$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: Nr2Z5zRwJ8eFbZhPumE5+uXgK236zFOqDfkMgHrhWBA= Subject key identifier: E4:F0:89:11:49:FF:05:FB:66:27:8C:35:D2:7E:C3:FE:7D:43:E6:1E Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0F8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0F87 Signing time: Thu 24 Apr 2025 17:32:22 +0000 Manifest this update: Thu 24 Apr 2025 17:32:22 +0000 Manifest next update: Thu 01 May 2025 17:32:22 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: Kdbu6AblJBRQdTIf05jAVg3SJltuHzK5DhEmf5OxQ7E=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: X/citOv1Ggn8GInkQClxSFdoCzSDhLVJCA7AtRBk39U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3981 (0xf8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Apr 24 17:32:22 2025 GMT Not After : May 1 17:32:22 2025 GMT Subject: CN=680a75a6-3a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:df:b8:65:61:b7:3d:c2:6c:d9:50:96:59: 16:fd:21:be:ea:08:ac:4b:c3:66:ce:1b:5d:cc:42: c5:94:ab:f5:c5:fd:c1:85:0b:32:34:d5:42:f0:34: ea:58:9d:1b:c1:54:b2:1a:31:38:78:4c:10:8f:b0: 8b:fa:06:31:ce:d8:ae:4e:50:1b:ad:ef:38:36:a1: 31:0c:91:34:98:b0:aa:90:2d:c0:11:42:6d:be:aa: bd:35:96:10:c9:85:05:6f:c9:92:84:c3:22:8a:f7: 0b:b8:94:1a:87:5e:5d:2e:34:46:de:93:26:32:cf: c8:f3:e9:a0:aa:82:12:98:05:93:58:69:e8:2c:22: 8a:6a:df:da:cc:ee:b7:29:c0:4d:a8:f7:28:b5:d6: 5e:fc:9f:70:4c:59:fb:2b:0f:1c:12:24:25:4d:a9: a6:4d:13:ae:d0:41:a2:c0:8c:c8:85:b3:3e:2b:e3: eb:fc:78:d6:af:c4:23:e2:b3:97:f2:a3:cc:c9:e5: 76:a5:85:83:d6:7a:fc:07:ce:1e:eb:5f:6e:b4:c3: e8:35:a8:42:b4:22:ef:98:a6:56:50:d3:11:28:1d: 10:1e:cc:87:49:2a:39:ae:ad:d4:42:d1:b6:b9:91: d3:cf:df:6c:4d:e2:8e:bd:47:e6:54:3e:73:c0:97: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:89:11:49:FF:05:FB:66:27:8C:35:D2:7E:C3:FE:7D:43:E6:1E X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:5a:fd:a6:68:fe:6a:2c:bc:38:e7:db:4e:2f:2a:52:2c: f4:1a:f5:19:6b:f1:c1:69:25:fc:42:df:41:f2:a0:57:52:a1: 81:33:d4:6f:21:67:81:94:6f:61:dc:08:4e:5c:e5:94:00:33: 4b:ea:7a:31:a5:ea:15:f4:fb:9d:cb:d7:f1:ea:a0:cf:d1:42: d8:93:21:79:df:61:c3:d9:81:e9:f4:a0:1d:3e:e2:23:cb:57: 06:c8:56:1d:40:62:92:b7:38:df:70:8b:98:96:3a:16:a5:72: b7:92:93:fd:9d:ca:46:10:92:2c:a5:0e:39:97:90:21:2a:23: 8d:0e:e2:7d:11:ec:9d:ec:f4:d9:4c:51:d6:9d:19:78:65:dc: c7:2e:74:cc:15:8f:73:e5:4f:79:33:b9:2c:cf:48:9b:bd:db: 25:d0:2e:f3:49:60:f7:af:d3:40:3f:8e:fd:1a:dd:73:ac:a2: 8a:17:70:50:cb:98:91:ec:05:82:02:09:e8:43:a7:95:94:e6: a8:a0:26:57:67:a8:82:16:8d:c9:60:5a:b7:e1:29:1a:41:28: ae:4f:08:5b:00:cc:b6:e7:86:55:e0:cc:07:79:41:e2:a0:d7: f5:ab:32:21:34:7d:04:aa:ef:30:11:c9:7c:41:c1:9c:15:31: b0:21:ae:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNDI0MTczMjIyWhcNMjUwNTAxMTczMjIyWjAYMRYwFAYD VQQDEw02ODBhNzVhNi0zYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j/fuGVhtz3CbNlQllkW/SG+6gisS8NmzhtdzELFlKv1xf3BhQsyNNVC8DTq WJ0bwVSyGjE4eEwQj7CL+gYxztiuTlAbre84NqExDJE0mLCqkC3AEUJtvqq9NZYQ yYUFb8mShMMiivcLuJQah15dLjRG3pMmMs/I8+mgqoISmAWTWGnoLCKKat/azO63 KcBNqPcotdZe/J9wTFn7Kw8cEiQlTammTROu0EGiwIzIhbM+K+Pr/HjWr8Qj4rOX 8qPMyeV2pYWD1nr8B84e619utMPoNahCtCLvmKZWUNMRKB0QHsyHSSo5rq3UQtG2 uZHTz99sTeKOvUfmVD5zwJdBhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTwiRFJ /wX7ZieMNdJ+w/59Q+YeMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcZFr9pmj+aiy8OOfbTi8qUiz0GvUZa/HBaSX8Qt9B8qBXUqGBM9Rv IWeBlG9h3AhOXOWUADNL6noxpeoV9Pudy9fx6qDP0ULYkyF532HD2YHp9KAdPuIj y1cGyFYdQGKStzjfcIuYljoWpXK3kpP9ncpGEJIspQ45l5AhKiONDuJ9Eeyd7PTZ TFHWnRl4ZdzHLnTMFY9z5U95M7ksz0ibvdsl0C7zSWD3r9NAP479Gt1zrKKKF3BQ y5iR7AWCAgnoQ6eVlOaooCZXZ6iCFo3JYFq34SkaQSiuTwhbAMy254ZV4MwHeUHi oNf1qzIhNH0Equ8wEcl8QcGcFTGwIa4k -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:51 2025 by rpki-client