$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json) Hash identifier: pTDRdbavGP7d+SzIH8YxuSrGKKEUxzg6+AmK+YgZ6ao= Subject key identifier: 6D:1E:15:9C:76:E9:59:24:D0:C3:BA:68:C9:F1:62:6E:A2:AB:D4:BC Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft Manifest number: 0300 Signing time: Fri 25 Apr 2025 01:01:54 +0000 Manifest this update: Fri 25 Apr 2025 01:01:54 +0000 Manifest next update: Fri 02 May 2025 01:01:54 +0000 Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: NB6DTlk7sjUEIZEs+csn8s09G61QM4WoTTiah+w+/Vo=) 2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: PuEOajLEUChOIrthB/05mvECIB7cIWFQzgLmdVBLTBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Apr 25 01:01:54 2025 GMT Not After : May 2 01:01:54 2025 GMT Subject: CN=680adf02-3d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:27:0f:b2:73:75:be:c3:4a:6a:e3:c6:c1: b2:39:da:f4:6b:b5:2b:28:52:50:fc:e5:f9:d0:45: 03:42:d7:ba:02:26:35:72:08:d5:65:de:4c:a4:83: 3c:ad:3a:b0:4e:d9:f6:99:be:e7:9b:66:49:57:de: 96:9a:5e:8e:89:2a:9e:ce:19:b8:93:25:da:fd:23: 74:a0:60:81:d1:75:05:5c:12:ee:fa:e7:07:98:15: a7:b0:d9:64:03:c5:7f:26:9f:6b:bc:9f:64:66:15: 07:5f:54:ca:46:85:bd:7e:a9:03:55:63:5c:71:5a: 9a:5b:0d:b5:92:06:a3:87:80:70:5a:cb:b5:32:f0: af:8c:6d:3d:58:03:c8:f7:64:0d:4d:0f:84:9f:c8: 0b:73:a1:58:c1:4a:42:74:ba:78:6e:2c:50:c0:ca: 68:48:45:45:c4:e2:4e:1a:40:6d:c1:8a:5e:e0:54: ad:fb:b6:64:b0:0a:5c:ce:8f:fa:9d:57:22:2f:d3: b3:94:fe:d9:d0:a2:35:99:a2:8b:7c:b4:c1:6c:46: 5f:f2:70:47:f0:54:e1:67:25:dc:01:84:80:ea:c7: 5d:5f:2d:20:b9:fd:f8:42:40:09:8f:8b:bf:a2:4c: e4:9d:0c:25:4d:eb:7d:06:31:63:f6:58:8c:1c:e3: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:15:9C:76:E9:59:24:D0:C3:BA:68:C9:F1:62:6E:A2:AB:D4:BC X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0e:a1:9c:46:a1:71:3e:6c:d7:79:b0:28:c3:f1:db:bf:c8: b5:68:67:2f:f6:9b:43:60:91:ce:99:0c:26:e8:1f:c9:22:0b: 07:ea:2e:15:30:c3:e6:a9:04:c7:39:86:d5:77:ab:c0:85:bf: e3:1a:7f:1d:c9:e8:52:a3:ed:32:68:15:98:11:c6:3f:d7:57: 74:0a:d0:3c:7d:90:ee:5f:29:0a:4a:bd:47:80:5f:fd:f6:9d: 6f:26:c2:59:f1:de:e9:0f:a5:ff:06:b5:67:f1:08:f3:89:34: b1:85:9e:93:4a:d6:c2:d3:3b:7a:7b:96:4f:bc:08:21:d6:05: 7d:55:45:10:ff:d6:96:e7:ee:c6:53:35:82:0c:dd:01:81:82: 30:70:57:75:f2:e0:7f:36:74:4b:c2:b2:a0:c2:3b:3e:ac:93: 4c:4a:c9:75:b2:a4:50:a9:e8:51:0a:76:df:3d:63:b6:01:14: 54:29:72:2d:9d:6a:2f:10:6e:3c:1f:ca:6b:fc:91:7c:7d:f1: 56:9f:a0:43:86:85:75:8e:67:81:a1:c0:b0:4c:21:99:e0:8e: 42:06:f3:13:91:70:db:84:89:5b:bb:f6:12:6b:a9:81:e8:8e: e6:b2:48:4c:aa:26:ec:ab:56:47:3f:f0:99:27:e2:8e:69:44: 9d:b8:94:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjUwNDI1MDEwMTU0WhcNMjUwNTAyMDEwMTU0WjAYMRYwFAYD VQQDEw02ODBhZGYwMi0zZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVUnD7Jzdb7DSmrjxsGyOdr0a7UrKFJQ/OX50EUDQte6AiY1cgjVZd5MpIM8 rTqwTtn2mb7nm2ZJV96Wml6OiSqezhm4kyXa/SN0oGCB0XUFXBLu+ucHmBWnsNlk A8V/Jp9rvJ9kZhUHX1TKRoW9fqkDVWNccVqaWw21kgajh4BwWsu1MvCvjG09WAPI 92QNTQ+En8gLc6FYwUpCdLp4bixQwMpoSEVFxOJOGkBtwYpe4FSt+7ZksApczo/6 nVciL9OzlP7Z0KI1maKLfLTBbEZf8nBH8FThZyXcAYSA6sddXy0guf34QkAJj4u/ okzknQwlTet9BjFj9liMHOOd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0eFZx2 6Vkk0MO6aMnxYm6iq9S8MB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzAxQS8wRjg1MDE0Q0QxMUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dD MnNjNGF1T1JSNlpHV1RxSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPDqGcRqFxPmzXebAow/Hbv8i1aGcv9ptDYJHOmQwm6B/JIgsH6i4V MMPmqQTHOYbVd6vAhb/jGn8dyehSo+0yaBWYEcY/11d0CtA8fZDuXykKSr1HgF/9 9p1vJsJZ8d7pD6X/BrVn8QjziTSxhZ6TStbC0zt6e5ZPvAgh1gV9VUUQ/9aW5+7G UzWCDN0BgYIwcFd18uB/NnRLwrKgwjs+rJNMSsl1sqRQqehRCnbfPWO2ARRUKXIt nWovEG48H8pr/JF8ffFWn6BDhoV1jmeBocCwTCGZ4I5CBvMTkXDbhIlbu/YSa6mB 6I7mskhMqibsq1ZHP/CZJ+KOaUSduJQt -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:34 2025 by rpki-client