: 82:9e:fe:8c:a9:38:06:44:a4:1f:57:8c:33:ca:1b: 1a:fa:5f:5a:fb:dc:e5:f3:ad:13:dc:ec:47:fa:2c: 58:60:10:0d:86:a8:40:77:e9:11:37:6a:93:aa:15: 31:1c:8c:8d:ba:77:1a:d9:a7:f0:a1:f8:e1:07:00: ad:c2:8f:f2:fe:2e:80:ec:58:dd:d6:17:91:6d:2c: 43:36:77:ac:98:26:5d:cf:b7:b5:64:b4:f3:a6:18: e3:91:7e:c0:d1:53:dc:14:76:db:5a:ff:24:cd:14: 03:75:a9:c4:4e:4a:96:4a:8a:57:42:46:61:5b:8c: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:FE:4A:1C:A3:E5:1A:87:AB:08:CF:F2:5A:CC:A5:0A:15:A7:A7 X509v3 Authority Key Identifier: keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:9a:04:fb:22:4c:cf:70:4e:66:bb:45:57:ed:44:ae:10: bb:f3:f1:84:ef:e4:54:7c:bd:52:c6:d1:b6:25:bd:95:ab:39: f7:27:5c:97:c4:a8:1a:a9:6c:db:71:c5:c8:71:b6:ea:0c:c5: 32:3b:5d:f8:5a:12:89:e2:0b:49:e2:5f:b1:4c:88:71:7b:5b: ce:95:9d:08:0d:76:a8:80:cd:be:dc:76:3e:e2:94:44:3c:b3: 3e:65:1b:57:9f:e7:33:9d:be:57:0f:5c:10:5b:81:f9:51:37: 98:b8:c5:d0:f5:c7:19:e7:3c:63:78:7a:ee:a3:48:e7:7b:ab: f3:d6:35:ae:8e:f0:96:eb:39:bf:61:19:87:b2:19:e2:3c:f8: b5:5a:04:4f:16:03:3b:54:58:76:e9:9e:e1:e1:d7:9e:e7:05: 3a:42:54:cf:0c:f6:87:2b:f3:9e:04:fa:e9:43:dd:ed:ad:f0: 71:0c:2d:da:e6:51:18:dd:67:bf:e7:8d:a0:70:e6:4d:da:89: 51:61:6c:47:e2:aa:f1:09:99:c7:75:1c:2c:ff:05:86:ec:cc: 52:94:09:04:55:d3:90:67:f2:27:f7:85:c6:fc:6d:b3:0a:8a: b8:d6:84:a1:10:a0:9f:79:6a:14:95:5b:04:d4:60:83:78:84: 01:d0:25:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz NEQwMTAyNzcwHhcNMjUwNDI0MTk1OTE3WhcNMjUwNTAxMTk1OTE3WjAYMRYwFAYD VQQDEw02ODBhOTgxNS00N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA135xaz4fj2wD5F2JtjuUItavgernH3gxQ0u3ghC9EA+izGNKj77diwt2xIH6 Wf8HtIDVaXrc0ptDSwDdoXpfEV8T/G50tRGJfqOeUdcRYzxcf4H/cqKhZXTnnoN8 TatSQVAtPitiLHoiFKNP5vvkkK6P47S2llS3RkHGPBZrt+Q/l44L6+mCnv6MqTgG RKQfV4wzyhsa+l9a+9zl860T3OxH+ixYYBANhqhAd+kRN2qTqhUxHIyNunca2afw ofjhBwCtwo/y/i6A7Fjd1heRbSxDNnesmCZdz7e1ZLTzphjjkX7A0VPcFHbbWv8k zRQDdanETkqWSopXQkZhW4zICQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYj/koc o+Uah6sIz/JazKUKFaenMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5 NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr WlMzWE1IVHlnc00wMEJBbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLzpoE+yJMz3BOZrtFV+1ErhC78/GE7+RUfL1SxtG2Jb2Vqzn3J1yX xKgaqWzbccXIcbbqDMUyO134WhKJ4gtJ4l+xTIhxe1vOlZ0IDXaogM2+3HY+4pRE PLM+ZRtXn+cznb5XD1wQW4H5UTeYuMXQ9ccZ5zxjeHruo0jne6vz1jWujvCW6zm/ YRmHshniPPi1WgRPFgM7VFh26Z7h4dee5wU6QlTPDPaHK/OeBPrpQ93trfBxDC3a 5lEY3We/542gcOZN2olRYWxH4qrxCZnHdRws/wWG7MxSlAkEVdOQZ/In94XG/G2z Coq41oShEKCfeWoUlVsE1GCDeIQB0CXz -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:47 2025 by rpki-client