$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: 48HEsx+DPNGFPDCWDxJX4hP2YsV0CMqs+yQynkILieA= Subject key identifier: C4:61:0A:2C:B9:99:8B:39:13:B1:18:87:77:F9:95:4F:40:6E:72:97 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 02CC Signing time: Thu 03 Apr 2025 01:24:53 +0000 Manifest this update: Thu 03 Apr 2025 01:24:53 +0000 Manifest next update: Thu 10 Apr 2025 01:24:53 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: ym87D/EW+43dBebjz4IVz9HSgIz+cdpS57CbkFla1Uk=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ipLQrTfxlsH1xbpA5Xtx6FI7FTiCB5Vq0xVbQe7ALKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17 Validity Not Before: Apr 3 01:24:53 2025 GMT Not After : Apr 10 01:24:53 2025 GMT Subject: CN=67ede365-f433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:d4:ee:d0:21:2b:43:8d:50:ca:53:bd:fe: fd:5a:4b:53:92:13:0b:41:2b:cb:a5:2e:28:40:3e: df:92:f5:f1:8d:98:d7:48:a2:2f:d3:fc:25:40:9c: c5:db:39:19:16:f2:c3:de:d5:4f:a2:53:8f:04:71: bd:06:d5:91:71:eb:9e:77:56:38:9b:8e:22:95:14: 02:d2:62:73:85:37:e3:c4:05:91:25:e9:5d:78:20: 95:f2:5a:76:8d:1e:0e:ac:52:46:6d:89:20:f6:f1: 5c:2c:3c:24:07:79:c2:cb:0e:4c:b7:fd:a0:ae:1f: 62:dc:ce:21:6b:9f:99:28:ce:08:61:90:e4:c4:64: 78:6b:f9:b7:bf:85:de:97:48:57:12:4f:6a:aa:2e: c3:e1:31:eb:5a:6f:2d:61:a4:70:71:6d:09:a6:fb: 0c:40:5b:72:42:bb:ba:ed:f9:aa:6d:9e:d8:5c:2f: 5a:50:29:d8:18:71:8f:8a:d8:6a:48:4b:0b:10:9b: ac:cb:2c:93:15:ba:16:1f:59:69:02:c8:94:f8:a9: a5:a4:ae:64:ce:cc:f8:de:99:26:8f:57:49:6a:cb: f8:d8:27:87:19:41:cb:4a:07:4f:37:2c:59:36:9a: 49:0f:c6:34:24:cd:a6:d9:a8:f4:82:2d:92:59:c7: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:0A:2C:B9:99:8B:39:13:B1:18:87:77:F9:95:4F:40:6E:72:97 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:35:b3:09:0d:63:05:c6:69:25:1d:50:25:d7:e6:32:2c: eb:98:ca:a4:0d:3f:d4:f8:3f:80:21:0c:5b:d3:4a:8e:44:b3: 56:7c:ea:7c:b7:84:4c:ad:89:0b:86:a0:78:70:5a:70:59:c1: 6c:fc:11:4b:a3:ce:f0:d8:d6:d2:03:a3:c2:2f:73:1e:8c:a6: 0a:cb:d2:86:e3:af:27:f3:53:fb:38:aa:05:5d:96:16:9a:c3: e8:03:46:67:c6:1d:0a:d5:7c:73:5b:d1:32:e9:0f:e8:54:0c: 40:41:f5:05:cd:32:9a:95:af:48:73:40:2e:fe:87:fc:ca:5d: ce:92:bf:ba:3d:76:57:50:1d:96:3e:76:d3:dc:9b:90:6a:01: 04:47:d0:aa:09:a7:f5:ea:8c:34:92:de:b6:7c:26:00:25:42: 06:95:23:12:03:cb:d1:f7:7a:58:08:97:7a:01:c7:6b:06:a6: ef:88:98:ec:bd:cf:8c:17:65:9c:8e:f5:62:bd:ab:b9:72:37: 89:96:52:d8:7c:b7:c9:30:78:55:1b:65:6b:1c:c3:8b:ab:f5: b2:e5:2d:22:27:29:05:fb:62:f0:da:86:70:86:75:81:bd:13: 40:50:03:89:17:f6:57:bd:d5:bc:40:e9:26:a5:6c:19:6a:5a: 28:f5:6f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjUwNDAzMDEyNDUzWhcNMjUwNDEwMDEyNDUzWjAYMRYwFAYD VQQDEw02N2VkZTM2NS1mNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtLU7tAhK0ONUMpTvf79WktTkhMLQSvLpS4oQD7fkvXxjZjXSKIv0/wlQJzF 2zkZFvLD3tVPolOPBHG9BtWRceued1Y4m44ilRQC0mJzhTfjxAWRJeldeCCV8lp2 jR4OrFJGbYkg9vFcLDwkB3nCyw5Mt/2grh9i3M4ha5+ZKM4IYZDkxGR4a/m3v4Xe l0hXEk9qqi7D4THrWm8tYaRwcW0JpvsMQFtyQru67fmqbZ7YXC9aUCnYGHGPithq SEsLEJusyyyTFboWH1lpAsiU+KmlpK5kzsz43pkmj1dJasv42CeHGUHLSgdPNyxZ NppJD8Y0JM2m2aj0gi2SWce2NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRhCiy5 mYs5E7EYh3f5lU9AbnKXMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd4DWzCQ1jBcZpJR1QJdfmMizrmMqkDT/U+D+AIQxb00qORLNWfOp8 t4RMrYkLhqB4cFpwWcFs/BFLo87w2NbSA6PCL3MejKYKy9KG468n81P7OKoFXZYW msPoA0Znxh0K1XxzW9Ey6Q/oVAxAQfUFzTKala9Ic0Au/of8yl3Okr+6PXZXUB2W PnbT3JuQagEER9CqCaf16ow0kt62fCYAJUIGlSMSA8vR93pYCJd6AcdrBqbviJjs vc+MF2WcjvVivau5cjeJllLYfLfJMHhVG2VrHMOLq/Wy5S0iJykF+2Lw2oZwhnWB vRNAUAOJF/ZXvdW8QOkmpWwZaloo9W/B -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:34 2025 by rpki-client