$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: QJAN0qYyquFML3P6nebYoJ+6dIvDNas8HB0YXxMvU1o= Subject key identifier: 91:22:7F:2E:08:12:B1:BA:0C:9B:13:E8:7E:A0:4A:A2:52:59:8D:D8 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 066C Signing time: Thu 24 Apr 2025 22:07:08 +0000 Manifest this update: Thu 24 Apr 2025 22:07:07 +0000 Manifest next update: Thu 01 May 2025 22:07:07 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: qUF8O+VzaACJJn+W25i+GGIstec1PNBQQEQHWyZFlZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Apr 24 22:07:07 2025 GMT Not After : May 1 22:07:07 2025 GMT Subject: CN=680ab60c-100c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:d6:69:0b:c2:30:fa:85:68:53:dc:08:6a: c1:5c:58:65:25:66:d8:3e:59:0f:97:e7:08:59:b1: 11:1e:a7:49:1c:e0:ae:07:ca:71:d1:d8:19:49:41: e0:5e:2d:d4:8d:c3:c7:b1:d5:95:68:91:98:18:fb: 17:43:f3:c1:2a:4a:fc:a5:df:77:b7:70:46:4f:9b: 01:f5:43:a6:4c:ab:a7:bc:34:75:d1:c9:fe:7e:5f: 9a:f9:26:a3:b1:bf:3c:32:98:17:bf:f3:d7:52:e2: e3:17:d5:94:ce:23:1e:e4:4d:a4:61:dd:09:8a:73: 91:db:09:a2:6e:bf:ae:26:9e:b2:ba:92:61:f0:77: 50:a1:ba:28:55:1c:53:da:b4:64:24:97:91:ce:09: d3:fb:62:32:2f:2b:7a:1f:e8:0e:5f:8f:4e:3b:0c: a8:ef:87:9e:6f:0f:55:c2:f3:f3:7b:d1:a5:2f:14: 1e:9c:74:67:0c:d6:df:08:ed:04:1a:a9:55:e2:43: ba:9e:11:99:74:3b:57:60:85:9d:56:79:02:b4:7f: 27:95:5c:49:be:c6:38:ed:8f:03:fa:7b:a2:74:4b: 47:18:75:4d:62:21:58:4f:5b:92:bb:64:43:7d:b5: 80:62:d4:d6:ea:92:fc:2e:ad:c1:7b:1a:d2:be:dd: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:22:7F:2E:08:12:B1:BA:0C:9B:13:E8:7E:A0:4A:A2:52:59:8D:D8 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d3:b0:7e:a4:5e:97:7d:7e:37:3a:97:74:40:a7:0b:b9:fc: 35:dc:25:bb:ca:8f:bf:6d:2d:78:81:90:d1:e0:c9:b4:fb:bf: 07:80:09:fb:43:99:fe:e9:07:c4:45:4d:dd:20:07:2c:85:d8: 4e:10:90:ec:43:d7:f5:5d:73:c0:4f:7f:bd:4c:65:46:23:f2: 74:41:d2:af:65:20:a9:97:5e:31:8f:11:50:ba:48:21:e0:12: 4f:e0:9e:43:4f:e6:22:80:88:8c:96:1b:f4:64:8e:54:96:07: 15:ad:f4:e2:3d:1c:6c:3f:5f:68:27:b5:bc:77:c1:24:64:d3: fd:e7:08:2c:92:bd:28:77:32:98:c9:60:d3:41:d1:0e:27:e8: 40:cb:00:f9:66:dc:54:8b:2d:ae:1e:f7:63:6b:3c:3b:42:51: c8:c9:59:89:5d:c6:90:36:ec:a3:47:64:0a:c6:45:e6:84:21: c2:2f:30:ac:0b:47:c4:cb:ee:c7:12:15:6e:de:1f:51:e7:75: 0b:f9:55:18:01:13:cd:c7:b0:db:af:64:b6:7b:33:1f:08:10: 6b:a6:69:d2:49:5f:00:cf:81:d4:7a:ea:17:ec:a5:9d:f4:00: 63:6a:f4:05:c0:72:82:06:6a:b6:a5:63:86:f8:cc:0c:9c:15: b0:b4:2c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwNDI0MjIwNzA3WhcNMjUwNTAxMjIwNzA3WjAYMRYwFAYD VQQDEw02ODBhYjYwYy0xMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEbWaQvCMPqFaFPcCGrBXFhlJWbYPlkPl+cIWbERHqdJHOCuB8px0dgZSUHg Xi3UjcPHsdWVaJGYGPsXQ/PBKkr8pd93t3BGT5sB9UOmTKunvDR10cn+fl+a+Saj sb88MpgXv/PXUuLjF9WUziMe5E2kYd0JinOR2wmibr+uJp6yupJh8HdQobooVRxT 2rRkJJeRzgnT+2IyLyt6H+gOX49OOwyo74eebw9VwvPze9GlLxQenHRnDNbfCO0E GqlV4kO6nhGZdDtXYIWdVnkCtH8nlVxJvsY47Y8D+nuidEtHGHVNYiFYT1uSu2RD fbWAYtTW6pL8Lq3BexrSvt2nuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEify4I ErG6DJsT6H6gSqJSWY3YMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG07B+pF6XfX43Opd0QKcLufw13CW7yo+/bS14gZDR4Mm0+78HgAn7 Q5n+6QfERU3dIAcshdhOEJDsQ9f1XXPAT3+9TGVGI/J0QdKvZSCpl14xjxFQukgh 4BJP4J5DT+YigIiMlhv0ZI5UlgcVrfTiPRxsP19oJ7W8d8EkZNP95wgskr0odzKY yWDTQdEOJ+hAywD5ZtxUiy2uHvdjazw7QlHIyVmJXcaQNuyjR2QKxkXmhCHCLzCs C0fEy+7HEhVu3h9R53UL+VUYARPNx7Dbr2S2ezMfCBBrpmnSSV8Az4HUeuoX7KWd 9ABjavQFwHKCBmq2pWOG+MwMnBWwtCzf -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:14 2025 by rpki-client