$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft File: YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json) Hash identifier: FEgC5DFF11Qc4X6u3vk8sO8ZyXbsFaOU1q/0/WhwLGU= Subject key identifier: 9C:4C:35:DC:14:F5:7D:CC:1D:CE:D3:E0:8A:6B:B8:B8:37:BB:C7:55 Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 Certificate issuer: /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:51:56 +0000 Manifest this update: Fri 25 Apr 2025 04:51:56 +0000 Manifest next update: Fri 02 May 2025 04:51:56 +0000 Files and hashes: 1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: Zo5MP67DZ/Pfzgvy8YuzaAsYs/8TXiISJmzNVTuYxFo=) 2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: 5sqOGBsF1ucCZYwk5F1J19/8HxFnGjHNBCogN/tCysY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Validity Not Before: Apr 25 04:51:56 2025 GMT Not After : May 2 04:51:56 2025 GMT Subject: CN=680b14ec-f134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:36:4c:a1:45:0e:8f:9c:d0:e3:b5:ae:d8: 3f:55:ce:d6:28:fa:5f:e0:41:a1:b6:43:80:f4:ce: 90:c0:e4:bf:6a:c8:39:42:aa:9f:44:6d:f7:6d:fe: ab:63:1a:a3:dc:a4:20:30:fa:9e:d7:62:54:d7:df: d0:dc:28:65:f3:73:1e:70:89:1b:e6:4a:e0:bd:1a: 5a:85:2a:8d:4e:fc:ff:60:e8:e6:ee:08:37:94:f8: 18:82:c0:4f:6f:7e:4e:06:fc:80:94:f2:f2:5e:9d: 24:fa:3b:10:ee:27:d8:21:bc:d4:6f:ca:dd:29:43: c5:65:1e:30:ea:4d:a9:e2:3f:db:f2:f8:81:32:62: a6:f6:5e:6a:44:1c:ac:d7:2b:ec:7b:93:f5:71:80: 86:4d:7d:77:45:f5:7d:02:34:a5:16:a0:1d:0e:5a: 2c:a5:db:5e:9b:95:0e:cb:23:72:c1:7d:90:62:b2: de:d9:32:06:5b:f1:1b:b9:81:cb:9f:b5:2b:32:27: 03:b5:ae:50:1e:2d:1a:2a:bc:84:66:97:12:d4:5d: 9d:57:36:46:bf:90:80:0e:7b:7d:93:5d:c3:fe:73: 32:c4:de:b7:3f:9e:60:9c:74:ba:11:ce:f2:0b:e4: f7:b0:6c:0b:49:5e:d3:e0:a4:c9:b5:2c:5c:1b:6d: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:35:DC:14:F5:7D:CC:1D:CE:D3:E0:8A:6B:B8:B8:37:BB:C7:55 X509v3 Authority Key Identifier: keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d3:f1:a7:65:79:a7:23:7c:8f:6a:a7:34:6d:b9:98:7d:61: d0:c5:d7:a3:27:33:f0:de:08:e3:8d:cf:65:9b:11:fc:22:56: 81:52:cf:4b:4a:fc:6a:e9:bd:c1:6c:80:5e:63:b4:c3:2a:b3: 8e:9b:fa:15:34:b0:35:78:87:d1:72:6d:fe:f2:23:0e:f8:97: a6:1f:27:01:bc:d6:09:34:6b:e9:bf:f7:8c:34:88:ee:8e:e6: 9d:8a:8a:a0:1b:dd:4f:f3:78:67:ee:99:a7:53:67:8c:d0:1b: 7c:86:cb:aa:22:4a:1e:46:4a:5a:89:32:dc:68:19:eb:ee:c2: 50:8f:be:1c:cc:53:82:75:a9:41:5e:8f:29:c7:25:57:00:0e: 51:3e:39:25:ad:d4:34:39:10:d4:3d:49:6e:b7:26:7b:2c:bd: f9:04:39:2b:0b:7f:8a:67:cf:4f:44:61:4f:19:d9:7b:15:b5: 81:5f:28:10:9f:f0:69:be:4f:09:a2:b5:17:24:5f:06:27:2f: ff:c0:74:67:19:22:ba:4f:2a:00:6e:f3:49:46:17:3a:75:0d: 45:e3:5f:c3:2c:6c:d4:c5:2d:e4:92:fa:f2:b6:4f:41:ee:2c: 9b:f2:9a:9d:f4:78:cc:c3:42:88:b8:eb:5f:e9:a3:7a:9e:f4: 80:99:78:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4OUExMTAvBgNVBAUTKDYwRTU0RjYwNTFFREI0MUVBN0E5NTA4OTZDRDlCQkQ2 NzAxMjBENjMwHhcNMjUwNDI1MDQ1MTU2WhcNMjUwNTAyMDQ1MTU2WjAYMRYwFAYD VQQDEw02ODBiMTRlYy1mMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuY2TKFFDo+c0OO1rtg/Vc7WKPpf4EGhtkOA9M6QwOS/asg5QqqfRG33bf6r Yxqj3KQgMPqe12JU19/Q3Chl83MecIkb5krgvRpahSqNTvz/YOjm7gg3lPgYgsBP b35OBvyAlPLyXp0k+jsQ7ifYIbzUb8rdKUPFZR4w6k2p4j/b8viBMmKm9l5qRBys 1yvse5P1cYCGTX13RfV9AjSlFqAdDlospdtem5UOyyNywX2QYrLe2TIGW/EbuYHL n7UrMicDta5QHi0aKryEZpcS1F2dVzZGv5CADnt9k13D/nMyxN63P55gnHS6Ec7y C+T3sGwLSV7T4KTJtSxcG22FDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxMNdwU 9X3MHc7T4IpruLg3u8dVMB8GA1UdIwQYMBaAFGDlT2BR7bQep6lQiWzZu9ZwEg1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg5QS84QzcwNDc0NEY4 ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi9ZT1ZQWUZIdHRCNm5xVkNKYk5tNzFuQVNE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lPVlBZRkh0dEI2bnFWQ0piTm03MW5BU0RXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg5QS84QzcwNDc0NEY4ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi9ZT1ZQWUZIdHRC Nm5xVkNKYk5tNzFuQVNEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB20/GnZXmnI3yPaqc0bbmYfWHQxdejJzPw3gjjjc9lmxH8IlaBUs9L Svxq6b3BbIBeY7TDKrOOm/oVNLA1eIfRcm3+8iMO+JemHycBvNYJNGvpv/eMNIju juadioqgG91P83hn7pmnU2eM0Bt8hsuqIkoeRkpaiTLcaBnr7sJQj74czFOCdalB Xo8pxyVXAA5RPjklrdQ0ORDUPUlutyZ7LL35BDkrC3+KZ89PRGFPGdl7FbWBXygQ n/Bpvk8JorUXJF8GJy//wHRnGSK6TyoAbvNJRhc6dQ1F41/DLGzUxS3kkvrytk9B 7iyb8pqd9HjMw0KIuOtf6aN6nvSAmXjy -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:55 2025 by rpki-client