$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: TVIpusxuBpVSXJ2ztXEbgpmqCsYxWqee/reS5yBeevs= Subject key identifier: B1:C6:68:9F:9E:3B:DF:13:71:92:05:79:31:A6:32:50:DE:C8:56:10 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 0416 Signing time: Fri 25 Apr 2025 00:15:00 +0000 Manifest this update: Fri 25 Apr 2025 00:15:00 +0000 Manifest next update: Fri 02 May 2025 00:15:00 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: /rnjAcJqcCAh7/iKfj6gqqOyUfehBkpRBagLyl/i3j4=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Apr 25 00:15:00 2025 GMT Not After : May 2 00:15:00 2025 GMT Subject: CN=680ad404-4ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:d3:6b:c8:68:8c:19:ac:71:3a:dd:d5:5c: f1:d6:27:6b:5f:3e:a0:91:86:4a:e7:ed:cf:c1:00: f6:e7:e7:e8:22:1a:61:75:9a:fe:55:80:5a:9f:96: e3:b2:26:90:a4:82:b9:a7:1e:a0:c0:6f:82:30:46: c4:40:fa:80:b9:da:f5:90:c0:b7:eb:cf:ad:c1:3c: 01:de:a6:e1:d3:26:39:54:94:44:10:1b:46:f3:92: f6:f9:5f:1b:dd:95:2f:40:ea:c7:a5:c5:88:e7:57: 44:22:11:c2:3b:6d:f3:13:b5:f8:89:47:ab:2b:f9: d0:2c:08:bb:6a:61:86:68:e8:97:70:eb:94:c5:64: 72:1b:0d:d8:b4:51:f6:a0:e2:3e:ca:e1:b1:78:e5: b0:82:19:44:19:a5:2e:76:9f:27:e7:41:25:ae:f2: b1:7d:27:b2:75:d9:9c:23:80:66:4e:6a:b9:1e:72: 2a:b8:8b:3d:a6:f3:10:77:79:25:ef:2b:b6:db:74: 7a:cc:b7:d4:82:f8:db:2a:96:37:99:ff:23:e3:fd: 5e:c6:55:6d:95:e0:87:8d:5d:dd:20:78:a5:bd:11: 83:c4:eb:b9:ea:0d:eb:92:ae:14:dc:43:d0:fd:06: 7d:cb:16:d6:d1:cf:4c:03:18:9b:f2:39:39:12:65: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:68:9F:9E:3B:DF:13:71:92:05:79:31:A6:32:50:DE:C8:56:10 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:af:b6:e7:b8:e4:7a:aa:84:a1:b6:e1:2d:3b:fd:ae:56:69: da:41:45:92:89:85:47:54:23:11:16:c7:c7:5a:11:4e:3a:f9: 22:b5:57:e2:eb:6f:ca:58:6a:10:f9:a0:57:97:ea:c0:e4:2a: e0:4d:2c:6d:5a:e5:55:af:d0:39:ad:f5:4d:f1:3e:f8:60:8c: 96:b3:16:73:13:e3:aa:77:3c:07:a7:31:0d:80:de:ef:67:e1: 1b:24:a2:19:49:4d:1c:c5:58:59:b6:5d:45:3e:bd:fc:c8:02: e4:b2:a7:69:3c:80:81:4d:28:0e:9f:46:bd:04:37:f6:9f:d1: 53:d0:51:88:df:ce:18:0c:79:c3:59:e4:36:32:6c:ee:5a:df: 66:4c:d3:69:77:39:99:dc:56:03:79:4a:81:07:57:7b:47:25: 8d:6d:e4:8d:40:12:2b:86:56:ae:3d:ce:13:28:45:bd:47:31: e2:d3:1d:81:5f:5d:bb:d0:5f:fa:f5:1a:7a:c4:c7:16:cd:0c: db:ee:c2:aa:ed:70:5a:82:23:f6:07:dd:3a:89:0d:be:83:4a: d0:8b:4d:e5:05:0c:75:3a:91:59:2f:ba:2c:a0:13:b8:ac:65: 05:44:b6:da:f3:36:02:4f:95:27:f9:5e:6c:8c:c9:bc:09:89: 6a:db:43:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjUwNDI1MDAxNTAwWhcNMjUwNTAyMDAxNTAwWjAYMRYwFAYD VQQDEw02ODBhZDQwNC00ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p/Ta8hojBmscTrd1Vzx1idrXz6gkYZK5+3PwQD25+foIhphdZr+VYBan5bj siaQpIK5px6gwG+CMEbEQPqAudr1kMC368+twTwB3qbh0yY5VJREEBtG85L2+V8b 3ZUvQOrHpcWI51dEIhHCO23zE7X4iUerK/nQLAi7amGGaOiXcOuUxWRyGw3YtFH2 oOI+yuGxeOWwghlEGaUudp8n50ElrvKxfSeyddmcI4BmTmq5HnIquIs9pvMQd3kl 7yu223R6zLfUgvjbKpY3mf8j4/1exlVtleCHjV3dIHilvRGDxOu56g3rkq4U3EPQ /QZ9yxbW0c9MAxib8jk5EmUcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHGaJ+e O98TcZIFeTGmMlDeyFYQMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQr7bnuOR6qoShtuEtO/2uVmnaQUWSiYVHVCMRFsfHWhFOOvkitVfi 62/KWGoQ+aBXl+rA5CrgTSxtWuVVr9A5rfVN8T74YIyWsxZzE+OqdzwHpzENgN7v Z+EbJKIZSU0cxVhZtl1FPr38yALksqdpPICBTSgOn0a9BDf2n9FT0FGI384YDHnD WeQ2MmzuWt9mTNNpdzmZ3FYDeUqBB1d7RyWNbeSNQBIrhlauPc4TKEW9RzHi0x2B X1270F/69Rp6xMcWzQzb7sKq7XBagiP2B906iQ2+g0rQi03lBQx1OpFZL7osoBO4 rGUFRLba8zYCT5Un+V5sjMm8CYlq20Ng -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:07 2025 by rpki-client