$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: 1WJInPx6XNCMiITHqMA/TLBlrc4U4MVRsSHGoo4+wrc= Subject key identifier: AF:A7:91:84:FC:D1:7A:14:71:B7:9F:4C:11:99:77:D6:CC:56:B9:E8 Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 4E Signing time: Sat 19 Apr 2025 06:40:09 +0000 Manifest this update: Sat 19 Apr 2025 06:40:08 +0000 Manifest next update: Sat 26 Apr 2025 06:40:08 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: NbLDuBREIO694BjQW9rYz5X8hkTyKbgNDWqs6WWSJVc=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Apr 19 06:40:08 2025 GMT Not After : Apr 26 06:40:08 2025 GMT Subject: CN=68034548-6324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:ec:91:9e:c4:ec:1c:24:4d:3d:25:db:b5: b8:47:01:6f:33:a3:b4:56:a3:3e:53:9c:78:ff:5a: 90:2d:b5:df:83:c1:ad:20:4d:95:8a:b2:40:93:96: 53:cf:4a:a2:8a:a4:38:a5:23:55:af:cc:46:27:cf: 56:b5:18:2d:ee:c4:e6:92:c4:5d:2d:d1:28:ac:8c: f6:ca:a3:15:82:a5:cc:d7:50:32:2d:0c:d6:af:df: 3f:2d:aa:f7:02:84:d1:b0:7c:6e:4d:c1:31:fe:86: ac:d1:ef:4b:ef:67:61:29:72:e0:d7:76:9d:27:8c: 8f:17:5e:19:1f:7d:9e:c8:fc:cf:1d:a2:c8:ad:d5: c2:b1:70:13:37:4f:d9:80:04:2b:2d:9e:dc:af:15: 8b:ca:76:e7:04:ed:70:10:74:06:ed:9e:60:fa:2d: 2d:a9:e7:18:cf:61:df:7c:dc:84:39:25:49:23:e3: c4:55:46:d9:bb:b8:7c:f7:5b:3b:55:a0:1a:49:d7: 9a:03:b6:d8:1f:9e:a8:de:35:11:03:84:05:e6:91: 4c:de:da:d0:4c:49:51:af:61:45:bb:3b:ed:a3:05: ba:37:1f:cb:a0:9e:85:8c:25:0f:f2:cc:12:03:11: c0:9f:90:6b:b5:8a:a2:a9:22:fc:60:56:5c:1e:12: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:91:84:FC:D1:7A:14:71:B7:9F:4C:11:99:77:D6:CC:56:B9:E8 X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:74:f2:8c:aa:7f:d0:7f:ab:17:2b:31:19:2c:6d:ff:1d:47: 8d:0b:63:30:90:c0:cd:e5:75:b0:7b:f9:7c:a5:17:a5:4b:eb: b9:27:52:2b:6b:92:a3:47:78:e5:2c:a7:bf:bb:f8:c5:ab:8c: 58:82:eb:a3:01:9d:f2:87:75:ac:0c:a7:68:a5:d4:c6:d8:35: 3f:a1:5a:a4:e0:51:0c:65:0c:d5:4e:b0:e7:81:2b:42:8c:3e: eb:97:ab:90:d3:bc:18:4c:3b:45:03:45:11:8f:dd:ed:56:06: 16:1e:b9:59:cd:92:ca:6b:67:cb:e0:f2:04:66:85:dd:7a:bb: fe:44:2e:1a:cf:e1:a9:e6:41:bd:50:11:40:55:7e:ed:10:e5: c4:e0:5b:86:66:cf:21:f2:d1:27:c6:59:fe:72:84:23:a9:80: 59:74:c9:66:bd:ac:90:21:83:40:47:4e:76:82:62:cf:a3:b5: 05:32:24:65:ff:6b:d5:b3:47:d2:2f:25:00:87:be:25:2b:ad: 56:57:06:f8:7e:a9:b1:11:1e:55:90:7d:72:da:f4:5d:3f:8f: aa:e7:14:cf:4a:77:84:02:97:69:21:c1:13:2e:a5:35:0d:82: d0:c1:bb:2f:99:5b:27:50:76:e1:d0:14:b4:18:62:98:03:8d: f3:e1:0b:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoNjI0Qjk2RTFENjY1RUQ3OEU3OERGQUY2QzIyMDE5MTA3 M0RCNjZDQzAeFw0yNTA0MTkwNjQwMDhaFw0yNTA0MjYwNjQwMDhaMBgxFjAUBgNV BAMTDTY4MDM0NTQ4LTYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ZuyRnsTsHCRNPSXbtbhHAW8zo7RWoz5TnHj/WpAttd+Dwa0gTZWKskCTllPP SqKKpDilI1WvzEYnz1a1GC3uxOaSxF0t0SisjPbKoxWCpczXUDItDNav3z8tqvcC hNGwfG5NwTH+hqzR70vvZ2EpcuDXdp0njI8XXhkffZ7I/M8dosit1cKxcBM3T9mA BCstntyvFYvKducE7XAQdAbtnmD6LS2p5xjPYd983IQ5JUkj48RVRtm7uHz3WztV oBpJ15oDttgfnqjeNREDhAXmkUze2tBMSVGvYUW7O+2jBbo3H8ugnoWMJQ/yzBID EcCfkGu1iqKpIvxgVlweEhNrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr6eRhPzR ehRxt59MEZl31sxWuegwHwYDVR0jBBgwFoAUYkuW4dZl7Xjnjfr2wiAZEHPbZsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0MxMTJGNTVDRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWWt1VzRkWmw3WGpuamZyMndpQVpFSFBiWnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0MxMTJGNTVDRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hq bmpmcjJ3aUFaRUhQYlpzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADx08oyqf9B/qxcrMRksbf8dR40LYzCQwM3ldbB7+XylF6VL67knUitr kqNHeOUsp7+7+MWrjFiC66MBnfKHdawMp2il1MbYNT+hWqTgUQxlDNVOsOeBK0KM PuuXq5DTvBhMO0UDRRGP3e1WBhYeuVnNksprZ8vg8gRmhd16u/5ELhrP4anmQb1Q EUBVfu0Q5cTgW4ZmzyHy0SfGWf5yhCOpgFl0yWa9rJAhg0BHTnaCYs+jtQUyJGX/ a9WzR9IvJQCHviUrrVZXBvh+qbERHlWQfXLa9F0/j6rnFM9Kd4QCl2khwRMupTUN gtDBuy+ZWydQduHQFLQYYpgDjfPhCz8= -----END CERTIFICATE-----Generated at Sat Apr 19 07:54:47 2025 by rpki-client