$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: Qdqy7+3zO8KNQPrFNVM+WGsxN1xDqgWLc36CJ8Qf4EQ= Subject key identifier: DF:94:3F:51:12:BF:E4:BC:91:D6:BE:54:73:63:63:2E:C6:97:23:32 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: D3 Signing time: Thu 03 Apr 2025 04:52:56 +0000 Manifest this update: Thu 03 Apr 2025 04:52:55 +0000 Manifest next update: Thu 10 Apr 2025 04:52:55 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: dYYXuZHrxnkAQDQjNcEv5vE8RnF1n98R7oev1Kd942M=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: FahO57/kleWU7XXU2TFFnm9z6kb0GxU9AkbmiTKJzXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2 Validity Not Before: Apr 3 04:52:55 2025 GMT Not After : Apr 10 04:52:55 2025 GMT Subject: CN=67ee1428-bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:ba:16:19:17:82:68:77:b6:d8:cc:1c:6d: 54:e7:9b:0e:05:70:f6:5d:6a:6e:b7:3d:fa:e2:57: 06:b0:0b:61:c9:b4:bc:5d:f1:c6:30:31:b6:63:41: 6a:47:02:69:e5:0a:ff:ea:bd:96:de:3a:20:f3:2a: 6b:bd:5d:c9:8c:a3:83:61:1c:d0:82:d8:f2:69:bf: 5c:6e:ee:58:26:a8:3f:83:66:71:78:04:59:8b:0e: 38:b1:48:9a:ef:7e:b6:c9:af:67:95:53:ca:66:fa: 6c:b7:5c:e4:8f:3e:a0:ce:39:49:68:c7:72:87:fa: 1c:85:68:f3:a5:30:04:68:0b:ee:69:68:f5:a3:6c: 53:8f:72:e5:96:6e:1a:b5:cf:ad:d3:2b:6f:fc:ed: 9c:a0:99:c2:50:6f:3e:22:91:dc:f0:2d:0c:a8:53: 9d:36:d5:97:f2:bb:dc:de:22:3a:f8:ba:fa:d8:97: 63:b5:74:be:aa:6f:3c:6a:45:24:10:a0:b9:f5:b3: 0e:0b:9a:db:fb:f6:7e:85:c5:7b:33:84:7b:4c:4d: c5:45:ba:9d:ec:e4:8e:3c:a2:3d:2e:02:27:49:0f: 6f:03:c7:55:15:1b:a4:36:0d:57:a5:ff:8d:57:cf: 09:99:1e:86:69:fa:72:ee:62:36:6d:48:74:70:38: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:3F:51:12:BF:E4:BC:91:D6:BE:54:73:63:63:2E:C6:97:23:32 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:df:f5:dc:3f:8a:8a:f2:17:44:bc:c1:81:4d:5e:a7:fb:4d: f2:fd:af:13:66:a1:f2:f7:11:8d:f2:02:2d:91:02:92:ea:19: 5c:30:7b:6d:71:b8:a6:fc:33:86:39:7d:79:8b:96:49:f0:cf: d3:a5:32:4c:42:8c:9e:d6:d3:57:46:a4:6b:cc:4b:98:f4:2d: fa:f0:8f:6a:80:d7:30:14:d0:00:c8:55:e5:fd:76:5b:3d:f4: 8d:71:74:4e:f2:7a:00:f2:f3:61:b7:16:53:bd:37:fe:2d:15: 5d:29:46:82:2e:02:1b:c6:25:03:ff:29:af:44:46:28:7f:b4: 81:83:96:ee:51:ac:bd:e2:40:ac:45:03:69:a3:48:52:49:b7: 91:27:f5:fc:66:05:63:8c:74:95:76:99:f0:b4:5b:52:fa:9b: b5:1c:aa:0d:90:51:08:3b:d8:fe:b4:02:78:ec:0e:bb:97:21: bb:89:6e:64:dc:8c:75:ec:93:6b:fe:18:99:76:0b:81:87:6e: 7b:86:4a:e9:55:15:c7:10:6c:83:c9:9b:f2:36:76:26:94:3f: b7:30:42:4c:bc:39:3a:01:de:86:c8:41:42:a2:c5:11:f6:09: a7:4e:2c:ca:5e:fe:8a:f3:46:af:66:c2:07:dd:54:a2:4d:66: c2:2c:0e:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwNDAzMDQ1MjU1WhcNMjUwNDEwMDQ1MjU1WjAYMRYwFAYD VQQDEw02N2VlMTQyOC1iY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTS6FhkXgmh3ttjMHG1U55sOBXD2XWputz364lcGsAthybS8XfHGMDG2Y0Fq RwJp5Qr/6r2W3jog8yprvV3JjKODYRzQgtjyab9cbu5YJqg/g2ZxeARZiw44sUia 7362ya9nlVPKZvpst1zkjz6gzjlJaMdyh/ochWjzpTAEaAvuaWj1o2xTj3Lllm4a tc+t0ytv/O2coJnCUG8+IpHc8C0MqFOdNtWX8rvc3iI6+Lr62JdjtXS+qm88akUk EKC59bMOC5rb+/Z+hcV7M4R7TE3FRbqd7OSOPKI9LgInSQ9vA8dVFRukNg1Xpf+N V88JmR6Gafpy7mI2bUh0cDglLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+UP1ES v+S8kda+VHNjYy7GlyMyMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs3/XcP4qK8hdEvMGBTV6n+03y/a8TZqHy9xGN8gItkQKS6hlcMHtt cbim/DOGOX15i5ZJ8M/TpTJMQoye1tNXRqRrzEuY9C368I9qgNcwFNAAyFXl/XZb PfSNcXRO8noA8vNhtxZTvTf+LRVdKUaCLgIbxiUD/ymvREYof7SBg5buUay94kCs RQNpo0hSSbeRJ/X8ZgVjjHSVdpnwtFtS+pu1HKoNkFEIO9j+tAJ47A67lyG7iW5k 3Ix17JNr/hiZdguBh257hkrpVRXHEGyDyZvyNnYmlD+3MEJMvDk6Ad6GyEFCosUR 9gmnTizKXv6K80avZsIH3VSiTWbCLA6D -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:42 2025 by rpki-client