$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: npeWrORbMmrOvYMiYWXf1FTjUy3B/TSKKAE2k9NI++Q= Subject key identifier: 83:D2:67:65:EF:01:3E:AB:8D:40:72:0B:AC:54:82:44:7A:A3:73:C5 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0BB2 Signing time: Sun 06 Apr 2025 18:46:52 +0000 Manifest this update: Sun 06 Apr 2025 18:46:52 +0000 Manifest next update: Sun 13 Apr 2025 18:46:52 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: nOyN7dP2Sr1d4S0/7Q1BOsmGE+SuDld+yrmzmVWBeu4=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286 Validity Not Before: Apr 6 18:46:52 2025 GMT Not After : Apr 13 18:46:52 2025 GMT Subject: CN=67f2cc1c-63a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:db:43:a8:fc:90:1a:21:3d:ea:83:bc:a3: 0a:03:95:6a:3b:2e:30:e8:b5:d1:ce:0a:71:96:21: 97:43:11:8e:9b:70:ae:cc:b6:60:15:36:8f:80:80: 2d:90:c7:44:8a:e9:32:65:18:d6:f8:63:a6:5e:04: 2f:9f:8f:a0:e8:94:1a:19:58:18:37:b6:c7:5d:31: d3:38:6b:e5:42:40:76:33:ff:8a:f2:31:95:e9:a5: 95:06:fd:2f:0d:da:43:65:40:88:a5:2f:13:e6:35: f5:26:49:e3:aa:49:60:f6:4c:22:a3:48:65:10:fe: 7d:06:ee:df:da:a0:b8:2b:27:55:1f:ba:38:83:ec: 85:e2:99:7d:8b:ca:0d:83:0d:ac:ac:3d:9b:da:0a: 89:c4:ee:3e:3e:f2:34:fd:3f:3b:02:23:83:4f:24: b1:ef:a1:40:a2:76:8d:dd:5b:4b:06:8d:00:fd:2e: 27:0a:f1:13:2a:d8:11:2b:57:fc:da:ac:8b:08:d2: 4b:63:57:d3:a2:77:66:45:b4:bc:b9:d4:86:fb:7a: 62:f1:8e:6b:bc:30:26:99:d4:21:83:42:2c:76:c3: 26:90:24:07:4c:29:6b:1c:02:25:8d:27:fe:02:d4: 42:01:66:d7:fb:f1:04:4b:b9:da:71:4f:0b:0c:d0: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D2:67:65:EF:01:3E:AB:8D:40:72:0B:AC:54:82:44:7A:A3:73:C5 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:77:16:83:99:ec:da:47:be:3a:b5:4c:79:fd:8e:3f:08:ca: b1:e9:96:df:6d:fd:d5:6b:7e:47:6f:86:73:7b:68:06:41:9a: 9e:8a:3f:2a:df:e8:fb:d0:af:89:51:10:80:e6:cd:8b:47:03: 04:11:d2:48:e6:eb:8b:66:65:94:2d:8a:fd:8f:62:82:a5:2d: 50:62:d7:a8:d4:13:4f:c7:0e:ee:3d:53:f8:c6:2b:f6:fb:d5: a5:c6:ce:d0:23:90:7d:40:2e:50:8a:7a:a7:bf:98:18:b5:b4: 74:d7:b2:bf:12:6f:9f:6a:d2:40:23:18:55:d3:6d:b0:b0:28: fc:f5:fd:6b:a2:c1:46:b5:14:f9:03:bb:c6:53:6d:a0:14:b0: da:a6:f4:4d:d3:4e:8c:ea:c5:05:3e:04:23:2b:c8:8e:bf:90: 14:32:43:f4:2b:23:66:ab:28:91:77:e3:42:f2:05:1f:cc:2d: 8e:b5:cd:6d:12:a1:91:6d:18:c2:64:21:97:24:3b:33:0e:92: 77:65:42:31:e2:9a:01:cc:61:06:35:38:6d:06:2a:fe:85:32: 1a:60:78:3d:c0:2a:77:4d:86:7c:01:c0:e4:2f:99:77:f8:f8: d9:06:17:73:24:17:22:5f:27:ed:49:f0:b9:bf:e0:65:14:44: 55:82:b0:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUwNDA2MTg0NjUyWhcNMjUwNDEzMTg0NjUyWjAYMRYwFAYD VQQDEw02N2YyY2MxYy02M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLvbQ6j8kBohPeqDvKMKA5VqOy4w6LXRzgpxliGXQxGOm3CuzLZgFTaPgIAt kMdEiukyZRjW+GOmXgQvn4+g6JQaGVgYN7bHXTHTOGvlQkB2M/+K8jGV6aWVBv0v DdpDZUCIpS8T5jX1Jknjqklg9kwio0hlEP59Bu7f2qC4KydVH7o4g+yF4pl9i8oN gw2srD2b2gqJxO4+PvI0/T87AiODTySx76FAonaN3VtLBo0A/S4nCvETKtgRK1f8 2qyLCNJLY1fTondmRbS8udSG+3pi8Y5rvDAmmdQhg0IsdsMmkCQHTClrHAIljSf+ AtRCAWbX+/EES7nacU8LDNDMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPSZ2Xv AT6rjUByC6xUgkR6o3PFMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfdxaDmezaR746tUx5/Y4/CMqx6Zbfbf3Va35Hb4Zze2gGQZqeij8q 3+j70K+JURCA5s2LRwMEEdJI5uuLZmWULYr9j2KCpS1QYteo1BNPxw7uPVP4xiv2 +9Wlxs7QI5B9QC5Qinqnv5gYtbR017K/Em+fatJAIxhV022wsCj89f1rosFGtRT5 A7vGU22gFLDapvRN006M6sUFPgQjK8iOv5AUMkP0KyNmqyiRd+NC8gUfzC2Otc1t EqGRbRjCZCGXJDszDpJ3ZUIx4poBzGEGNThtBir+hTIaYHg9wCp3TYZ8AcDkL5l3 +PjZBhdzJBciXyftSfC5v+BlFERVgrBM -----END CERTIFICATE-----Generated at Sun Apr 6 21:56:59 2025 by rpki-client