$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: epf6bOWgxfwaHj41n9whbVl6d9LQiNteAX7vmZ1eB9g= Subject key identifier: 74:7F:02:DF:E4:20:FC:AA:50:9A:F4:F5:3F:E9:0E:D8:DB:79:22:6B Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 5C Signing time: Fri 25 Apr 2025 06:08:56 +0000 Manifest this update: Fri 25 Apr 2025 06:08:55 +0000 Manifest next update: Fri 02 May 2025 06:08:55 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: y3+Xprwd/oQYNTd+cFq5A6/wTMGyekr4iqaPYTzf778=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Apr 25 06:08:55 2025 GMT Not After : May 2 06:08:55 2025 GMT Subject: CN=680b26f7-4422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:c9:f4:a0:81:b8:da:ab:02:15:2e:a2:1d: 69:a6:ae:2b:c1:1f:31:cd:3a:bd:39:e2:be:3a:89: e2:ca:86:bc:b1:2a:da:dd:8c:c6:ca:e4:a0:c9:7d: 8d:a3:01:6f:ea:05:cf:fc:ea:ca:a4:e7:58:40:69: d3:04:bb:71:cf:c3:31:ee:05:e4:69:06:cd:13:35: ee:13:ce:3c:f1:c0:8a:b0:f6:a9:91:6b:a3:94:5d: 0d:f7:28:81:62:13:48:4e:32:10:c5:88:92:f3:34: e3:78:db:81:26:54:ca:45:99:f1:e4:c8:c5:37:85: d9:cd:c6:0e:a4:7d:99:c3:4f:ec:cd:68:72:69:ab: 6a:e5:df:e5:e5:c7:7c:73:7b:13:ac:f3:7a:9d:c7: 41:f6:c7:e4:a6:89:af:74:41:91:f6:6b:25:8f:90: 1e:5b:ef:69:66:23:5f:c2:31:51:24:a3:c6:d8:55: 3c:3c:15:24:31:b2:4d:8e:c4:d4:65:eb:aa:fa:75: 72:3e:c5:16:7b:bc:29:f6:e7:71:12:c3:ae:73:1d: 1b:25:2b:ef:40:41:c9:76:85:7d:99:b0:4e:49:ba: 82:4a:5c:f2:48:a6:d9:86:f6:67:63:e9:b4:5c:72: fd:ac:19:40:c0:f8:d3:cd:56:94:53:98:76:31:56: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:02:DF:E4:20:FC:AA:50:9A:F4:F5:3F:E9:0E:D8:DB:79:22:6B X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cd:0d:69:e1:72:64:6b:9a:ad:e0:ee:80:0b:01:7e:a3:6d: 17:1f:97:d0:07:70:91:53:0a:5f:8d:b4:24:3a:44:c0:d5:b2: 4e:97:ba:7f:18:7e:db:51:83:76:33:52:06:6f:78:d3:f9:7a: c8:d8:93:2b:12:44:00:17:4e:48:e9:8d:c8:44:d1:2f:8e:b7: 2d:e4:a4:56:a3:8a:12:51:42:a4:30:1f:e0:de:04:16:5c:02: 25:2f:e6:97:7a:16:f0:54:9b:af:11:04:8f:e0:c0:55:5a:3d: f5:1c:31:11:31:cd:93:2b:e2:88:76:14:61:f2:f9:8e:df:dd: cc:92:98:c2:ef:24:84:b4:3d:59:5d:07:5b:cb:50:25:64:a9: fe:50:d9:3c:fe:d1:86:d5:08:d2:3d:45:d6:9b:aa:cf:10:c7: ee:e3:80:13:c0:71:b8:ca:89:52:51:eb:33:9d:2f:74:50:2b: e8:fd:02:a8:fa:43:ea:a9:18:db:1d:14:c5:4a:cd:b3:71:35: e4:16:12:f1:dd:48:22:dc:84:c8:1a:47:41:35:3c:5b:c6:fd: cc:20:53:8c:84:0b:b7:ff:3b:2c:a4:6f:5f:e2:f0:33:1e:98: a3:e2:96:09:5a:54:6c:bf:f4:ed:bc:69:ef:17:2e:63:2b:bf: d1:f7:6e:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNTA0MjUwNjA4NTVaFw0yNTA1MDIwNjA4NTVaMBgxFjAUBgNV BAMTDTY4MGIyNmY3LTQ0MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1bcn0oIG42qsCFS6iHWmmrivBHzHNOr054r46ieLKhryxKtrdjMbK5KDJfY2j AW/qBc/86sqk51hAadMEu3HPwzHuBeRpBs0TNe4TzjzxwIqw9qmRa6OUXQ33KIFi E0hOMhDFiJLzNON424EmVMpFmfHkyMU3hdnNxg6kfZnDT+zNaHJpq2rl3+Xlx3xz exOs83qdx0H2x+Smia90QZH2ayWPkB5b72lmI1/CMVEko8bYVTw8FSQxsk2OxNRl 66r6dXI+xRZ7vCn253ESw65zHRslK+9AQcl2hX2ZsE5JuoJKXPJIptmG9mdj6bRc cv2sGUDA+NPNVpRTmHYxVt5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdH8C3+Qg /KpQmvT1P+kO2Nt5ImswHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbNDWnhcmRrmq3g7oALAX6jbRcfl9AHcJFTCl+NtCQ6RMDVsk6Xun8Y fttRg3YzUgZveNP5esjYkysSRAAXTkjpjchE0S+Oty3kpFajihJRQqQwH+DeBBZc AiUv5pd6FvBUm68RBI/gwFVaPfUcMRExzZMr4oh2FGHy+Y7f3cySmMLvJIS0PVld B1vLUCVkqf5Q2Tz+0YbVCNI9Rdabqs8Qx+7jgBPAcbjKiVJR6zOdL3RQK+j9Aqj6 Q+qpGNsdFMVKzbNxNeQWEvHdSCLchMgaR0E1PFvG/cwgU4yEC7f/Oyykb1/i8DMe mKPilglaVGy/9O28ae8XLmMrv9H3bhc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:54 2025 by rpki-client