$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: xlIgHMlXOOOqw4UTTCenps5asuBmaG/bWEGeutqZn4g= Subject key identifier: E9:B6:0B:AC:EF:33:DD:B3:DD:B4:54:39:16:1E:0A:4A:44:38:7C:D4 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 037D Signing time: Thu 03 Apr 2025 00:54:55 +0000 Manifest this update: Thu 03 Apr 2025 00:54:54 +0000 Manifest next update: Thu 10 Apr 2025 00:54:54 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: ou/lYIil6iSdq6ZAh2XpBR7HTZ2c9EyN9aVflAQpXi8=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ctAElc1BM1zI8owbq6eyFwFyuzNUp7IAey45t5f8jpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9 Validity Not Before: Apr 3 00:54:54 2025 GMT Not After : Apr 10 00:54:54 2025 GMT Subject: CN=67eddc5f-587f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:c1:4e:b7:db:6b:40:97:42:21:50:d3:33: a5:bd:87:c0:bc:07:e3:9f:7e:04:cb:42:48:25:6c: 3a:61:09:6f:5b:40:30:eb:9f:39:8f:51:9e:16:76: 91:6c:bf:56:f5:c4:fa:04:5e:1b:03:5a:c5:ad:e7: e2:d7:bf:99:d3:57:e1:46:2a:f4:fa:ea:08:a8:9c: 69:0c:ee:04:38:b8:eb:96:31:9f:47:d3:d9:f3:45: 64:5f:1e:7b:84:75:0b:b6:19:ad:c8:29:55:88:f3: 68:35:97:d5:01:a2:78:10:f3:12:47:74:14:ad:96: 76:45:f0:f1:80:b5:40:59:d2:76:c6:31:d3:cf:5f: 6c:f7:c2:fd:47:86:a9:37:c9:e5:1e:a4:5e:9e:f9: 3a:4e:1f:eb:b8:07:42:62:1a:21:f1:dd:31:92:b6: 34:4b:c2:e4:0e:33:0d:1d:33:9a:a8:93:e0:db:29: 64:6b:05:e4:64:a1:04:09:9c:5b:01:a6:39:93:9c: 64:cf:bd:e2:b0:4f:d0:7c:76:97:cc:35:e4:9b:f1: a2:a3:f2:6c:c2:8f:aa:b4:61:e7:79:71:56:28:fd: c7:ab:ad:20:7e:e7:f2:71:3d:ba:e1:32:f9:eb:d7: b5:4f:84:1b:a3:61:6a:9c:d0:26:f8:f5:e9:6d:53: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:0B:AC:EF:33:DD:B3:DD:B4:54:39:16:1E:0A:4A:44:38:7C:D4 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a6:18:f2:5a:e3:9e:19:53:66:8b:7d:c1:c8:ce:7f:69:cf: 7c:62:4f:97:1f:25:ea:68:54:15:44:75:62:61:d2:07:d7:3d: 33:9f:aa:5c:58:e8:fa:11:4b:8d:b1:74:99:78:a4:04:1c:80: ee:da:6b:8d:0f:34:cf:7e:97:fc:c9:7f:7e:c2:18:a0:e3:9e: 18:33:92:a8:69:03:7f:4d:45:19:49:d8:3c:c8:aa:a6:a4:ac: 9d:86:9c:0a:53:c8:9d:c9:54:7f:1e:1c:24:46:b4:45:df:dc: 57:42:10:ae:f1:e5:e6:b8:e6:91:26:b0:82:34:d6:e2:44:fb: f8:4a:61:6d:27:40:fe:34:22:21:12:23:43:c7:69:8a:c1:01: d8:48:19:54:37:72:ad:38:04:ef:9b:39:b8:d5:b4:5e:4e:5a: 62:f4:87:3e:7a:e3:d2:d0:f0:55:07:92:a8:03:2a:ee:40:86: ef:42:ca:67:6b:bd:78:2e:2e:a3:7d:da:b4:24:bb:88:39:f4: 38:a4:4a:71:5d:6a:82:fc:ff:98:4e:6a:77:81:60:01:89:33: af:27:1a:68:be:e4:d1:b8:a5:77:4e:d8:df:5e:2b:be:37:55: 9c:dc:19:da:23:09:07:5d:87:1f:31:13:2a:71:ca:4e:aa:a0: a5:be:1d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUwNDAzMDA1NDU0WhcNMjUwNDEwMDA1NDU0WjAYMRYwFAYD VQQDEw02N2VkZGM1Zi01ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dHBTrfba0CXQiFQ0zOlvYfAvAfjn34Ey0JIJWw6YQlvW0Aw6585j1GeFnaR bL9W9cT6BF4bA1rFrefi17+Z01fhRir0+uoIqJxpDO4EOLjrljGfR9PZ80VkXx57 hHULthmtyClViPNoNZfVAaJ4EPMSR3QUrZZ2RfDxgLVAWdJ2xjHTz19s98L9R4ap N8nlHqRenvk6Th/ruAdCYhoh8d0xkrY0S8LkDjMNHTOaqJPg2ylkawXkZKEECZxb AaY5k5xkz73isE/QfHaXzDXkm/Gio/Jswo+qtGHneXFWKP3Hq60gfufycT264TL5 69e1T4Qbo2FqnNAm+PXpbVOUpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm2C6zv M92z3bRUORYeCkpEOHzUMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWphjyWuOeGVNmi33ByM5/ac98Yk+XHyXqaFQVRHViYdIH1z0zn6pc WOj6EUuNsXSZeKQEHIDu2muNDzTPfpf8yX9+whig454YM5KoaQN/TUUZSdg8yKqm pKydhpwKU8idyVR/HhwkRrRF39xXQhCu8eXmuOaRJrCCNNbiRPv4SmFtJ0D+NCIh EiNDx2mKwQHYSBlUN3KtOATvmzm41bReTlpi9Ic+euPS0PBVB5KoAyruQIbvQspn a714Li6jfdq0JLuIOfQ4pEpxXWqC/P+YTmp3gWABiTOvJxpovuTRuKV3TtjfXiu+ N1Wc3BnaIwkHXYcfMRMqccpOqqClvh2L -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:30 2025 by rpki-client