$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: 1pNjPR+1MQS6joj73FO0Cn/G8xmOswMif1lCWmW2UiM= Subject key identifier: F3:E4:0F:1A:A3:BF:0B:60:E1:FF:3D:8D:4F:C8:01:6B:EE:58:9B:90 Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 059A Signing time: Wed 02 Apr 2025 23:12:52 +0000 Manifest this update: Wed 02 Apr 2025 23:12:51 +0000 Manifest next update: Wed 09 Apr 2025 23:12:51 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: bc2i/CofEQqH40vB16R4a3JxQJAgmV4wR+aqfTVXBXs=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: f4gRh38ZrvS7ONxmLsMLRwFey6PLic9m7nSCkN6WMeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2 Validity Not Before: Apr 2 23:12:51 2025 GMT Not After : Apr 9 23:12:51 2025 GMT Subject: CN=67edc473-dcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:0a:b9:eb:7e:94:e4:37:4f:18:ea:cc:02: 43:a1:ab:2f:66:e8:4e:54:6c:10:c8:fb:44:38:8e: 1d:a4:08:d7:df:a9:17:a7:1d:b8:a2:89:85:0b:20: c0:24:ad:8e:4b:4b:c2:70:09:1d:9c:c2:dd:c4:b0: d8:33:c6:32:5c:b9:f5:60:9f:69:b3:ea:e3:0d:f4: 8e:2b:ec:9d:37:11:73:d6:27:87:d1:35:e9:f5:e4: 17:67:86:75:4e:00:1e:f7:5d:ba:61:fe:ce:23:cb: 9f:2d:c6:0c:1c:aa:0b:77:ec:6b:1b:a6:9b:2a:ed: 37:25:08:8c:29:c9:6d:83:8c:0d:7c:6f:48:80:1b: 29:ef:b9:ac:5f:1d:1f:8b:16:dd:c9:47:68:42:69: fa:67:a8:eb:3b:6c:c1:6b:f5:80:45:30:6b:3e:0a: 7a:c9:49:0b:20:5e:13:8f:55:f3:ac:51:8a:64:50: 3b:28:70:92:04:cd:08:57:aa:83:ed:c6:1d:91:1d: 4a:9c:2f:00:96:6f:1c:00:2a:a2:de:e3:4a:9e:2f: 6a:dd:fc:51:f0:e8:84:7c:5e:27:88:e8:00:c0:50: b3:67:e6:4f:17:97:75:fd:b8:61:c1:f8:3b:b6:03: 9a:dd:7f:a7:de:9e:83:28:43:9e:c7:f3:f3:44:70: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:0F:1A:A3:BF:0B:60:E1:FF:3D:8D:4F:C8:01:6B:EE:58:9B:90 X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:af:74:31:ef:00:55:35:d5:d9:cd:56:9a:7e:4a:38:be:87: 22:a9:b9:76:29:c2:67:d2:56:8b:15:8f:ab:2e:44:fb:b3:7d: 6c:c3:ea:60:ab:92:57:dc:48:01:5e:6e:69:f3:6c:92:1d:e9: 05:53:3f:e4:64:54:60:36:67:92:06:fd:9d:52:06:72:04:b0: f8:25:d3:bd:0f:4c:39:9f:b3:26:3f:cf:69:40:86:3c:5e:47: a0:06:d9:4b:d7:d2:a8:fc:25:0b:63:36:62:40:05:6b:a0:31: 9f:d8:9f:a7:b2:18:47:81:c9:58:fc:f0:97:13:28:10:0e:5f: ba:de:07:1c:0c:f6:f4:4f:f3:c3:bb:b6:37:e5:d4:b2:8d:80: cb:ca:54:51:62:3b:52:b0:7f:fe:17:08:0b:7f:47:02:78:02: 56:a7:33:d2:20:83:33:e9:3d:b2:28:36:4d:31:6c:f0:73:90: 76:78:6b:cd:37:f2:48:bb:13:76:69:6b:c0:f5:4e:6b:f5:dc: 75:91:aa:11:c7:69:10:2b:71:21:10:70:53:4e:14:f5:23:66: 39:7a:07:23:29:cc:81:22:a8:20:35:59:5b:ff:ca:11:d8:4d: 75:65:dd:c4:7e:5d:26:8f:57:c3:45:0d:40:68:c8:27:29:ad: 90:10:8b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUwNDAyMjMxMjUxWhcNMjUwNDA5MjMxMjUxWjAYMRYwFAYD VQQDEw02N2VkYzQ3My1kY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5QKuet+lOQ3TxjqzAJDoasvZuhOVGwQyPtEOI4dpAjX36kXpx24oomFCyDA JK2OS0vCcAkdnMLdxLDYM8YyXLn1YJ9ps+rjDfSOK+ydNxFz1ieH0TXp9eQXZ4Z1 TgAe9126Yf7OI8ufLcYMHKoLd+xrG6abKu03JQiMKcltg4wNfG9IgBsp77msXx0f ixbdyUdoQmn6Z6jrO2zBa/WARTBrPgp6yUkLIF4Tj1XzrFGKZFA7KHCSBM0IV6qD 7cYdkR1KnC8Alm8cACqi3uNKni9q3fxR8OiEfF4niOgAwFCzZ+ZPF5d1/bhhwfg7 tgOa3X+n3p6DKEOex/PzRHAEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPkDxqj vwtg4f89jU/IAWvuWJuQMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkr3Qx7wBVNdXZzVaafko4vociqbl2KcJn0laLFY+rLkT7s31sw+pg q5JX3EgBXm5p82ySHekFUz/kZFRgNmeSBv2dUgZyBLD4JdO9D0w5n7MmP89pQIY8 XkegBtlL19Ko/CULYzZiQAVroDGf2J+nshhHgclY/PCXEygQDl+63gccDPb0T/PD u7Y35dSyjYDLylRRYjtSsH/+FwgLf0cCeAJWpzPSIIMz6T2yKDZNMWzwc5B2eGvN N/JIuxN2aWvA9U5r9dx1kaoRx2kQK3EhEHBTThT1I2Y5egcjKcyBIqggNVlb/8oR 2E11Zd3Efl0mj1fDRQ1AaMgnKa2QEIvA -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:29 2025 by rpki-client