$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: cdoKyFsm8fK9XDw++xfJof25EjhHZ7T1sttYBPPjtso= Subject key identifier: 7B:AA:FA:03:6B:1A:E8:72:44:F3:2C:C3:07:5F:68:A9:CA:99:40:8D Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 018A Signing time: Sat 05 Apr 2025 02:59:37 +0000 Manifest this update: Sat 05 Apr 2025 02:59:36 +0000 Manifest next update: Sat 12 Apr 2025 02:59:36 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: Qw7ay2bXRuVG9qA9bxaWNDAOPpmKRmwvV/3iUFO5CB4=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0 Validity Not Before: Apr 5 02:59:36 2025 GMT Not After : Apr 12 02:59:36 2025 GMT Subject: CN=67f09c99-adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:ec:2c:53:af:41:75:12:ef:56:e7:c8:3b: ac:5c:39:3f:d2:d5:d4:dd:84:87:29:c8:40:5c:15: 00:9c:58:d4:ff:a7:2d:f0:61:0c:21:e1:ab:fd:a9: 67:0a:48:d6:1a:9c:27:58:a0:64:a4:9f:60:57:1a: 27:5e:03:cb:0c:5f:44:4b:35:1a:03:5a:1f:e8:d1: b8:d3:3e:b6:f2:db:64:b8:a5:c5:3a:84:31:92:32: 0c:ed:f6:41:38:fe:c4:cb:e2:29:84:62:8d:6f:4d: 0a:6b:89:88:05:07:83:1c:be:d6:ea:e1:84:18:ec: 67:de:43:c0:1c:0a:dc:c7:87:41:9d:e1:3d:8a:8a: 17:10:09:f8:fd:38:38:4d:da:d8:5a:79:78:95:e2: 8c:91:be:5e:58:c0:c6:25:1f:59:7c:ae:76:ab:03: 76:18:ff:3d:19:48:78:81:37:f8:ee:bf:bb:f4:08: 61:a4:cb:fa:a7:06:bd:51:ac:7b:16:c6:5b:14:9c: fa:75:ed:27:5e:6a:12:58:48:3c:39:9d:32:c2:8d: 13:fb:2d:52:a1:c9:c8:be:13:f8:62:77:6e:84:04: 9f:2c:3f:db:fe:9e:36:4c:c4:da:3a:ef:62:40:ba: ef:9f:27:88:70:5d:5b:78:1f:49:6d:57:a2:6f:d6: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:FA:03:6B:1A:E8:72:44:F3:2C:C3:07:5F:68:A9:CA:99:40:8D X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:27:08:c2:b7:18:98:a9:d3:47:a2:a3:4c:e7:52:0c:fe:24: 18:3b:20:02:3d:dc:4c:02:a2:94:e3:43:3b:ae:bc:a7:22:d5: d4:e6:79:bc:0c:18:e3:ae:cf:6e:49:f4:2d:9b:0f:bf:95:0f: dc:53:06:2e:77:45:f8:f7:2d:31:93:9b:c3:e6:9f:c0:2a:6f: e4:be:70:0a:50:db:ac:6b:5f:aa:ba:3c:de:84:25:8c:d7:db: b7:6e:f8:73:49:c4:83:b2:a1:69:08:43:aa:9b:0d:71:21:4f: 01:c1:7e:9a:c6:e7:c7:a9:5a:05:43:01:6a:cc:a5:da:eb:5d: 7d:07:3f:e1:36:09:59:fb:a9:21:ba:76:a7:df:1d:d6:ca:36: c8:cd:b6:80:15:84:76:fa:98:af:a1:b1:7b:64:9e:ef:09:00: 2f:1a:4f:52:31:90:82:91:dc:05:4e:a7:51:06:c1:5a:4c:12: 76:3c:d8:8f:1e:95:05:9e:b1:4f:03:97:ea:13:6f:bb:fa:d2: 9d:8a:58:65:c6:0f:58:86:04:ea:6c:93:1a:37:80:05:39:79: e1:6e:d5:2d:a5:ba:50:74:36:86:10:d2:c9:9c:4b:f1:44:fc: f1:10:3b:c2:8a:08:c5:49:ea:df:87:a7:4e:55:eb:2f:40:85: e1:9e:5b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUwNDA1MDI1OTM2WhcNMjUwNDEyMDI1OTM2WjAYMRYwFAYD VQQDEw02N2YwOWM5OS1hZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVnsLFOvQXUS71bnyDusXDk/0tXU3YSHKchAXBUAnFjU/6ct8GEMIeGr/aln CkjWGpwnWKBkpJ9gVxonXgPLDF9ESzUaA1of6NG40z628ttkuKXFOoQxkjIM7fZB OP7Ey+IphGKNb00Ka4mIBQeDHL7W6uGEGOxn3kPAHArcx4dBneE9iooXEAn4/Tg4 TdrYWnl4leKMkb5eWMDGJR9ZfK52qwN2GP89GUh4gTf47r+79AhhpMv6pwa9Uax7 FsZbFJz6de0nXmoSWEg8OZ0ywo0T+y1SocnIvhP4YnduhASfLD/b/p42TMTaOu9i QLrvnyeIcF1beB9JbVeib9ZvxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuq+gNr GuhyRPMswwdfaKnKmUCNMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFJwjCtxiYqdNHoqNM51IM/iQYOyACPdxMAqKU40M7rrynItXU5nm8 DBjjrs9uSfQtmw+/lQ/cUwYud0X49y0xk5vD5p/AKm/kvnAKUNusa1+qujzehCWM 19u3bvhzScSDsqFpCEOqmw1xIU8BwX6axufHqVoFQwFqzKXa6119Bz/hNglZ+6kh unan3x3WyjbIzbaAFYR2+pivobF7ZJ7vCQAvGk9SMZCCkdwFTqdRBsFaTBJ2PNiP HpUFnrFPA5fqE2+7+tKdilhlxg9YhgTqbJMaN4AFOXnhbtUtpbpQdDaGENLJnEvx RPzxEDvCigjFSerfh6dOVesvQIXhnluq -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:35 2025 by rpki-client