$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: kMu499411DdxlRtlVbs0GizVceGPDo/fIg+wS97xFUE= Subject key identifier: 8A:BB:19:CF:4D:9D:64:56:6B:E6:58:5B:0E:51:81:71:E7:2C:FB:59 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 0656 Signing time: Thu 24 Apr 2025 22:16:14 +0000 Manifest this update: Thu 24 Apr 2025 22:16:14 +0000 Manifest next update: Thu 01 May 2025 22:16:14 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: RPeLWRRYGg6vTq72snVbCHrGJwtfyhRKF8z+Q/JxbmM=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: macE2NFUWcDcrdQSGzCQPdT+j1HMD3PGg+S93KaJKT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Apr 24 22:16:14 2025 GMT Not After : May 1 22:16:14 2025 GMT Subject: CN=680ab82e-25d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1c:fe:ac:04:7a:74:90:fc:92:74:d6:d3:bc: 86:be:d6:ab:e3:57:76:f9:6c:32:b3:14:e2:0f:57: a1:3b:6b:1e:12:ec:9b:68:e4:d8:50:6a:3d:98:15: cc:79:dd:13:59:31:e8:20:04:27:0c:15:aa:58:c4: 0e:20:f4:00:3b:b6:9a:7c:f6:e7:67:ad:8f:b9:36: 4e:9b:ce:bc:7a:7c:50:2e:4c:92:ec:cc:15:1f:c3: 8a:91:2f:58:4d:80:c3:36:0c:f1:cc:36:7e:af:89: e0:3b:9b:7c:bd:33:33:f6:23:c9:40:0b:a9:6c:49: c9:be:33:46:8b:95:7b:fb:d2:af:9d:0b:84:5f:bd: 6a:db:8a:43:92:3c:ea:4a:9b:37:85:7f:ed:66:53: 0f:02:a1:ce:ae:00:3a:90:15:95:b5:4c:9d:7c:84: 9e:85:2e:c7:67:ad:6c:0a:44:c6:30:ee:ed:d7:d1: d4:82:8d:a0:1f:8c:93:89:a7:f6:2e:09:85:9a:13: 9d:58:9e:bb:bc:36:0f:a3:01:72:3d:2c:8a:2a:b7: 22:20:31:2f:e0:8f:37:f2:9f:41:63:4b:e0:57:aa: 03:6b:ca:be:f3:ac:06:e6:dd:8f:9b:35:0f:03:f8: ee:f8:cc:31:d9:e8:9a:cd:54:2f:6e:cf:0b:39:55: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:19:CF:4D:9D:64:56:6B:E6:58:5B:0E:51:81:71:E7:2C:FB:59 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:eb:e5:16:95:ca:f2:83:e0:6f:b9:b6:58:51:a6:2b:2c:9c: bf:5b:21:37:0b:a1:fd:26:46:0f:2b:14:bf:a5:1d:d5:68:89: 3e:32:69:2f:13:97:32:80:e5:4e:46:62:a9:80:83:90:b6:13: 8f:9a:ae:c6:56:87:94:28:ee:6b:8a:75:71:43:a1:8a:f5:f9: 12:70:2a:5a:9e:89:34:0e:17:b2:84:8c:e9:71:cc:ab:30:0e: 9a:29:3f:37:4b:93:03:36:a1:c7:a7:d8:d3:0c:25:1d:34:0e: 14:76:e4:83:e9:11:77:66:6b:d9:05:4d:cf:17:cb:ab:c5:18: 57:71:da:37:11:1b:9e:0c:73:b2:a3:11:61:94:9d:b5:90:73: bb:f1:c9:ab:8d:67:c2:92:87:50:0e:b5:d3:86:9a:7f:09:b5: 17:46:80:22:41:89:68:84:8e:f6:29:fa:a0:b1:43:85:ce:65: 16:2a:f3:dc:19:87:c2:b6:25:62:cd:fd:f7:7c:12:12:cc:00: c4:93:8b:2b:89:7d:cf:19:e6:79:cc:27:8e:1e:94:44:da:bf: bd:98:7a:99:25:4c:f3:7f:a0:fe:db:95:2e:cd:8c:7e:2a:03: 7b:c5:b0:0d:7d:2f:dd:93:f6:ea:3d:f5:58:38:8e:29:cd:1e: 6d:a6:99:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwNDI0MjIxNjE0WhcNMjUwNTAxMjIxNjE0WjAYMRYwFAYD VQQDEw02ODBhYjgyZS0yNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xz+rAR6dJD8knTW07yGvtar41d2+WwysxTiD1ehO2seEuybaOTYUGo9mBXM ed0TWTHoIAQnDBWqWMQOIPQAO7aafPbnZ62PuTZOm868enxQLkyS7MwVH8OKkS9Y TYDDNgzxzDZ+r4ngO5t8vTMz9iPJQAupbEnJvjNGi5V7+9KvnQuEX71q24pDkjzq Sps3hX/tZlMPAqHOrgA6kBWVtUydfISehS7HZ61sCkTGMO7t19HUgo2gH4yTiaf2 LgmFmhOdWJ67vDYPowFyPSyKKrciIDEv4I838p9BY0vgV6oDa8q+86wG5t2PmzUP A/ju+Mwx2eiazVQvbs8LOVVXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq7Gc9N nWRWa+ZYWw5RgXHnLPtZMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC6+UWlcryg+BvubZYUaYrLJy/WyE3C6H9JkYPKxS/pR3VaIk+Mmkv E5cygOVORmKpgIOQthOPmq7GVoeUKO5rinVxQ6GK9fkScCpanok0DheyhIzpccyr MA6aKT83S5MDNqHHp9jTDCUdNA4UduSD6RF3ZmvZBU3PF8urxRhXcdo3ERueDHOy oxFhlJ21kHO78cmrjWfCkodQDrXThpp/CbUXRoAiQYlohI72KfqgsUOFzmUWKvPc GYfCtiVizf33fBISzADEk4sriX3PGeZ5zCeOHpRE2r+9mHqZJUzzf6D+25UuzYx+ KgN7xbANfS/dk/bqPfVYOI4pzR5tppn1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:20 2025 by rpki-client