$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: SDchkT01DiTfS8tpGY1CCliqhFiZwViqh+UlAvHTd8I= Subject key identifier: A6:0E:C8:A6:F0:A7:12:E7:47:7D:23:03:AC:F6:5E:0D:09:20:4B:F5 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 010D Signing time: Thu 03 Apr 2025 04:12:00 +0000 Manifest this update: Thu 03 Apr 2025 04:11:59 +0000 Manifest next update: Thu 10 Apr 2025 04:11:59 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: n1aELzhbUSOHCTNc2u3SJ3Nof+eUrm6JDRh7Kz38928=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0 Validity Not Before: Apr 3 04:11:59 2025 GMT Not After : Apr 10 04:11:59 2025 GMT Subject: CN=67ee0a90-219c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:62:f7:38:30:42:c1:b0:1d:24:d5:cc:96: 13:0d:46:5c:a3:13:e1:a9:a4:6e:cb:65:d0:7c:45: d3:a6:8e:f3:44:b9:c4:55:95:77:b9:ef:bc:1d:cb: 96:bd:1c:7e:fb:fa:4f:68:7e:93:cb:01:26:43:01: 42:76:5b:0e:51:16:55:3b:d1:cd:f0:29:d5:59:41: 8b:44:6a:1f:ae:47:0b:3c:cc:1f:9c:2a:2d:01:a5: d9:17:c7:17:5d:7f:af:3c:fd:11:6a:44:29:d1:bc: 1e:20:c1:19:f3:76:90:20:cc:6a:1e:8e:96:73:f8: dd:b2:70:fe:f5:26:d2:c2:fa:46:04:d1:42:8c:e4: c0:65:77:31:66:d8:02:76:ef:7e:d1:0b:08:51:a1: 6e:f3:24:9c:ad:97:0b:01:15:de:7a:a4:f5:22:c6: 19:1f:39:4c:08:5e:ea:bc:a0:24:49:aa:f6:60:ba: a5:d5:42:39:c3:02:78:c7:a3:91:87:22:f8:f0:5c: eb:76:51:78:dc:5e:9b:71:dc:c4:fa:c6:b2:aa:0b: d2:11:5b:da:24:b5:46:88:35:98:c0:2d:6a:ac:05: 2a:97:c1:dc:47:0b:6c:97:21:63:49:71:19:fa:01: a8:e9:b3:2f:3c:fc:4a:4f:4b:81:23:8c:21:52:b5: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0E:C8:A6:F0:A7:12:E7:47:7D:23:03:AC:F6:5E:0D:09:20:4B:F5 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:47:18:32:1f:0c:73:41:92:84:10:16:1b:bf:80:5d:4d:f5: bd:0a:a6:78:36:4b:ce:f4:fe:01:ad:0c:dd:25:2e:75:85:bd: d0:ab:6b:77:d5:6d:84:3a:f6:00:56:db:dc:74:81:ab:22:56: c6:4d:aa:97:20:73:0d:b1:e7:a8:5a:4b:31:b4:4f:12:b7:b6: 47:21:9d:af:25:46:48:ea:21:fc:32:bf:6b:c5:25:f2:83:6d: f7:2f:19:25:30:5a:0a:1c:0c:1e:d3:dd:85:97:b3:7d:31:fa: b7:f1:23:cd:5b:e7:23:8a:f3:2e:ff:1f:70:30:14:e2:f6:67: ce:ee:ad:b0:38:ca:aa:a1:9f:70:42:10:88:ca:08:4d:f1:e5: ac:e2:f6:aa:56:f4:90:06:c7:b9:53:4e:d8:f2:55:0e:6c:12: 15:be:65:ae:9b:30:3c:d1:49:0b:8b:2a:18:dd:4d:f3:98:bf: b4:f0:a7:3e:57:46:64:71:cb:61:ff:63:b6:42:70:84:01:08: 82:df:5b:cd:c2:bc:57:d4:e4:95:04:19:11:03:f5:e2:86:17: 8a:71:4e:6d:f8:db:e4:c6:a0:8c:0e:c1:b7:c3:a4:8f:8b:61: 0b:cd:6b:1a:47:4f:53:a9:25:d9:d7:fa:27:5e:a3:bc:29:6e: 46:60:6f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNDAzMDQxMTU5WhcNMjUwNDEwMDQxMTU5WjAYMRYwFAYD VQQDEw02N2VlMGE5MC0yMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVBi9zgwQsGwHSTVzJYTDUZcoxPhqaRuy2XQfEXTpo7zRLnEVZV3ue+8HcuW vRx++/pPaH6TywEmQwFCdlsOURZVO9HN8CnVWUGLRGofrkcLPMwfnCotAaXZF8cX XX+vPP0RakQp0bweIMEZ83aQIMxqHo6Wc/jdsnD+9SbSwvpGBNFCjOTAZXcxZtgC du9+0QsIUaFu8yScrZcLARXeeqT1IsYZHzlMCF7qvKAkSar2YLql1UI5wwJ4x6OR hyL48FzrdlF43F6bcdzE+sayqgvSEVvaJLVGiDWYwC1qrAUql8HcRwtslyFjSXEZ +gGo6bMvPPxKT0uBI4whUrWxuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYOyKbw pxLnR30jA6z2Xg0JIEv1MB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4RxgyHwxzQZKEEBYbv4BdTfW9CqZ4NkvO9P4BrQzdJS51hb3Qq2t3 1W2EOvYAVtvcdIGrIlbGTaqXIHMNseeoWksxtE8St7ZHIZ2vJUZI6iH8Mr9rxSXy g233LxklMFoKHAwe092Fl7N9Mfq38SPNW+cjivMu/x9wMBTi9mfO7q2wOMqqoZ9w QhCIyghN8eWs4vaqVvSQBse5U07Y8lUObBIVvmWumzA80UkLiyoY3U3zmL+08Kc+ V0Zkccth/2O2QnCEAQiC31vNwrxX1OSVBBkRA/XihheKcU5t+NvkxqCMDsG3w6SP i2ELzWsaR09TqSXZ1/onXqO8KW5GYG/4 -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:39 2025 by rpki-client