$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: wu8kEo7Ixld6GXFMJ8bYDE8emN5KK5ejnQahMlSg8hg= Subject key identifier: 05:CA:A4:28:F1:9D:83:A4:AF:95:7C:A0:32:5A:2E:A0:24:C0:02:CD Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 03C1 Signing time: Thu 03 Apr 2025 00:44:02 +0000 Manifest this update: Thu 03 Apr 2025 00:44:01 +0000 Manifest next update: Thu 10 Apr 2025 00:44:01 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: efZL5JD2Rvi1QYiI/LsQzdmFETNJTN7QKlQT8WVeWeU=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: zn2pA4UTnRVDZFbc6V4w8fKaHK9Tc4ivjtjJRAQ0PCI=) 3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08 Validity Not Before: Apr 3 00:44:01 2025 GMT Not After : Apr 10 00:44:01 2025 GMT Subject: CN=67edd9d1-8850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:7b:97:83:3c:46:45:b3:b4:1e:8a:01:73: dc:e9:f9:f8:d2:86:c6:ab:36:7d:cf:a9:6f:b9:06: 4a:40:74:e9:9b:5e:00:86:2c:83:75:43:0e:a9:87: f3:0a:d6:cf:37:0d:a6:1f:7a:c0:0a:19:db:f6:c1: c7:92:8c:b5:a1:f3:b1:23:ea:3c:4c:9a:f9:a2:cb: 60:20:d7:f7:91:14:65:a6:c7:23:72:03:a3:42:c8: ca:fe:11:42:eb:e5:ef:08:1d:24:d4:dc:fe:f7:e6: 11:14:ac:50:a3:3e:0a:9e:37:a8:c6:56:5b:e7:2f: cc:b9:38:7c:81:a1:0c:7f:44:95:69:77:7a:6a:f0: eb:d0:4f:b1:28:0c:0e:fd:54:22:15:b3:d4:94:01: 6b:aa:4c:38:d4:ee:82:56:c9:7a:0d:b1:99:eb:75: 6a:6b:d4:0e:f4:7b:83:44:f2:02:70:99:2b:13:83: c8:c4:f3:cd:c7:f0:4a:ed:8a:94:88:75:8b:0b:fc: 82:77:2f:4a:55:a1:60:4e:4c:64:23:ec:13:7c:73: 1d:45:97:7f:7c:8e:80:e0:5e:4f:10:70:c6:59:16: eb:47:32:8e:13:7b:21:8f:66:73:d8:84:1a:e7:e9: 5f:23:08:26:6f:43:a8:49:63:54:de:b6:ef:8c:8c: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:A4:28:F1:9D:83:A4:AF:95:7C:A0:32:5A:2E:A0:24:C0:02:CD X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:92:68:ca:4a:94:48:33:d3:c1:6e:0d:b2:a8:57:f5:2f:24: 0d:e0:ee:25:d0:1b:0b:4e:a0:cc:a1:25:54:c3:2b:28:20:ca: 74:1c:d7:22:9d:9b:5e:79:a3:2b:28:b2:f1:88:93:2b:6c:03: 67:94:c2:ce:5e:05:a2:81:76:01:df:ec:fd:1b:c6:54:2e:86: 70:39:4c:74:ac:c5:44:d0:be:d9:f7:72:5b:42:1a:b5:21:4a: 25:26:d2:0a:27:42:2a:4a:d6:20:87:66:f9:45:26:fd:28:a0: b0:44:80:51:78:90:10:ec:2e:c1:a5:41:93:70:b0:39:74:ee: 59:9e:ea:db:a8:e2:9b:3a:56:4f:84:0f:49:0a:83:1f:bf:fd: a5:67:4a:e4:a3:97:75:20:d5:d4:90:c3:f0:0f:f6:c7:30:af: 65:3e:0c:46:7b:9a:58:5b:91:95:bd:ef:fc:10:10:3e:5d:b7: f8:ce:bf:0b:19:f0:be:77:66:82:d3:5d:0b:57:71:b9:6c:4e: 20:8f:26:7c:96:19:f9:e8:15:b1:6b:87:20:b8:b5:a0:b1:42: 59:50:8d:ba:da:29:9e:0e:24:17:18:d8:40:72:53:aa:9e:1c: 1d:f9:64:2c:98:d8:53:26:ce:5a:9d:09:ac:51:7d:60:96:0c: a1:0b:65:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjUwNDAzMDA0NDAxWhcNMjUwNDEwMDA0NDAxWjAYMRYwFAYD VQQDEw02N2VkZDlkMS04ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bR7l4M8RkWztB6KAXPc6fn40obGqzZ9z6lvuQZKQHTpm14AhiyDdUMOqYfz CtbPNw2mH3rAChnb9sHHkoy1ofOxI+o8TJr5ostgINf3kRRlpscjcgOjQsjK/hFC 6+XvCB0k1Nz+9+YRFKxQoz4KnjeoxlZb5y/MuTh8gaEMf0SVaXd6avDr0E+xKAwO /VQiFbPUlAFrqkw41O6CVsl6DbGZ63Vqa9QO9HuDRPICcJkrE4PIxPPNx/BK7YqU iHWLC/yCdy9KVaFgTkxkI+wTfHMdRZd/fI6A4F5PEHDGWRbrRzKOE3shj2Zz2IQa 5+lfIwgmb0OoSWNU3rbvjIw3rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXKpCjx nYOkr5V8oDJaLqAkwALNMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWkmjKSpRIM9PBbg2yqFf1LyQN4O4l0BsLTqDMoSVUwysoIMp0HNci nZteeaMrKLLxiJMrbANnlMLOXgWigXYB3+z9G8ZULoZwOUx0rMVE0L7Z93JbQhq1 IUolJtIKJ0IqStYgh2b5RSb9KKCwRIBReJAQ7C7BpUGTcLA5dO5ZnurbqOKbOlZP hA9JCoMfv/2lZ0rko5d1INXUkMPwD/bHMK9lPgxGe5pYW5GVve/8EBA+Xbf4zr8L GfC+d2aC010LV3G5bE4gjyZ8lhn56BWxa4cguLWgsUJZUI262imeDiQXGNhAclOq nhwd+WQsmNhTJs5anQmsUX1glgyhC2Xu -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:07 2025 by rpki-client