$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: 78aBRGaBSMIZiEJD4+yk5oDH3dbR6zMVtgFgrWHEuyY= Subject key identifier: B5:B9:79:06:7B:90:2A:10:78:66:93:6F:86:72:A2:37:F6:41:DA:3C Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0BDC Signing time: Thu 24 Apr 2025 18:43:44 +0000 Manifest this update: Thu 24 Apr 2025 18:43:43 +0000 Manifest next update: Thu 01 May 2025 18:43:43 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: XHohDqm1IA9JOB9OjIiB/Ajo4OvMqzTcyUFnotGKS9c=) 2: 65866C4815D111EABE986319C4F9AE02.roa (hash: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Apr 24 18:43:43 2025 GMT Not After : May 1 18:43:43 2025 GMT Subject: CN=680a8660-04a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:ad:e3:48:2b:cc:18:30:b6:5e:e3:b1:7e: f1:cb:da:af:b2:9a:e9:50:08:20:b5:e9:a1:18:8e: 7a:8b:29:d2:d6:7b:57:a5:4d:98:9b:30:2d:e0:95: 45:cc:85:cb:65:65:cd:d7:50:d3:6e:2f:a4:51:b9: ce:6f:f0:d6:68:c8:11:08:e3:18:db:68:5a:20:60: 84:59:aa:8c:63:b7:53:ba:85:ee:d9:72:7f:7d:a8: 39:5b:32:5b:d3:26:39:36:10:ae:13:19:2f:5b:4f: a6:a8:83:1c:37:87:9e:2e:fd:9f:39:38:5c:31:94: b6:53:07:73:12:8c:24:1c:31:8e:23:0d:76:12:11: b8:b9:c8:45:c9:47:47:b2:7e:06:48:c9:61:7a:d0: 34:c6:de:bb:ac:bc:81:a0:47:2a:d9:47:4c:0d:c2: ab:4b:67:1e:f4:a7:71:c7:16:42:f4:da:ce:02:72: 67:08:c4:c7:70:ac:cb:ba:5c:91:03:4d:9d:78:9c: b6:4c:53:7f:fb:7c:0b:78:85:bb:07:18:0a:aa:bc: c7:bd:d6:22:33:65:c1:82:e9:b1:2d:41:22:fb:83: 97:26:da:3f:c5:5f:c0:9b:3f:94:1e:54:25:41:78: ce:df:24:8e:19:d6:85:a0:d2:94:c2:c2:b8:65:91: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:79:06:7B:90:2A:10:78:66:93:6F:86:72:A2:37:F6:41:DA:3C X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:63:14:56:c7:b6:a9:14:0f:db:7a:e1:ed:e8:1d:d6:0e: 0b:64:7b:0a:85:84:5f:98:a8:38:c7:55:fd:d5:d1:8b:b6:d7: a2:43:5e:cc:86:95:c8:59:94:17:cf:ed:7e:39:e0:cf:ee:2a: 91:5a:00:76:ae:a6:10:fe:34:f4:ba:4e:c1:e2:f1:a8:fa:35: c0:0d:de:aa:63:28:30:cc:a0:ae:af:a8:5c:8e:18:23:d1:7a: 59:86:fe:07:77:48:25:64:31:6c:01:e2:b2:22:d4:61:5a:a2: 4f:4c:2d:a8:bc:18:5b:bd:8a:e0:f0:37:ad:2a:16:d4:7e:b2: 9f:56:61:38:1a:2b:04:93:b5:e8:6c:01:0c:fd:a0:22:cf:8f: ed:40:b7:67:d4:62:06:02:4e:e8:cb:89:5e:ee:67:0b:f8:5e: f2:76:f6:d9:e0:7d:7e:97:d7:d6:0b:80:a1:ee:23:29:66:cd: 97:6d:99:6f:6e:c8:0b:be:ef:69:fd:96:59:a5:fa:72:a4:b0: 78:a0:4b:3f:b5:b5:05:70:82:f4:74:86:89:f5:91:52:58:55: 4b:f6:82:86:f6:35:91:45:86:66:98:dc:eb:37:c7:dd:96:c8: e3:05:53:56:60:f1:7a:c5:56:e2:e6:70:8e:04:b2:c2:b0:b3: 44:83:24:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUwNDI0MTg0MzQzWhcNMjUwNTAxMTg0MzQzWjAYMRYwFAYD VQQDEw02ODBhODY2MC0wNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24Kt40grzBgwtl7jsX7xy9qvsprpUAggtemhGI56iynS1ntXpU2YmzAt4JVF zIXLZWXN11DTbi+kUbnOb/DWaMgRCOMY22haIGCEWaqMY7dTuoXu2XJ/fag5WzJb 0yY5NhCuExkvW0+mqIMcN4eeLv2fOThcMZS2UwdzEowkHDGOIw12EhG4uchFyUdH sn4GSMlhetA0xt67rLyBoEcq2UdMDcKrS2ce9KdxxxZC9NrOAnJnCMTHcKzLulyR A02deJy2TFN/+3wLeIW7BxgKqrzHvdYiM2XBgumxLUEi+4OXJto/xV/Amz+UHlQl QXjO3ySOGdaFoNKUwsK4ZZGKMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW5eQZ7 kCoQeGaTb4Zyojf2Qdo8MB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAobmMUVse2qRQP23rh7egd1g4LZHsKhYRfmKg4x1X91dGLtteiQ17M hpXIWZQXz+1+OeDP7iqRWgB2rqYQ/jT0uk7B4vGo+jXADd6qYygwzKCur6hcjhgj 0XpZhv4Hd0glZDFsAeKyItRhWqJPTC2ovBhbvYrg8DetKhbUfrKfVmE4GisEk7Xo bAEM/aAiz4/tQLdn1GIGAk7oy4le7mcL+F7ydvbZ4H1+l9fWC4Ch7iMpZs2XbZlv bsgLvu9p/ZZZpfpypLB4oEs/tbUFcIL0dIaJ9ZFSWFVL9oKG9jWRRYZmmNzrN8fd lsjjBVNWYPF6xVbi5nCOBLLCsLNEgyQg -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:57 2025 by rpki-client