$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json) Hash identifier: wVH4Dsw1rgec9LqiVqT6Q9nNlYsNpVyrKN2pzb6A3ro= Subject key identifier: 8E:98:00:82:81:E6:0C:4C:25:8F:6E:22:67:B6:EE:34:E3:6C:2C:DC Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft Manifest number: 8D Signing time: Fri 25 Apr 2025 05:28:49 +0000 Manifest this update: Fri 25 Apr 2025 05:28:49 +0000 Manifest next update: Fri 02 May 2025 05:28:49 +0000 Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: 8WgqoeDrtstBaXBxTvoGTImIsrWFQ/a0e/PakflpzvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Validity Not Before: Apr 25 05:28:49 2025 GMT Not After : May 2 05:28:49 2025 GMT Subject: CN=680b1d91-4e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:f4:76:4d:f1:ec:d4:0b:72:59:c9:0e:71: 0d:c4:4a:70:82:8a:75:22:5c:ff:06:3d:32:08:ce: a7:64:75:60:be:3a:9f:b2:90:7c:08:45:0f:dc:da: 5e:f8:60:79:1f:7b:98:5b:7b:f8:cc:43:ca:a1:fd: 88:8a:bd:bc:9e:70:1f:22:20:27:a2:06:2b:28:55: 94:b8:d1:57:ca:3d:26:a5:3d:42:c7:a8:35:72:35: 41:24:76:f7:8b:51:40:30:44:a5:54:bb:9d:e6:f3: 59:42:b8:c9:86:14:bb:65:69:e1:31:0a:a2:b4:bc: f0:94:4d:ed:38:35:9c:17:c2:bb:38:2a:4b:6e:d2: 22:11:18:e9:f2:1d:5c:01:11:de:c7:88:b9:c2:81: 02:d2:6a:e6:f0:74:1d:fe:f4:9b:1f:4d:60:76:81: f5:94:42:b8:46:ef:ed:d3:e2:c4:00:3b:d0:fb:4b: f0:de:ba:09:0e:1a:86:f0:ff:2d:4b:44:92:1a:eb: 67:c1:92:e8:d9:2c:4f:33:38:63:f8:41:e8:99:2b: 0e:8a:19:5c:a4:6d:54:6a:fc:d8:50:72:57:4a:5f: e1:b1:e5:23:04:4f:15:72:68:9f:43:2a:d3:71:3b: 10:3a:93:2e:a5:c8:3d:fb:ac:75:5f:00:e5:1e:10: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:00:82:81:E6:0C:4C:25:8F:6E:22:67:B6:EE:34:E3:6C:2C:DC X509v3 Authority Key Identifier: keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7d:3e:9c:f3:09:34:20:e0:7e:61:4f:ef:82:a6:4a:29:b0: 77:83:a7:8b:61:d1:7b:01:77:07:8f:37:c2:7c:bb:2b:23:44: 78:3c:11:61:53:ba:70:c9:6f:27:48:90:a2:fb:2f:47:b9:02: b0:22:c0:51:b9:a2:ac:04:36:59:b5:0f:a2:3e:db:1b:35:77: 1f:5c:2e:5e:90:c9:0a:79:d0:7a:2f:f2:4e:0f:e8:02:97:51: 6e:32:37:43:dd:8d:d9:0c:0e:bc:d9:1f:56:35:fc:23:b6:a5: 66:a1:61:2f:49:13:c9:22:57:28:0f:67:00:1a:bd:23:07:c0: fa:9c:10:50:2a:fd:b3:20:6e:30:2a:70:fc:e5:52:2a:a8:2f: ef:8e:92:5b:b6:81:ef:0f:3f:56:af:0c:52:7e:1f:fb:6e:ac: c0:a2:a9:a5:6f:c4:32:cc:8d:2b:bf:d6:98:03:d5:29:7f:86: 77:eb:6c:a0:da:05:33:8d:a5:a4:bb:7d:68:19:52:5a:72:d5: 44:87:85:92:6e:ac:04:38:c5:db:d6:7b:c5:aa:f7:1d:76:47: 26:2c:fb:a9:aa:9a:f5:8a:22:b0:9d:56:70:40:04:c4:7a:8a: 05:aa:b9:35:24:5d:d2:ec:8f:c6:75:85:b9:e4:e3:be:fe:2b: db:d3:2a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKDYyQ0E5QzEyNkUxNEZGQkJCQzNENjQwNzEwNUVCRTE1 MUI5OTYwNUIwHhcNMjUwNDI1MDUyODQ5WhcNMjUwNTAyMDUyODQ5WjAYMRYwFAYD VQQDEw02ODBiMWQ5MS00ZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN30dk3x7NQLclnJDnENxEpwgop1Ilz/Bj0yCM6nZHVgvjqfspB8CEUP3Npe +GB5H3uYW3v4zEPKof2Iir28nnAfIiAnogYrKFWUuNFXyj0mpT1Cx6g1cjVBJHb3 i1FAMESlVLud5vNZQrjJhhS7ZWnhMQqitLzwlE3tODWcF8K7OCpLbtIiERjp8h1c ARHex4i5woEC0mrm8HQd/vSbH01gdoH1lEK4Ru/t0+LEADvQ+0vw3roJDhqG8P8t S0SSGutnwZLo2SxPMzhj+EHomSsOihlcpG1UavzYUHJXSl/hseUjBE8VcmifQyrT cTsQOpMupcg9+6x1XwDlHhAEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6YAIKB 5gxMJY9uIme27jTjbCzcMB8GA1UdIwQYMBaAFGLKnBJuFP+7vD1kBxBevhUbmWBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80ODRGMjZFNjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83dThQV1FIRUY2LUZSdVpZ RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzcWNFbTRVXzd1OFBXUUhFRjYtRlJ1WllGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80ODRGMjZFNjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83 dThQV1FIRUY2LUZSdVpZRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcfT6c8wk0IOB+YU/vgqZKKbB3g6eLYdF7AXcHjzfCfLsrI0R4PBFh U7pwyW8nSJCi+y9HuQKwIsBRuaKsBDZZtQ+iPtsbNXcfXC5ekMkKedB6L/JOD+gC l1FuMjdD3Y3ZDA682R9WNfwjtqVmoWEvSRPJIlcoD2cAGr0jB8D6nBBQKv2zIG4w KnD85VIqqC/vjpJbtoHvDz9WrwxSfh/7bqzAoqmlb8QyzI0rv9aYA9Upf4Z362yg 2gUzjaWku31oGVJactVEh4WSbqwEOMXb1nvFqvcddkcmLPupqpr1iiKwnVZwQATE eooFqrk1JF3S7I/GdYW55OO+/ivb0yqT -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:41 2025 by rpki-client