$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: kmfBpL240F+/Tdrt0X//WuZswKQRBlFjuPTYhuqWH4U= Subject key identifier: 3D:73:40:40:55:B8:CE:35:9D:88:2B:B1:C5:85:6F:0C:8C:1C:7F:64 Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 013A Signing time: Thu 03 Apr 2025 03:45:39 +0000 Manifest this update: Thu 03 Apr 2025 03:45:39 +0000 Manifest next update: Thu 10 Apr 2025 03:45:39 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: e+QMiFaKNDiEEvmTtRBr2UObngZQJ9OtWUTp7HUfgA8=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: g09v6jk8fn3awL6foCEfKGlvvvO5I0PHpOGz6LziEuA=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: rhIhi3I6SpyrkjjQ3cL8Mw2vXOogWSjfaZP+3P/2bFk=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: qvUP6d81IdrzZbKdEjVG1snn+Y2Byr8jMGRCFKnK8TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92 Validity Not Before: Apr 3 03:45:39 2025 GMT Not After : Apr 10 03:45:39 2025 GMT Subject: CN=67ee0463-86ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:1b:de:eb:e9:af:35:33:a0:e7:ae:02:ad: 83:e9:f3:15:9f:23:87:1c:7b:a8:bd:5b:7e:e0:c2: 8c:88:d2:5b:76:f8:ca:72:f5:e6:2d:d3:27:b6:87: 4a:37:c2:d2:2e:d9:42:72:23:c9:6b:17:e8:46:c4: 9b:57:8a:3b:c5:c1:cf:c4:90:7d:2b:e7:6c:ac:f5: 38:88:27:07:e9:69:7d:37:84:e0:4a:2c:11:0b:8c: f1:82:f8:e5:a9:5e:e1:76:47:46:b3:95:2e:41:08: bd:2b:1f:d5:43:b6:7f:ec:60:23:22:f3:d1:16:e1: 90:4f:ef:9a:82:85:3e:1f:ff:af:f3:e5:13:86:fe: 2d:fc:2a:29:59:43:3c:be:fd:f4:bf:b7:b1:dc:e6: bc:cd:37:c8:e1:1f:d0:94:c1:7c:47:4d:13:a8:b2: 16:43:37:1e:07:b3:12:c0:00:a2:76:4e:0b:c0:61: 1e:80:5a:38:9c:a9:14:64:d3:50:e6:91:23:bb:e6: e8:29:c4:1f:04:e7:73:37:8a:16:da:af:de:9d:86: 66:db:6e:60:f8:4c:33:7c:14:26:fa:2f:1f:9e:58: f3:4a:90:17:b1:a9:7d:83:d2:52:c8:7d:6a:36:9e: 73:31:80:80:1b:16:ac:1d:09:32:78:4c:5f:5d:37: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:40:40:55:B8:CE:35:9D:88:2B:B1:C5:85:6F:0C:8C:1C:7F:64 X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:97:9f:e3:00:00:bf:fd:9a:7f:df:4a:7e:48:28:dc:1c: ad:f4:85:aa:fb:4f:b6:87:90:25:61:47:cd:db:c3:bd:1e:ac: b7:a2:c9:18:8f:5e:79:ba:c8:a3:a8:36:2d:a4:a7:85:82:fb: df:ba:a4:11:f0:19:d1:f9:f4:92:ea:82:91:c8:3e:8a:b8:9c: b1:c5:6f:4a:cb:67:1c:e2:29:8b:f0:ce:f8:21:98:ca:9d:96: 71:13:13:19:30:aa:6c:1a:15:f8:20:51:b8:16:51:59:aa:37: 2a:3a:e8:2f:52:dc:96:d6:26:99:6b:d6:16:f9:cc:dc:77:52: 9d:d1:b2:74:1d:38:35:68:b6:c8:36:71:80:b6:dc:38:6a:f7: 76:ec:8a:fd:d9:20:48:f0:41:3e:2b:82:56:b5:f9:c4:d2:33: a2:95:b5:30:e8:16:78:0e:87:d0:ef:86:77:fa:d9:fa:4c:90: d8:42:fc:f1:0e:76:a1:16:50:48:e7:d7:10:4b:5d:27:26:57: 3e:da:ed:f2:7b:4d:4a:a1:84:da:f2:2e:52:0b:65:2f:92:3b: e3:35:b1:76:99:09:e8:04:bb:08:64:a8:03:d7:a7:28:ce:e0: c5:c5:eb:48:80:03:61:7d:8b:a5:4c:98:de:13:1c:45:16:dd: 2f:35:98:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjUwNDAzMDM0NTM5WhcNMjUwNDEwMDM0NTM5WjAYMRYwFAYD VQQDEw02N2VlMDQ2My04NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHIb3uvprzUzoOeuAq2D6fMVnyOHHHuovVt+4MKMiNJbdvjKcvXmLdMntodK N8LSLtlCciPJaxfoRsSbV4o7xcHPxJB9K+dsrPU4iCcH6Wl9N4TgSiwRC4zxgvjl qV7hdkdGs5UuQQi9Kx/VQ7Z/7GAjIvPRFuGQT++agoU+H/+v8+UThv4t/CopWUM8 vv30v7ex3Oa8zTfI4R/QlMF8R00TqLIWQzceB7MSwACidk4LwGEegFo4nKkUZNNQ 5pEju+boKcQfBOdzN4oW2q/enYZm225g+EwzfBQm+i8fnljzSpAXsal9g9JSyH1q Np5zMYCAGxasHQkyeExfXTc8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1zQEBV uM41nYgrscWFbwyMHH9kMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJrZef4wAAv/2af99Kfkgo3Byt9IWq+0+2h5AlYUfN28O9Hqy3oskY j155usijqDYtpKeFgvvfuqQR8BnR+fSS6oKRyD6KuJyxxW9Ky2cc4imL8M74IZjK nZZxExMZMKpsGhX4IFG4FlFZqjcqOugvUtyW1iaZa9YW+czcd1Kd0bJ0HTg1aLbI NnGAttw4avd27Ir92SBI8EE+K4JWtfnE0jOilbUw6BZ4DofQ74Z3+tn6TJDYQvzx DnahFlBI59cQS10nJlc+2u3ye01KoYTa8i5SC2UvkjvjNbF2mQnoBLsIZKgD16co zuDFxetIgANhfYulTJjeExxFFt0vNZh5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:18 2025 by rpki-client