$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: lXznYNrMigeE+w6SwdXu+dk37u4VdAUOztz0idGMSeM= Subject key identifier: 82:57:FD:8A:79:45:82:F4:5E:03:6E:1F:A5:7F:BB:19:83:62:5E:A6 Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 0193 Signing time: Fri 25 Apr 2025 02:41:44 +0000 Manifest this update: Fri 25 Apr 2025 02:41:44 +0000 Manifest next update: Fri 02 May 2025 02:41:44 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: jkzA+lOXZt88AoCJbpjTsSyx6lSWXBLLCmr5jSwkVLY=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Apr 25 02:41:44 2025 GMT Not After : May 2 02:41:44 2025 GMT Subject: CN=680af668-5020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:fa:59:87:0c:48:23:14:99:58:0e:4f:3c: b2:cb:d6:ba:a5:cf:c9:41:56:08:14:c3:e6:b4:f4: 99:57:a8:68:9d:22:82:3c:61:8c:b9:2d:c8:18:79: 9c:b7:5e:99:43:22:eb:ad:09:6d:ce:e4:a1:bb:51: b7:36:f7:53:0c:92:6c:2a:89:c8:6b:c7:ec:18:d7: 8e:bf:2d:1e:ab:95:5e:ee:e5:b8:ce:65:24:a5:b2: 0d:30:35:c4:02:95:4e:99:d3:bb:8a:1f:88:a8:65: 47:2e:e4:56:76:62:c6:e2:0f:91:6d:41:d3:c3:1b: 15:17:6a:e6:57:c9:5a:39:04:f5:81:f4:dc:e6:d1: 9d:d9:04:50:63:85:b6:da:36:84:c4:72:b3:23:50: 4e:02:f9:0f:e4:4b:df:7f:9d:8d:24:e2:5c:f5:33: f6:33:ec:97:24:b4:62:dd:8e:0f:ba:4c:c6:40:73: cc:7d:b5:93:5a:09:4f:c3:a3:01:7f:8b:88:45:a1: ee:1f:a2:68:b8:72:b4:1a:b3:b9:42:fd:1f:27:86: 69:20:4d:9c:c9:dc:3f:4b:c6:e4:9c:75:b3:48:12: 53:83:18:53:c7:2c:8c:b4:fd:6a:f9:67:c2:8b:9f: 47:dd:d8:e8:78:02:36:61:67:31:de:ee:76:d3:e8: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:FD:8A:79:45:82:F4:5E:03:6E:1F:A5:7F:BB:19:83:62:5E:A6 X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:19:9a:c2:02:dd:aa:3f:23:2b:eb:79:a7:41:b6:81:c8:17: 41:4e:9e:a6:65:3d:a9:91:0a:28:5e:ba:b7:25:1b:1d:b8:69: 9f:38:a6:d9:07:ca:06:4c:2e:57:93:ba:2c:48:85:3e:41:26: d4:6f:4d:6f:5b:01:f1:87:c9:42:e3:de:f4:2c:e8:2c:1d:38: 84:f0:48:c5:e8:75:af:6e:80:14:46:43:f0:f6:b8:bb:74:16: fc:c4:be:a8:50:00:b5:b2:d9:e5:a0:37:b9:94:ad:0f:83:69: f3:b4:16:51:69:94:6f:a4:f5:cb:f0:77:b6:09:90:cb:2a:eb: 55:c9:17:61:8f:9e:45:b6:45:e2:c6:80:dc:4d:41:1e:81:ab: 3c:08:2d:5c:5d:06:aa:de:09:38:44:2b:cb:1b:5f:ad:a1:34: f5:1b:47:3b:53:b1:cc:65:89:c8:97:09:ed:78:39:53:3b:00: 6e:74:fe:3d:ac:9a:67:52:8b:17:ac:0d:7f:8e:60:40:c2:c5: 72:66:48:8b:b4:06:8d:12:e1:d7:2a:89:0f:75:da:d5:ac:e5: 5a:f5:ac:28:cb:7e:4f:26:26:be:24:88:2b:5e:39:21:f6:9b: 1d:a1:4b:db:d8:cd:45:8e:18:4b:6c:2f:cd:ca:b6:32:64:2c: 7b:45:8f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUwNDI1MDI0MTQ0WhcNMjUwNTAyMDI0MTQ0WjAYMRYwFAYD VQQDEw02ODBhZjY2OC01MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysP6WYcMSCMUmVgOTzyyy9a6pc/JQVYIFMPmtPSZV6honSKCPGGMuS3IGHmc t16ZQyLrrQltzuShu1G3NvdTDJJsKonIa8fsGNeOvy0eq5Ve7uW4zmUkpbINMDXE ApVOmdO7ih+IqGVHLuRWdmLG4g+RbUHTwxsVF2rmV8laOQT1gfTc5tGd2QRQY4W2 2jaExHKzI1BOAvkP5Evff52NJOJc9TP2M+yXJLRi3Y4PukzGQHPMfbWTWglPw6MB f4uIRaHuH6JouHK0GrO5Qv0fJ4ZpIE2cydw/S8bknHWzSBJTgxhTxyyMtP1q+WfC i59H3djoeAI2YWcx3u520+iL1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJX/Yp5 RYL0XgNuH6V/uxmDYl6mMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhGZrCAt2qPyMr63mnQbaByBdBTp6mZT2pkQooXrq3JRsduGmfOKbZ B8oGTC5Xk7osSIU+QSbUb01vWwHxh8lC4970LOgsHTiE8EjF6HWvboAURkPw9ri7 dBb8xL6oUAC1stnloDe5lK0Pg2nztBZRaZRvpPXL8He2CZDLKutVyRdhj55FtkXi xoDcTUEegas8CC1cXQaq3gk4RCvLG1+toTT1G0c7U7HMZYnIlwnteDlTOwBudP49 rJpnUosXrA1/jmBAwsVyZkiLtAaNEuHXKokPddrVrOVa9awoy35PJia+JIgrXjkh 9psdoUvb2M1FjhhLbC/NyrYyZCx7RY8m -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:38 2025 by rpki-client