$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: 5EP2snm891itSEIba98tHlApfI/3KJ3nIPKKOT8MBbI= Subject key identifier: D9:D1:0D:04:05:48:17:50:9A:B6:CF:6C:8E:0F:D7:E5:E4:DB:3B:BC Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 013A Signing time: Fri 25 Apr 2025 03:33:11 +0000 Manifest this update: Fri 25 Apr 2025 03:33:11 +0000 Manifest next update: Fri 02 May 2025 03:33:11 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: MPnwR/O5g/aDyBPL+kT2b7SdbyHeXGwkFcdIVCT0h7w=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Apr 25 03:33:11 2025 GMT Not After : May 2 03:33:11 2025 GMT Subject: CN=680b0277-6fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:cf:bc:1c:ae:0e:4a:c7:06:e9:24:01:c2: be:c2:bb:36:17:7c:0b:cf:57:3e:2f:09:a0:f5:e3: 98:69:8e:79:3c:a3:ad:51:d9:4b:ec:33:44:d9:71: 1d:ad:9f:cb:db:99:71:33:7e:8b:0f:a8:e7:99:7c: c5:f0:f9:10:bc:8f:52:8d:50:a9:2b:0e:ef:18:5e: 9f:66:2c:ae:03:c1:77:ae:ec:13:5c:2d:42:34:ff: 1a:a4:92:48:b8:88:47:2f:b2:d7:b8:95:ec:4d:a5: 73:0c:d2:69:55:84:9f:72:66:e4:c4:97:76:9e:af: b2:f9:1e:89:ac:e3:31:d7:12:a1:a7:3b:cd:11:fd: 38:d0:69:96:76:90:52:05:ea:00:33:e8:7c:3f:d2: c0:2e:6f:13:42:7c:3f:8c:19:b5:df:ad:c6:c4:ce: 5a:65:72:55:90:a1:30:d7:04:42:ff:3d:b8:62:18: f0:8b:b2:eb:b2:8a:3b:fa:35:d2:70:a6:45:2b:6b: 31:ef:7d:87:72:f0:70:b0:38:66:76:d3:57:db:24: 8f:8d:e2:07:16:30:71:fc:bb:fa:60:ba:76:a9:49: f4:d3:4f:ed:b2:55:d8:98:a5:3b:3d:57:20:c5:01: 04:d1:c8:5e:cb:ec:ff:66:84:6f:54:74:22:62:a4: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D1:0D:04:05:48:17:50:9A:B6:CF:6C:8E:0F:D7:E5:E4:DB:3B:BC X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3f:41:29:3d:c5:b9:77:14:04:2f:e7:9a:9f:2e:21:03:ad: 74:28:ee:47:f8:a9:aa:f4:fe:a1:92:81:ff:80:fa:f5:5b:f3: 1d:c3:50:38:18:81:74:1b:c5:dd:ca:e9:b2:e0:c3:66:95:90: 5e:99:b2:85:b7:53:72:b3:ea:84:0e:0c:d3:4c:ea:21:30:35: 3d:50:7e:f5:1e:df:ee:49:65:02:cd:7a:61:cc:66:d5:09:04: 6a:d2:e4:38:6f:a2:75:31:f7:53:c1:ac:96:ad:d7:81:0d:cd: 9d:cd:4a:39:b0:49:02:6a:a7:a0:ac:70:bd:27:a0:2f:11:e2: ad:1e:40:6d:c6:92:36:20:ca:11:ff:b6:ea:8e:87:f3:6a:89: 85:54:28:0e:6e:f4:9a:49:0c:0a:0b:7f:51:ae:cf:b6:43:29: 49:2d:21:96:7e:31:50:2f:e3:a4:d1:7d:1f:84:07:5f:1f:0d: 07:8d:a1:4f:e2:ff:56:70:8d:e7:ea:d6:03:c9:c0:e6:2e:a9: 86:e7:9e:a3:f3:20:77:44:b8:84:8b:b8:fd:bb:c4:55:a9:b5: b8:a0:de:bf:7f:a0:37:3d:51:85:36:b9:eb:2a:99:c7:eb:52: 37:ae:d3:bb:7f:ff:fc:7d:90:8c:9c:0e:cc:70:ef:f3:a0:96: 5b:0b:a6:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwNDI1MDMzMzExWhcNMjUwNTAyMDMzMzExWjAYMRYwFAYD VQQDEw02ODBiMDI3Ny02ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/bPvByuDkrHBukkAcK+wrs2F3wLz1c+Lwmg9eOYaY55PKOtUdlL7DNE2XEd rZ/L25lxM36LD6jnmXzF8PkQvI9SjVCpKw7vGF6fZiyuA8F3ruwTXC1CNP8apJJI uIhHL7LXuJXsTaVzDNJpVYSfcmbkxJd2nq+y+R6JrOMx1xKhpzvNEf040GmWdpBS BeoAM+h8P9LALm8TQnw/jBm1363GxM5aZXJVkKEw1wRC/z24Yhjwi7Lrsoo7+jXS cKZFK2sx732HcvBwsDhmdtNX2ySPjeIHFjBx/Lv6YLp2qUn000/tslXYmKU7PVcg xQEE0chey+z/ZoRvVHQiYqQMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnRDQQF SBdQmrbPbI4P1+Xk2zu8MB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDP0EpPcW5dxQEL+eany4hA610KO5H+Kmq9P6hkoH/gPr1W/Mdw1A4 GIF0G8Xdyumy4MNmlZBembKFt1Nys+qEDgzTTOohMDU9UH71Ht/uSWUCzXphzGbV CQRq0uQ4b6J1MfdTwayWrdeBDc2dzUo5sEkCaqegrHC9J6AvEeKtHkBtxpI2IMoR /7bqjofzaomFVCgObvSaSQwKC39Rrs+2QylJLSGWfjFQL+Ok0X0fhAdfHw0HjaFP 4v9WcI3n6tYDycDmLqmG556j8yB3RLiEi7j9u8RVqbW4oN6/f6A3PVGFNrnrKpnH 61I3rtO7f//8fZCMnA7McO/zoJZbC6bm -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:33 2025 by rpki-client