$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: LAL4EVO7IwXHwFrByacK/tPw7GwoGV6GwO7n49mljj8= Subject key identifier: 32:ED:52:0B:2C:4E:29:67:BF:16:19:86:49:A0:31:2B:E9:48:14:14 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0248 Signing time: Sat 29 Mar 2025 02:06:35 +0000 Manifest this update: Sat 29 Mar 2025 02:06:35 +0000 Manifest next update: Sat 05 Apr 2025 02:06:35 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: voXpsr4bgcO3UVxl5LjKGA1yyby4awvRAWEMW4IIJJ0=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293 Validity Not Before: Mar 29 02:06:35 2025 GMT Not After : Apr 5 02:06:35 2025 GMT Subject: CN=67e755ab-80e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:42:d4:77:45:13:3f:a6:5e:3b:d7:99:96:cd: 4f:52:7e:ce:59:eb:42:dd:b3:5a:4b:58:c5:36:2a: 4f:66:15:64:df:18:cd:c6:28:20:64:e1:30:2e:1a: 1e:ba:c9:44:fb:1b:28:90:ad:d3:5d:a5:67:7c:3a: 4c:90:d8:36:e8:c8:e2:de:22:b4:7b:03:63:61:9a: 53:b7:9f:e3:8e:6e:71:38:ff:ea:a0:ec:17:d4:4a: d2:a6:65:99:6c:6c:e4:ab:a8:3e:c2:eb:92:54:da: 72:07:68:c4:78:62:08:af:0e:6f:f2:f4:f8:a8:07: a3:e4:ce:8c:97:ec:f7:db:92:4f:26:75:62:cf:18: 77:53:f6:c7:7d:a4:d1:fd:a4:9b:05:af:9f:a7:88: cc:ab:f4:c7:f7:05:e9:d2:d3:d7:7e:c7:da:bb:f1: e2:0d:91:e7:73:58:18:bb:0d:9c:be:c3:4f:44:ef: 25:05:38:91:3a:e2:9a:76:ed:3e:09:32:42:c3:5e: 46:5e:97:73:a2:97:84:ee:c5:17:b0:0f:f0:f6:5e: 41:dd:ed:ab:7a:04:c0:77:f7:0f:c5:4c:a2:23:60: 23:41:f4:a1:f2:7b:c6:87:7e:fb:aa:89:5f:af:65: 04:f1:2e:29:84:02:70:21:48:20:d6:73:2f:5e:84: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:ED:52:0B:2C:4E:29:67:BF:16:19:86:49:A0:31:2B:E9:48:14:14 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a5:37:a2:c1:bd:fa:0a:b0:81:ad:b6:0f:f4:e8:99:4a:7e: 38:2b:4b:83:37:62:a1:c7:b4:ee:4d:1d:99:57:ae:1a:d2:bf: 75:d8:29:1e:aa:01:f9:bc:3b:01:28:8e:c5:61:a5:d3:84:47: 54:18:1d:8f:b1:5e:14:be:37:66:45:9b:44:ea:3f:cc:3d:41: 27:9c:30:6a:0d:67:2a:6c:08:6e:38:2a:56:ce:6f:2c:38:6a: 52:78:f0:82:05:38:df:c7:35:d4:c9:bf:d9:ef:20:da:4b:37: d8:0f:2f:ba:c2:50:b3:71:3d:64:87:c0:ae:04:4f:aa:75:36: 69:3f:2a:85:7f:7a:db:52:9a:29:50:38:60:32:12:e2:95:3b: 0d:3d:f6:90:15:23:af:8e:59:4b:5b:61:c7:f0:49:5c:e9:20: 41:63:19:2a:04:25:4f:60:fd:29:be:04:c5:2c:78:2b:58:db: 38:dd:a1:7a:49:97:c5:03:33:6c:8c:ed:c8:a0:c7:c0:74:11: 38:e3:28:9e:4e:f3:3f:51:ef:f8:a8:42:cc:de:59:1a:d8:e2: 4c:fa:e8:40:62:0a:a7:8f:44:0f:5d:4a:50:49:46:c8:08:d5: 3d:42:71:b2:b1:73:da:91:7b:7d:9e:92:76:76:16:58:4c:83: c1:92:d7:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwMzI5MDIwNjM1WhcNMjUwNDA1MDIwNjM1WjAYMRYwFAYD VQQDEw02N2U3NTVhYi04MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ELUd0UTP6ZeO9eZls1PUn7OWetC3bNaS1jFNipPZhVk3xjNxiggZOEwLhoe uslE+xsokK3TXaVnfDpMkNg26Mji3iK0ewNjYZpTt5/jjm5xOP/qoOwX1ErSpmWZ bGzkq6g+wuuSVNpyB2jEeGIIrw5v8vT4qAej5M6Ml+z325JPJnVizxh3U/bHfaTR /aSbBa+fp4jMq/TH9wXp0tPXfsfau/HiDZHnc1gYuw2cvsNPRO8lBTiROuKadu0+ CTJCw15GXpdzopeE7sUXsA/w9l5B3e2regTAd/cPxUyiI2AjQfSh8nvGh377qolf r2UE8S4phAJwIUgg1nMvXoS75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLtUgss TilnvxYZhkmgMSvpSBQUMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzpTeiwb36CrCBrbYP9OiZSn44K0uDN2Khx7TuTR2ZV64a0r912Cke qgH5vDsBKI7FYaXThEdUGB2PsV4UvjdmRZtE6j/MPUEnnDBqDWcqbAhuOCpWzm8s OGpSePCCBTjfxzXUyb/Z7yDaSzfYDy+6wlCzcT1kh8CuBE+qdTZpPyqFf3rbUpop UDhgMhLilTsNPfaQFSOvjllLW2HH8Elc6SBBYxkqBCVPYP0pvgTFLHgrWNs43aF6 SZfFAzNsjO3IoMfAdBE44yieTvM/Ue/4qELM3lka2OJM+uhAYgqnj0QPXUpQSUbI CNU9QnGysXPakXt9npJ2dhZYTIPBktc5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:34 2025 by rpki-client