$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: BsuW7jPSwYmg+CZGerBgxbBo3G8bqopTW1SYJ9Vw9WU= Subject key identifier: E2:01:C8:43:D0:09:BE:DF:2B:EE:98:E7:65:02:74:51:D3:21:66:9A Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: 8F Signing time: Sat 29 Mar 2025 05:47:32 +0000 Manifest this update: Sat 29 Mar 2025 05:47:32 +0000 Manifest next update: Sat 05 Apr 2025 05:47:32 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: /O+BMqZZ6p/hWVhhO9QbxIiWFF0vqRhmEwqJLGiCLHc=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2 Validity Not Before: Mar 29 05:47:32 2025 GMT Not After : Apr 5 05:47:32 2025 GMT Subject: CN=67e78974-b9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:cc:10:2d:a4:4e:d6:ae:fc:80:02:32:f5: ad:54:dd:3d:36:f8:c5:a3:13:a9:12:d5:16:1e:ed: 80:84:b1:7a:13:de:d3:59:b5:f7:f2:10:32:2c:be: d5:c0:5b:1b:b9:8e:2e:6b:ea:8f:fc:11:5c:e9:2c: 37:da:eb:e6:73:56:75:ea:4a:5c:27:37:80:15:35: cf:79:80:81:fe:8b:a2:34:da:e3:1d:5b:74:18:c4: d1:b5:2b:53:67:b4:05:da:9b:60:bf:8e:6d:75:fb: 74:5f:fc:bb:5c:7a:1d:27:a1:bd:20:1e:65:a4:84: 69:19:0b:a5:9c:0c:83:4f:78:3b:d9:88:37:71:62: 15:4a:18:b1:43:58:f9:6d:81:50:1c:4e:6a:bf:36: d7:97:70:13:01:d8:2f:78:50:b6:61:97:f4:c4:2b: 5e:d0:69:0c:66:88:14:38:39:1a:e8:0c:53:63:09: d3:85:09:46:6c:9a:d3:81:86:e5:c4:98:be:0e:35: 3a:e8:ab:bd:cf:0e:c4:fa:db:81:3c:9d:57:79:7b: 40:95:a8:5d:95:7f:c2:a4:0c:a5:ab:53:3c:96:7c: 6e:6a:ad:3c:98:87:ad:10:b7:6e:24:3d:74:d6:3d: 83:d6:0d:92:60:5b:e2:75:40:b8:b7:e9:63:e0:70: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:01:C8:43:D0:09:BE:DF:2B:EE:98:E7:65:02:74:51:D3:21:66:9A X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:0e:5d:ee:68:97:28:72:6c:8a:7c:4a:30:76:27:bd:42:a5: 9c:d9:e3:88:e0:e1:e8:a0:93:68:3c:ae:b5:72:45:a2:9d:c6: 8f:71:ad:f4:f6:ea:3e:74:a8:3c:1a:01:71:9a:84:11:d0:b4: 48:0b:4c:28:0b:3a:c1:89:b9:87:da:ba:a3:f5:40:5b:6a:ee: cf:b7:32:24:85:04:51:c9:b5:38:7b:9a:06:7d:ea:e4:13:f1: c8:78:66:9e:03:01:6b:e0:d2:00:53:c2:3f:94:2d:41:7e:82: 5d:02:2a:e2:5d:8f:79:9b:93:05:de:88:42:48:eb:2d:d1:74: 71:9c:b1:14:89:31:45:25:fb:d7:04:9a:f1:ce:83:9b:92:7e: 51:b2:2e:f7:3d:5e:f3:17:01:45:80:7e:8f:2e:f9:06:eb:8d: 6e:b5:3c:50:7e:5f:87:10:c2:25:da:1e:a4:29:93:0a:7a:7d: a9:eb:8b:ff:65:d0:57:a9:e8:bd:4e:89:95:e5:1e:85:cd:ea: d6:11:9b:9b:70:7e:e4:82:03:53:0d:4c:97:f3:96:79:a5:28: 99:06:55:66:7b:31:a2:f6:ce:57:2c:3a:39:0f:e7:09:80:7b: 43:de:e5:b9:ab:1c:93:b6:75:e3:f8:85:6a:af:63:90:82:5f: 99:0b:be:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjUwMzI5MDU0NzMyWhcNMjUwNDA1MDU0NzMyWjAYMRYwFAYD VQQDEw02N2U3ODk3NC1iOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzTMEC2kTtau/IACMvWtVN09NvjFoxOpEtUWHu2AhLF6E97TWbX38hAyLL7V wFsbuY4ua+qP/BFc6Sw32uvmc1Z16kpcJzeAFTXPeYCB/ouiNNrjHVt0GMTRtStT Z7QF2ptgv45tdft0X/y7XHodJ6G9IB5lpIRpGQulnAyDT3g72Yg3cWIVShixQ1j5 bYFQHE5qvzbXl3ATAdgveFC2YZf0xCte0GkMZogUODka6AxTYwnThQlGbJrTgYbl xJi+DjU66Ku9zw7E+tuBPJ1XeXtAlahdlX/CpAylq1M8lnxuaq08mIetELduJD10 1j2D1g2SYFvidUC4t+lj4HCdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIByEPQ Cb7fK+6Y52UCdFHTIWaaMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMDl3uaJcocmyKfEowdie9QqWc2eOI4OHooJNoPK61ckWincaPca30 9uo+dKg8GgFxmoQR0LRIC0woCzrBibmH2rqj9UBbau7PtzIkhQRRybU4e5oGferk E/HIeGaeAwFr4NIAU8I/lC1BfoJdAiriXY95m5MF3ohCSOst0XRxnLEUiTFFJfvX BJrxzoObkn5Rsi73PV7zFwFFgH6PLvkG641utTxQfl+HEMIl2h6kKZMKen2p64v/ ZdBXqei9TomV5R6FzerWEZubcH7kggNTDUyX85Z5pSiZBlVmezGi9s5XLDo5D+cJ gHtD3uW5qxyTtnXj+IVqr2OQgl+ZC75n -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:35 2025 by rpki-client