$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: 5+DOZJWBSFLWSwBQp9ZnEK7qcB2mqHSGntzcnFpS9tI= Subject key identifier: 6F:00:C7:4F:08:BC:03:5B:FE:6A:59:C0:26:DB:F7:76:31:76:17:91 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1391 Signing time: Thu 24 Apr 2025 19:02:53 +0000 Manifest this update: Thu 24 Apr 2025 19:02:53 +0000 Manifest next update: Thu 01 May 2025 19:02:53 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: JfIcRVl3ndxDugK4gs01htYnYyQa34560fXahNZ44vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Apr 24 19:02:53 2025 GMT Not After : May 1 19:02:53 2025 GMT Subject: CN=680a8add-b5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:d5:f4:f3:6f:1c:83:d5:89:68:da:4b:d7: cc:d3:a1:59:a0:4b:2c:7f:dc:95:5c:dd:d9:19:fc: 99:67:e7:31:40:52:fb:2b:f6:6d:fa:00:8f:44:30: a8:fe:ab:c9:00:60:d0:07:03:39:43:0d:36:45:3e: 0f:90:88:1b:28:d6:bb:45:07:cc:14:db:d0:a3:5b: 80:44:7a:5e:d5:1e:ab:e4:79:fd:62:2d:e6:d9:d6: 02:1e:c5:68:41:8d:b0:e4:3b:0e:2d:a1:97:90:07: c0:7c:5d:a2:ff:fb:1a:3a:11:7b:45:61:62:01:08: 55:9a:aa:9c:ae:d3:a7:1e:4e:c1:bd:46:db:0f:d1: 74:48:0b:3f:4d:6d:a4:d9:d8:91:2e:af:81:11:9e: ad:a5:f9:a1:ef:7f:3d:63:cf:e1:5c:a9:1f:64:c1: fb:06:39:53:a6:d3:5a:b2:e9:f2:62:e9:a4:cb:05: 31:c2:08:c0:a6:14:be:ce:87:dd:00:5b:a9:ed:f9: 99:0d:db:69:b8:7a:58:5f:71:06:63:20:e7:5f:8f: 31:7b:15:02:41:49:67:a8:4e:8b:75:76:70:25:d8: 92:6b:06:26:81:88:36:6a:eb:9f:af:e7:7c:4c:09: b6:7d:cd:b6:60:01:23:b5:5c:8f:31:f4:b6:21:1b: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:00:C7:4F:08:BC:03:5B:FE:6A:59:C0:26:DB:F7:76:31:76:17:91 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:75:1b:30:2e:db:38:f1:3e:67:08:81:d8:74:9d:01:28:aa: 7b:6b:cb:91:77:78:fe:94:e2:07:94:55:0c:4f:f2:01:b0:d7: 99:9d:90:5c:6f:da:95:b0:c4:93:b5:18:31:25:ae:e2:4f:f2: 4d:86:9a:4a:92:c4:be:14:be:41:42:a1:44:35:83:43:e6:2d: d1:cc:bd:5b:d3:ab:c2:8b:5d:92:9c:8a:76:8c:8a:e2:07:e8: 19:54:86:86:80:72:1b:d2:21:52:94:e6:1e:dc:ae:c2:2c:e3: 37:69:f1:1e:4a:05:a9:04:50:6c:bb:64:84:be:cb:e6:67:96: b1:8d:f7:ec:23:51:ea:4c:35:d4:a4:72:39:e9:6c:47:02:0d: 3e:5c:52:23:37:da:26:9e:b3:b5:cb:30:0b:4a:5d:43:f4:67: 57:c2:69:c0:05:7c:54:86:05:43:be:db:c7:93:cb:a7:82:39: 2e:13:0c:fd:79:1f:c8:d9:fe:68:c6:39:b0:9c:93:52:41:4f: 82:48:9b:ca:a3:e9:6f:10:31:8d:18:45:11:c9:e1:ee:5b:ee: 63:44:d5:c5:a7:9b:b2:5f:82:36:54:f3:b2:89:94:78:50:50: fd:b6:c6:25:f4:c1:41:3a:a2:cb:4c:f3:97:90:90:3a:e8:83: 9b:d1:45:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwNDI0MTkwMjUzWhcNMjUwNTAxMTkwMjUzWjAYMRYwFAYD VQQDEw02ODBhOGFkZC1iNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRDV9PNvHIPViWjaS9fM06FZoEssf9yVXN3ZGfyZZ+cxQFL7K/Zt+gCPRDCo /qvJAGDQBwM5Qw02RT4PkIgbKNa7RQfMFNvQo1uARHpe1R6r5Hn9Yi3m2dYCHsVo QY2w5DsOLaGXkAfAfF2i//saOhF7RWFiAQhVmqqcrtOnHk7BvUbbD9F0SAs/TW2k 2diRLq+BEZ6tpfmh7389Y8/hXKkfZMH7BjlTptNasunyYumkywUxwgjAphS+zofd AFup7fmZDdtpuHpYX3EGYyDnX48xexUCQUlnqE6LdXZwJdiSawYmgYg2auufr+d8 TAm2fc22YAEjtVyPMfS2IRtrNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8Ax08I vANb/mpZwCbb93YxdheRMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGdRswLts48T5nCIHYdJ0BKKp7a8uRd3j+lOIHlFUMT/IBsNeZnZBc b9qVsMSTtRgxJa7iT/JNhppKksS+FL5BQqFENYND5i3RzL1b06vCi12SnIp2jIri B+gZVIaGgHIb0iFSlOYe3K7CLOM3afEeSgWpBFBsu2SEvsvmZ5axjffsI1HqTDXU pHI56WxHAg0+XFIjN9omnrO1yzALSl1D9GdXwmnABXxUhgVDvtvHk8ungjkuEwz9 eR/I2f5oxjmwnJNSQU+CSJvKo+lvEDGNGEURyeHuW+5jRNXFp5uyX4I2VPOyiZR4 UFD9tsYl9MFBOqLLTPOXkJA66IOb0UWn -----END CERTIFICATE-----Generated at Sat Apr 26 09:25:12 2025 by rpki-client