$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: 7Dp4BHX12/dENa7gbOdJ6DUV4EB5A006qvthASUJ/A8= Subject key identifier: 4E:D0:E8:0B:F4:37:E2:53:D9:93:5C:48:E4:A4:AB:68:62:09:12:B3 Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: 97 Signing time: Fri 25 Apr 2025 05:22:44 +0000 Manifest this update: Fri 25 Apr 2025 05:22:43 +0000 Manifest next update: Fri 02 May 2025 05:22:43 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: PAwLhiunmduRFivRFFXfbeVZ2cWfhqAvQiSA0621xLs=) 2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=) 3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: RWKYaNgfk7P7N5uSJ3tE2gik3mua1Il7oXxrRLWnbWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Apr 25 05:22:43 2025 GMT Not After : May 2 05:22:43 2025 GMT Subject: CN=680b1c24-c87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:97:e0:d4:67:d5:fd:80:91:02:fe:45:f3: 80:85:2d:72:c4:0b:9f:6d:70:90:fd:9b:65:7d:e0: 24:80:a2:2b:5e:28:c3:a0:be:dc:7e:dc:8a:62:87: d5:67:9b:80:54:f9:d7:50:6b:c2:52:b7:db:37:c8: 6b:0b:4a:cd:db:3b:db:0b:e2:74:ff:e8:72:18:ed: 58:89:8d:c4:0e:66:59:69:3f:1d:8a:fc:ea:a7:fc: 5e:7f:b0:eb:12:e7:08:df:6d:d4:b2:62:01:be:57: 9f:ba:35:0e:b6:6d:c9:b5:75:6b:1a:02:8f:b4:6e: 7f:80:05:9e:e6:55:56:d0:e7:d1:07:ef:4c:23:26: 72:a4:54:76:dc:cf:27:e3:7e:2b:37:d4:f8:bf:77: ed:1c:5f:ba:04:76:2d:eb:81:dc:0e:b2:55:ce:80: 4f:9a:9f:c0:19:b9:aa:86:6c:48:de:b5:5c:5b:34: 6d:04:9f:9c:c4:d9:c7:8b:68:b6:ed:bb:0c:7c:ec: 06:d0:0b:9a:b2:27:5d:d3:90:3f:f5:17:50:50:2d: d8:6f:7c:0d:71:03:86:20:97:d6:f5:9a:d2:39:28: 47:c4:27:7f:98:45:b5:a7:e1:f8:c0:a6:52:0f:9b: 92:ba:f4:0e:12:61:f8:b7:e4:d5:27:d7:4e:3c:9e: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:E8:0B:F4:37:E2:53:D9:93:5C:48:E4:A4:AB:68:62:09:12:B3 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:74:6b:30:bd:b2:2f:48:5a:7e:c7:5e:1f:ab:5d:ce:e8:e5: ef:b3:cb:83:9d:8b:f8:e3:70:f1:aa:d0:2d:61:44:45:18:af: 0d:18:a2:14:3e:32:d6:07:bf:e7:55:c5:dc:0f:e9:58:23:e1: 95:9b:62:da:40:5c:6b:56:e2:41:0e:87:e4:6d:0c:43:43:3d: 6b:fc:e1:3d:b6:c8:10:a3:8c:3f:a2:2f:40:66:42:70:b2:2d: 74:3f:07:8b:7b:01:9b:78:f0:2a:c5:d7:f5:32:1b:24:4a:0f: fb:a6:ed:15:fa:82:12:aa:f9:c9:f5:f3:d5:39:5c:63:b8:a5: 76:62:c9:77:9a:c0:7c:c3:c3:3f:62:e3:85:d1:92:e0:62:2c: 8d:fb:b2:c3:c2:01:82:44:ab:c3:75:11:ca:d7:44:02:b1:2e: a2:68:6a:57:21:f1:78:51:e4:47:60:7b:4b:11:23:2b:06:16: c0:b4:43:42:95:33:37:43:4c:25:34:9a:39:9f:b0:44:ca:c4: 16:a3:28:14:42:d0:36:ec:8c:01:49:20:4e:c5:c5:28:c3:34: f9:52:fd:3f:bb:dd:f5:71:36:63:60:37:d4:60:6e:fd:33:15: 92:91:b4:15:53:90:16:c1:33:bb:d7:a8:1c:9c:5f:35:d4:9b: 4c:58:66:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwNDI1MDUyMjQzWhcNMjUwNTAyMDUyMjQzWjAYMRYwFAYD VQQDEw02ODBiMWMyNC1jODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtGX4NRn1f2AkQL+RfOAhS1yxAufbXCQ/ZtlfeAkgKIrXijDoL7cftyKYofV Z5uAVPnXUGvCUrfbN8hrC0rN2zvbC+J0/+hyGO1YiY3EDmZZaT8divzqp/xef7Dr EucI323UsmIBvlefujUOtm3JtXVrGgKPtG5/gAWe5lVW0OfRB+9MIyZypFR23M8n 434rN9T4v3ftHF+6BHYt64HcDrJVzoBPmp/AGbmqhmxI3rVcWzRtBJ+cxNnHi2i2 7bsMfOwG0Auasidd05A/9RdQUC3Yb3wNcQOGIJfW9ZrSOShHxCd/mEW1p+H4wKZS D5uSuvQOEmH4t+TVJ9dOPJ5a8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7Q6Av0 N+JT2ZNcSOSkq2hiCRKzMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBydGswvbIvSFp+x14fq13O6OXvs8uDnYv443DxqtAtYURFGK8NGKIU PjLWB7/nVcXcD+lYI+GVm2LaQFxrVuJBDofkbQxDQz1r/OE9tsgQo4w/oi9AZkJw si10PweLewGbePAqxdf1MhskSg/7pu0V+oISqvnJ9fPVOVxjuKV2Ysl3msB8w8M/ YuOF0ZLgYiyN+7LDwgGCRKvDdRHK10QCsS6iaGpXIfF4UeRHYHtLESMrBhbAtENC lTM3Q0wlNJo5n7BEysQWoygUQtA27IwBSSBOxcUowzT5Uv0/u931cTZjYDfUYG79 MxWSkbQVU5AWwTO716gcnF811JtMWGZg -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:17 2025 by rpki-client