$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: 55gxzekkqDIA48c5nnjllcHHRRrNqhdLMVzfCSeyXew= Subject key identifier: 71:65:20:8D:BA:D1:C5:36:06:6E:6A:3C:CC:59:B0:AC:3B:9B:C5:62 Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0AD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0ACC Signing time: Fri 04 Apr 2025 19:34:45 +0000 Manifest this update: Fri 04 Apr 2025 19:34:44 +0000 Manifest next update: Fri 11 Apr 2025 19:34:44 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: I7E4iT1v04WcFu5VrTfaSe3or8oV2Aqnmcj2LEvJHAQ=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44 Validity Not Before: Apr 4 19:34:44 2025 GMT Not After : Apr 11 19:34:44 2025 GMT Subject: CN=67f03455-68d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:f2:4b:dd:70:31:01:f9:45:ba:00:f1:d5: c5:6d:d0:10:2f:2e:dd:dd:7b:16:4a:b5:50:ca:15: 74:5a:35:70:42:fc:cd:81:88:24:97:cf:d2:01:e1: 3e:64:62:43:69:39:01:92:a0:64:c2:d6:8b:cf:d4: 09:a6:89:5a:0a:75:27:e4:b2:76:d1:33:54:07:d7: fe:a0:6d:61:6a:4c:10:81:96:78:1f:d7:08:49:c5: 2e:67:cf:09:96:87:e7:cb:62:a8:17:58:0c:9e:cb: 68:f0:c7:57:90:c5:47:23:b3:9e:73:fe:aa:de:5b: 33:fb:ef:12:99:9a:64:b3:73:54:68:04:31:cd:cf: b3:87:49:5a:34:00:70:b3:db:01:95:47:49:94:13: 79:da:4c:db:36:43:6d:b2:b4:2f:f7:85:33:16:88: a8:3d:ba:41:2e:24:30:e3:fa:3a:02:d2:1e:30:10: a0:a0:a9:51:97:26:12:0e:fa:49:e2:15:1a:7c:af: 9c:a0:58:f0:fd:e6:0d:e0:26:76:b7:85:05:68:88: 47:f4:78:f5:b2:eb:7d:6c:57:87:4e:d9:0a:db:ce: 25:82:c1:21:00:29:41:2e:de:8f:47:d2:a5:ea:7f: e8:8d:b9:0f:71:71:09:e8:a3:e5:8d:41:2e:0c:cf: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:20:8D:BA:D1:C5:36:06:6E:6A:3C:CC:59:B0:AC:3B:9B:C5:62 X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ed:8f:27:d4:f8:97:b1:85:b9:96:8d:db:1c:36:1b:8b:de: ea:cb:bd:48:0a:7f:b2:bd:7c:d9:cc:23:97:18:46:75:63:5e: ac:d3:00:ee:3d:63:26:99:77:24:5f:7f:e0:d1:14:8d:7c:e9: d1:e9:b2:d7:47:c0:5f:4f:5f:03:41:f0:d4:c2:6a:b0:1e:44: f5:19:02:f9:7c:c6:aa:3e:09:a0:4c:11:af:61:4c:af:ed:d8: d3:75:26:38:06:4a:fc:7e:73:ac:6d:ef:25:05:33:6f:99:4f: 73:81:6d:bc:89:69:91:9d:31:a6:55:6f:51:d1:13:66:17:0d: d4:04:6d:51:4d:12:7f:7f:56:fb:0a:d9:6d:bd:8b:ab:14:f8: 0e:65:22:6f:3a:8b:55:e7:13:d6:d9:3a:f0:27:5c:62:13:04: 11:d7:38:73:4d:53:75:96:7f:65:de:82:79:5e:d2:57:37:7f: 54:a8:a8:0b:2e:00:a4:a7:4b:ef:39:fa:1b:3e:ce:e8:44:95: 35:cc:ca:50:f0:01:45:fa:38:f6:b8:f9:63:b6:bc:80:f6:91: 96:36:a7:b3:d5:3e:0b:d1:79:db:8c:2a:d6:05:7f:dd:77:49: ee:e9:83:82:32:4f:65:0e:1c:d0:b4:e8:a5:41:0d:9f:e3:95: 23:a3:70:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUwNDA0MTkzNDQ0WhcNMjUwNDExMTkzNDQ0WjAYMRYwFAYD VQQDEw02N2YwMzQ1NS02OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroLyS91wMQH5RboA8dXFbdAQLy7d3XsWSrVQyhV0WjVwQvzNgYgkl8/SAeE+ ZGJDaTkBkqBkwtaLz9QJpolaCnUn5LJ20TNUB9f+oG1hakwQgZZ4H9cIScUuZ88J lofny2KoF1gMnsto8MdXkMVHI7Oec/6q3lsz++8SmZpks3NUaAQxzc+zh0laNABw s9sBlUdJlBN52kzbNkNtsrQv94UzFoioPbpBLiQw4/o6AtIeMBCgoKlRlyYSDvpJ 4hUafK+coFjw/eYN4CZ2t4UFaIhH9Hj1sut9bFeHTtkK284lgsEhAClBLt6PR9Kl 6n/ojbkPcXEJ6KPljUEuDM/MrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFlII26 0cU2Bm5qPMxZsKw7m8ViMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7Y8n1PiXsYW5lo3bHDYbi97qy71ICn+yvXzZzCOXGEZ1Y16s0wDu PWMmmXckX3/g0RSNfOnR6bLXR8BfT18DQfDUwmqwHkT1GQL5fMaqPgmgTBGvYUyv 7djTdSY4Bkr8fnOsbe8lBTNvmU9zgW28iWmRnTGmVW9R0RNmFw3UBG1RTRJ/f1b7 CtltvYurFPgOZSJvOotV5xPW2TrwJ1xiEwQR1zhzTVN1ln9l3oJ5XtJXN39UqKgL LgCkp0vvOfobPs7oRJU1zMpQ8AFF+jj2uPljtryA9pGWNqez1T4L0XnbjCrWBX/d d0nu6YOCMk9lDhzQtOilQQ2f45Ujo3D5 -----END CERTIFICATE-----Generated at Sat Apr 5 03:52:12 2025 by rpki-client