$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: Rnk17wrr8JRgP4l216poZfa/QdNHPv9WfoKl9AHF5sw= Subject key identifier: 3E:03:60:62:38:36:D5:D2:F4:4F:42:D6:56:37:39:D9:4F:F3:AD:05 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 2B Signing time: Fri 11 Apr 2025 07:00:26 +0000 Manifest this update: Fri 11 Apr 2025 07:00:25 +0000 Manifest next update: Fri 18 Apr 2025 07:00:25 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: Lpz9QudSRBHXySHUMZow7ZZyDW3PWDyqJRBzNh5LNgc=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: u8mLTgdlzLOcst0PW7RFWtPWXwp8xBwUEW3SQOngh5k=) 3: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (hash: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68 Validity Not Before: Apr 11 07:00:25 2025 GMT Not After : Apr 18 07:00:25 2025 GMT Subject: CN=67f8be09-86ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:38:83:5d:d6:34:43:bf:12:38:3f:36:5d: 1d:34:73:04:48:a8:06:99:68:92:1d:99:58:fe:72: b3:92:13:20:b8:87:cb:06:2a:d2:c0:03:8e:ab:61: c5:23:c1:c9:47:89:21:22:ab:eb:32:28:00:f6:25: 28:fb:61:f2:8b:8f:47:6f:0c:da:56:be:8d:6f:fa: 25:25:b7:0c:9e:7f:78:7e:fb:31:c4:89:74:01:6e: 5a:26:66:34:b5:98:fe:2b:7b:b0:b1:e7:cf:e4:ac: 4a:3c:28:dd:07:e1:ba:23:af:7b:34:14:3c:f5:11: 06:0a:76:db:ff:a4:53:49:7c:07:48:ca:a3:ee:6d: de:b1:4c:94:73:5e:27:11:b4:13:89:ff:6c:eb:20: b5:f4:69:f2:90:46:b7:c0:cf:c3:89:1a:dd:c8:4b: 00:d7:0a:5a:a4:fb:96:fd:02:eb:3f:b3:bc:c7:5b: 5b:1a:62:88:88:eb:36:42:99:ed:2a:b0:93:78:d7: db:58:e9:21:7d:d6:26:ff:d5:7d:42:bf:80:73:b4: c2:e7:e0:37:45:dc:48:3c:4a:e6:9c:3f:84:15:ac: cc:e4:fa:e5:d8:53:06:58:90:fb:72:7e:db:dd:90: ed:0e:65:3c:24:a6:e7:1a:64:ff:16:03:e9:13:12: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:03:60:62:38:36:D5:D2:F4:4F:42:D6:56:37:39:D9:4F:F3:AD:05 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:85:21:2b:f6:03:92:62:33:2c:fc:92:31:59:bf:ad:46:5d: 8c:36:85:1e:5d:00:50:ce:d8:7a:c0:b3:e8:ff:ef:82:c5:69: c2:9f:db:ec:50:9a:86:bd:6c:20:46:b3:07:61:aa:ca:9c:30: bd:f6:ae:e5:e6:14:4c:6b:34:f6:43:7d:24:08:79:a9:f4:ae: d5:b9:34:88:e6:1f:84:ef:9a:7f:32:a3:84:e2:c5:d6:6e:ca: 80:c1:1d:bf:08:ac:c6:e5:86:83:96:0c:22:ad:46:4e:88:c6: fb:ee:b1:f3:84:1e:8f:1f:b6:7f:14:8d:68:1d:a8:49:db:de: c9:89:ed:f3:12:d0:95:d7:8e:6d:bf:7d:3d:83:60:a0:98:25: 55:c7:a0:3f:79:fe:29:00:da:04:9a:e6:ac:6c:24:20:94:b1: 47:85:51:ff:c8:81:a2:1e:4f:a8:48:7d:a5:ba:7e:f1:9d:65: 56:ed:e6:98:8d:42:fe:9b:17:9f:1e:a5:ad:98:95:28:f4:0c: 5f:a6:b3:c7:9e:46:c5:da:87:e0:2c:17:67:b4:f5:96:87:d3: d0:d6:13:54:a4:a9:06:f9:92:a4:b3:63:5d:24:8a:73:c2:8d: 50:c0:54:22:50:bd:07:b2:44:32:2f:85:69:91:4f:16:25:72: d1:75:14:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA0MTEwNzAwMjVaFw0yNTA0MTgwNzAwMjVaMBgxFjAUBgNV BAMTDTY3ZjhiZTA5LTg2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOUDiDXdY0Q78SOD82XR00cwRIqAaZaJIdmVj+crOSEyC4h8sGKtLAA46rYcUj wclHiSEiq+syKAD2JSj7YfKLj0dvDNpWvo1v+iUltwyef3h++zHEiXQBblomZjS1 mP4re7Cx58/krEo8KN0H4bojr3s0FDz1EQYKdtv/pFNJfAdIyqPubd6xTJRzXicR tBOJ/2zrILX0afKQRrfAz8OJGt3ISwDXClqk+5b9Aus/s7zHW1saYoiI6zZCme0q sJN419tY6SF91ib/1X1Cv4BztMLn4DdF3Eg8SuacP4QVrMzk+uXYUwZYkPtyftvd kO0OZTwkpucaZP8WA+kTEihpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPgNgYjg2 1dL0T0LWVjc52U/zrQUwHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGFISv2A5JiMyz8kjFZv61GXYw2hR5dAFDO2HrAs+j/74LFacKf2+xQ moa9bCBGswdhqsqcML32ruXmFExrNPZDfSQIean0rtW5NIjmH4Tvmn8yo4TixdZu yoDBHb8IrMblhoOWDCKtRk6IxvvusfOEHo8ftn8UjWgdqEnb3smJ7fMS0JXXjm2/ fT2DYKCYJVXHoD95/ikA2gSa5qxsJCCUsUeFUf/IgaIeT6hIfaW6fvGdZVbt5piN Qv6bF58epa2YlSj0DF+ms8eeRsXah+AsF2e09ZaH09DWE1SkqQb5kqSzY10kinPC jVDAVCJQvQeyRDIvhWmRTxYlctF1FMQ= -----END CERTIFICATE-----Generated at Sat Apr 12 01:28:45 2025 by rpki-client