$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 8jptTGNKSIzzdkBsvr57AcRWRUMH5ACyYzrn21Kvjro= Subject key identifier: 2A:A8:10:9B:AC:D4:BD:15:AC:C5:54:82:A1:08:F3:23:8E:2A:CD:50 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1122 Signing time: Thu 24 Apr 2025 19:33:10 +0000 Manifest this update: Thu 24 Apr 2025 19:33:09 +0000 Manifest next update: Thu 01 May 2025 19:33:09 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: xRX3JZZKbZ3EesizIrmdsyUxflVIP0CMsvi9B+F9bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Apr 24 19:33:09 2025 GMT Not After : May 1 19:33:09 2025 GMT Subject: CN=680a91f5-0dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:88:d3:62:30:40:09:98:6a:0f:5b:f4:8e: 80:f4:11:77:c6:cb:85:68:15:f9:5b:d9:9e:cd:8e: 25:3d:63:57:f1:14:bb:4f:54:63:0a:28:13:31:40: 4f:cd:75:45:7a:d9:7a:eb:39:df:91:0a:0f:66:b7: 0a:69:99:e9:d6:e9:67:fb:1e:0b:92:7f:0e:cb:e2: 08:f7:6a:16:29:8e:1f:66:d2:87:6a:c0:eb:0b:eb: bf:4d:3a:db:03:b0:c8:fa:54:6f:da:3e:87:78:71: 0a:7b:9a:ba:ec:6d:79:b2:37:05:bf:d6:a9:3f:11: cb:28:10:4a:3a:a0:ad:62:1a:7b:ec:29:23:31:f2: 9f:a6:81:db:74:d6:f6:64:88:50:69:7a:61:74:3a: e3:3c:b0:e4:3f:8c:45:10:23:dc:40:ca:84:60:e3: 07:fc:26:7b:4b:cf:1e:c0:b0:03:30:5c:02:ef:6f: 7e:bd:a3:18:b7:cb:65:03:03:54:25:03:f7:51:8c: 70:f8:c9:9c:e4:f2:db:72:74:a4:2e:5a:d6:00:a0: b6:97:08:35:28:73:92:68:66:57:67:d6:27:6c:47: 0f:d0:ae:7c:1b:b0:13:ba:64:73:5b:19:41:30:7c: 6e:e4:90:cc:5b:17:6c:aa:ac:ce:66:24:d1:44:81: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:10:9B:AC:D4:BD:15:AC:C5:54:82:A1:08:F3:23:8E:2A:CD:50 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cf:a4:f4:46:24:21:64:5b:f8:b2:35:e0:5d:3c:88:ce:71: b2:3f:3c:bf:7b:20:54:f0:0f:08:84:fa:1c:66:0a:df:0e:c4: 2e:87:ae:e7:e8:1d:f7:c4:18:48:b0:a2:6c:1e:67:84:2d:6d: e3:f1:f8:56:7c:2b:d7:9b:90:29:aa:09:73:72:f3:4d:cd:1e: 32:63:17:2b:59:e1:44:ed:e4:34:a6:41:59:5e:8c:41:d0:b1: a0:fc:52:df:f0:47:94:1a:f8:af:2e:ff:01:aa:d0:95:93:e8: b7:11:cf:e4:cf:36:37:27:cf:22:38:81:6a:46:7d:08:a0:7d: 8a:8e:96:27:b4:78:fe:a4:45:37:d2:69:ae:d4:32:2a:69:f7: aa:f0:3d:29:bc:44:1a:4f:9e:d7:70:e7:a8:2f:4b:c4:73:5b: e0:d3:f5:53:b6:ed:cc:67:54:6b:f8:9b:e7:d9:2d:cf:6b:85: 9d:18:3f:12:af:d6:d0:ac:9c:cd:f2:b7:b2:4d:b4:7b:1f:4f: 30:2e:4d:be:f5:4f:eb:76:ad:69:2c:cd:95:bf:53:92:61:a9: c7:49:e0:be:1f:f7:27:df:d9:fe:23:72:21:58:e8:71:90:b7: 39:79:1d:e3:44:dc:36:67:55:ba:a7:a8:bf:9c:4d:17:dc:a2: 5f:26:f5:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwNDI0MTkzMzA5WhcNMjUwNTAxMTkzMzA5WjAYMRYwFAYD VQQDEw02ODBhOTFmNS0wZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoWI02IwQAmYag9b9I6A9BF3xsuFaBX5W9mezY4lPWNX8RS7T1RjCigTMUBP zXVFetl66znfkQoPZrcKaZnp1uln+x4Lkn8Oy+II92oWKY4fZtKHasDrC+u/TTrb A7DI+lRv2j6HeHEKe5q67G15sjcFv9apPxHLKBBKOqCtYhp77CkjMfKfpoHbdNb2 ZIhQaXphdDrjPLDkP4xFECPcQMqEYOMH/CZ7S88ewLADMFwC729+vaMYt8tlAwNU JQP3UYxw+Mmc5PLbcnSkLlrWAKC2lwg1KHOSaGZXZ9YnbEcP0K58G7ATumRzWxlB MHxu5JDMWxdsqqzOZiTRRIEQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqoEJus 1L0VrMVUgqEI8yOOKs1QMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwz6T0RiQhZFv4sjXgXTyIznGyPzy/eyBU8A8IhPocZgrfDsQuh67n 6B33xBhIsKJsHmeELW3j8fhWfCvXm5ApqglzcvNNzR4yYxcrWeFE7eQ0pkFZXoxB 0LGg/FLf8EeUGvivLv8BqtCVk+i3Ec/kzzY3J88iOIFqRn0IoH2KjpYntHj+pEU3 0mmu1DIqafeq8D0pvEQaT57XcOeoL0vEc1vg0/VTtu3MZ1Rr+Jvn2S3Pa4WdGD8S r9bQrJzN8reyTbR7H08wLk2+9U/rdq1pLM2Vv1OSYanHSeC+H/cn39n+I3IhWOhx kLc5eR3jRNw2Z1W6p6i/nE0X3KJfJvVA -----END CERTIFICATE-----Generated at Sat Apr 26 09:10:12 2025 by rpki-client