$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: EPDSedq6KOaGiYxi//mQy3eNqlJGigYGOnd21VBLxJM= Subject key identifier: D3:1E:78:96:12:0A:73:6A:07:1F:8C:8B:EF:90:9A:06:34:55:34:5A Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 0610 Signing time: Thu 24 Apr 2025 22:36:47 +0000 Manifest this update: Thu 24 Apr 2025 22:36:46 +0000 Manifest next update: Thu 01 May 2025 22:36:46 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: zP9ZYl1hR4iGahzzffilVlUSrjF/f6umpTkIIES0L9k=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Apr 24 22:36:46 2025 GMT Not After : May 1 22:36:46 2025 GMT Subject: CN=680abcff-005b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:5b:bd:2b:e4:18:bf:f9:1e:8c:d5:b0:93: 82:f2:12:80:a0:7f:24:bc:29:88:84:2e:19:87:7f: 7b:23:b2:1a:1f:e0:34:8e:f1:83:01:63:3c:12:6e: 39:b8:3e:b6:cc:2e:8b:ef:a5:5f:05:0c:6f:21:f1: 25:9f:99:df:a0:93:27:da:e6:8b:88:a7:02:c8:06: 3b:00:a5:59:e5:f9:f3:b5:c1:56:7d:09:c6:9d:a1: 32:49:f4:e8:d5:b0:c2:6f:33:b5:09:74:2b:de:fd: 55:bc:3e:aa:ba:30:4d:b1:bd:05:16:76:e2:69:ff: a9:73:2d:20:42:5d:cd:de:b1:50:01:54:1f:78:49: ac:8e:72:8d:6e:77:64:30:7c:d6:46:af:d7:5d:6a: 46:ce:28:9f:a7:6a:8f:a8:eb:cf:bf:9a:54:7b:40: 24:92:9a:63:14:13:54:7e:10:98:6e:6c:6f:5c:71: f2:bf:02:42:f4:e9:f8:2f:f6:7d:28:4e:0d:b5:3f: 4a:07:65:4e:6b:da:89:7d:96:37:87:82:97:1a:67: 82:ce:a0:f2:69:e3:8e:6c:44:3d:3d:3b:6b:cc:f4: ba:e1:f9:d2:0f:62:eb:a7:2d:f5:95:f7:6d:e3:d0: 50:db:07:c3:51:a1:fc:c0:e0:bb:6c:4d:49:f6:fa: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:78:96:12:0A:73:6A:07:1F:8C:8B:EF:90:9A:06:34:55:34:5A X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ce:2e:43:af:49:9d:e2:0c:40:d7:28:15:8f:c7:39:eb:06: 9a:8f:2b:10:6d:6e:51:04:f4:08:bb:b2:8d:55:e8:ad:d3:c6: 3e:a0:9b:90:f2:e5:dc:14:0c:e6:0d:fd:fc:3c:56:a6:4c:71: 21:bb:12:59:e7:18:51:df:fb:fe:88:e6:10:51:a3:96:36:6d: 22:66:e3:c6:cc:60:23:44:6a:a0:b2:67:59:59:8a:34:86:fa: 18:2f:97:06:47:30:b6:12:ab:cc:f5:c4:b1:51:87:c4:09:0c: d7:7c:2d:db:80:a2:20:4e:a8:af:4d:d0:f1:62:28:b6:df:0a: 53:4c:a6:f0:fe:cd:b5:ac:16:e0:7f:f9:8f:48:d7:42:9a:46: 63:b1:9e:73:33:1f:fa:e6:5c:e5:f4:89:c0:13:c1:b7:03:02: 96:89:34:c7:92:0b:e3:23:68:62:c0:ec:56:e0:2e:50:12:f4: 0d:d1:85:fc:8c:21:fc:e4:cc:5a:a3:2e:7f:3d:ce:da:c4:39: cb:a1:d7:17:9f:48:29:78:27:dd:45:19:6c:f0:5c:67:0f:27: c5:50:f3:78:2e:84:f5:95:04:51:eb:38:f4:3e:fa:39:aa:f5: d2:6b:df:29:7a:f0:97:de:49:c7:47:3e:50:56:e6:7a:cf:6e: 41:e4:21:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUwNDI0MjIzNjQ2WhcNMjUwNTAxMjIzNjQ2WjAYMRYwFAYD VQQDEw02ODBhYmNmZi0wMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5VbvSvkGL/5HozVsJOC8hKAoH8kvCmIhC4Zh397I7IaH+A0jvGDAWM8Em45 uD62zC6L76VfBQxvIfEln5nfoJMn2uaLiKcCyAY7AKVZ5fnztcFWfQnGnaEySfTo 1bDCbzO1CXQr3v1VvD6qujBNsb0FFnbiaf+pcy0gQl3N3rFQAVQfeEmsjnKNbndk MHzWRq/XXWpGziifp2qPqOvPv5pUe0AkkppjFBNUfhCYbmxvXHHyvwJC9On4L/Z9 KE4NtT9KB2VOa9qJfZY3h4KXGmeCzqDyaeOObEQ9PTtrzPS64fnSD2Lrpy31lfdt 49BQ2wfDUaH8wOC7bE1J9vrKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMeeJYS CnNqBx+Mi++QmgY0VTRaMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBczi5Dr0md4gxA1ygVj8c56waajysQbW5RBPQIu7KNVeit08Y+oJuQ 8uXcFAzmDf38PFamTHEhuxJZ5xhR3/v+iOYQUaOWNm0iZuPGzGAjRGqgsmdZWYo0 hvoYL5cGRzC2EqvM9cSxUYfECQzXfC3bgKIgTqivTdDxYii23wpTTKbw/s21rBbg f/mPSNdCmkZjsZ5zMx/65lzl9InAE8G3AwKWiTTHkgvjI2hiwOxW4C5QEvQN0YX8 jCH85Mxaoy5/Pc7axDnLodcXn0gpeCfdRRls8FxnDyfFUPN4LoT1lQRR6zj0Pvo5 qvXSa98pevCX3knHRz5QVuZ6z25B5CFu -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:30 2025 by rpki-client