$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: Dvn8ZT0ejbtTu0eOvvC1c15Y4Wj1BOACLsL3IJ4L+zg= Subject key identifier: 33:3F:91:F6:17:3A:D0:45:8D:94:59:50:00:B3:C3:D8:14:6D:BA:D6 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 27 Signing time: Fri 25 Apr 2025 06:45:58 +0000 Manifest this update: Fri 25 Apr 2025 06:45:58 +0000 Manifest next update: Fri 02 May 2025 06:45:58 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: i76UA0QuEHRoqVBsv3YH4HKkvlsIfyMNRgR0VYZXCl8=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: wZLv0x5Ye2YsFJ9ksDDY7rn+/yu0V//tFuTwHUih6i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Apr 25 06:45:58 2025 GMT Not After : May 2 06:45:58 2025 GMT Subject: CN=680b2fa6-27e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:98:4d:7b:7d:dc:62:dd:5b:3b:85:7d:ea: f6:a5:65:90:c8:ee:5c:27:d2:3a:95:39:1f:94:2f: 70:63:aa:bc:db:67:e8:f2:42:95:b7:95:6b:5e:ac: 20:eb:f4:7f:eb:1e:da:ac:bf:ab:6b:44:f5:6b:5a: 0e:8a:1c:d9:d0:9e:0c:78:01:29:e9:d4:c4:da:13: 61:60:ab:a6:78:b8:37:2a:f1:93:b6:85:74:ff:da: 80:4f:c6:b1:5b:99:d9:0c:5c:f0:e2:6d:58:bb:2c: 54:85:20:9a:84:0c:1e:22:ed:36:c5:59:25:5b:a8: 64:94:37:26:06:ae:d6:4b:dc:af:cc:12:14:5a:02: c0:b4:e6:e0:ce:c9:e3:fb:5c:ba:30:8a:61:31:b0: 82:f0:f5:8c:74:e2:4c:84:fd:87:fb:32:3e:ec:52: ed:90:27:f9:ca:03:cf:7c:24:08:18:75:25:61:0b: 0e:76:40:f6:34:12:43:24:f1:92:26:5f:ee:42:3c: 0c:3b:4c:08:cb:6f:58:ed:f8:89:16:66:e7:7d:bf: 84:0a:da:70:a3:ea:db:1e:23:ea:71:d0:16:43:fb: 30:98:c7:1f:5b:f8:4f:40:e5:03:16:9b:cc:38:ef: a9:1d:a0:7a:7c:d1:12:89:a8:3d:c8:60:43:56:08: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3F:91:F6:17:3A:D0:45:8D:94:59:50:00:B3:C3:D8:14:6D:BA:D6 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:df:ee:2a:02:29:a0:83:f5:42:cd:a5:54:2d:00:56:64: 73:50:f2:9e:6d:4c:42:70:a0:86:48:2a:fd:e6:c1:1b:29:53: 05:fb:77:db:fd:8e:06:9e:32:ff:d4:65:2e:85:02:5d:ce:3d: 5a:20:5b:d4:d3:5f:2d:d0:34:24:83:bb:d7:08:8c:07:12:99: c1:54:86:67:23:e5:c2:97:c6:f3:74:66:cc:de:ec:53:80:e9: e5:f8:1e:d1:c1:a9:34:a6:35:5e:7e:2d:de:ef:a8:70:ba:de: a2:c6:9a:18:c1:c8:21:22:5b:47:70:f3:83:cf:03:80:92:d0: c7:d2:ea:31:45:e8:d2:bd:9d:48:36:e2:73:a5:ee:be:03:39: 40:76:b3:fe:cb:97:4b:95:9e:b2:0a:6e:69:dc:9a:8c:19:fb: d7:47:50:87:8c:bc:77:29:31:a4:d8:77:52:d7:26:e5:bb:f7: 34:fe:af:ee:66:f2:b1:57:3f:e0:81:6c:5d:f6:ab:03:10:0b: ec:48:c9:8a:51:23:92:11:8f:14:a0:11:18:24:0e:83:8d:53: 9c:19:ca:42:33:61:8b:2d:ab:a8:f8:71:e9:55:e5:93:dc:87: be:ef:53:ed:24:6a:64:53:9c:8c:bd:e4:26:54:7f:d5:55:9c: 69:ee:6a:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA0MjUwNjQ1NThaFw0yNTA1MDIwNjQ1NThaMBgxFjAUBgNV BAMTDTY4MGIyZmE2LTI3ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbqZhNe33cYt1bO4V96valZZDI7lwn0jqVOR+UL3BjqrzbZ+jyQpW3lWterCDr 9H/rHtqsv6trRPVrWg6KHNnQngx4ASnp1MTaE2Fgq6Z4uDcq8ZO2hXT/2oBPxrFb mdkMXPDibVi7LFSFIJqEDB4i7TbFWSVbqGSUNyYGrtZL3K/MEhRaAsC05uDOyeP7 XLowimExsILw9Yx04kyE/Yf7Mj7sUu2QJ/nKA898JAgYdSVhCw52QPY0EkMk8ZIm X+5CPAw7TAjLb1jt+IkWZud9v4QK2nCj6tseI+px0BZD+zCYxx9b+E9A5QMWm8w4 76kdoHp80RKJqD3IYENWCDKbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMz+R9hc6 0EWNlFlQALPD2BRtutYwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpg3+4qAimgg/VCzaVULQBWZHNQ8p5tTEJwoIZIKv3mwRspUwX7d9v9 jgaeMv/UZS6FAl3OPVogW9TTXy3QNCSDu9cIjAcSmcFUhmcj5cKXxvN0Zsze7FOA 6eX4HtHBqTSmNV5+Ld7vqHC63qLGmhjByCEiW0dw84PPA4CS0MfS6jFF6NK9nUg2 4nOl7r4DOUB2s/7Ll0uVnrIKbmncmowZ+9dHUIeMvHcpMaTYd1LXJuW79zT+r+5m 8rFXP+CBbF32qwMQC+xIyYpRI5IRjxSgERgkDoONU5wZykIzYYstq6j4celV5ZPc h77vU+0kamRTnIy95CZUf9VVnGnuarA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:27 2025 by rpki-client