$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json) Hash identifier: tVOfkbQ3ZpiBrahPMYn9PbTp2DcR10IcViQw80sgAkI= Subject key identifier: A7:83:CC:7D:C3:C4:63:B2:6A:5B:6D:E8:B7:25:C0:DF:AE:92:E8:8C Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 0F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft Manifest number: 0EFD Signing time: Wed 02 Apr 2025 17:44:51 +0000 Manifest this update: Wed 02 Apr 2025 17:44:51 +0000 Manifest next update: Wed 09 Apr 2025 17:44:51 +0000 Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: MUr17fsRtRYOJHw2dx5o4SD63wbLT+Ki3ie0Z0hfylc=) 2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: pLwEgd+VwWLgIg3V6a+yYMrZGmHsHcB345LFbQql9+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25 Validity Not Before: Apr 2 17:44:51 2025 GMT Not After : Apr 9 17:44:51 2025 GMT Subject: CN=67ed7793-c7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:53:9f:d8:be:3a:59:7c:18:f1:52:57:96: fa:bc:e5:a8:2c:7c:94:46:28:33:c9:79:7c:8a:6e: 22:ea:25:c5:e8:e7:7d:7d:bb:86:17:14:07:59:61: 21:58:7f:f3:c7:e1:76:8e:a2:f4:2d:76:33:47:da: e3:1d:05:0e:84:50:99:ae:a5:f4:68:e6:f3:a8:4b: ea:e2:90:91:c9:09:3b:98:e2:15:c9:66:04:5d:c0: fd:fd:a3:fc:45:ed:f5:5d:3b:ae:0d:31:bc:d7:cb: aa:79:6a:2b:d8:5a:d4:3c:18:d9:64:8a:25:5e:f4: 42:58:68:e2:f4:74:e6:4c:eb:7d:8b:57:4d:dc:73: d8:10:f9:d6:e6:04:b5:3f:30:ad:8a:23:11:07:36: e5:ed:58:e5:fd:fc:32:56:b2:c1:75:1c:bb:19:51: dc:3b:16:bb:68:e3:5e:5a:fd:73:51:ca:9a:c9:48: b3:35:19:b9:e3:49:19:e5:40:c1:07:6c:ff:3d:11: 14:da:7f:62:c2:80:d8:7a:c2:09:15:0c:6d:a4:96: 5b:e5:69:06:c9:c3:1a:4e:88:76:f7:e3:5a:9c:31: 2f:9a:60:ee:89:85:78:78:d2:59:22:2a:ec:2b:eb: b1:f2:45:3f:55:ca:99:74:ce:a2:03:d2:b6:c4:fe: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:CC:7D:C3:C4:63:B2:6A:5B:6D:E8:B7:25:C0:DF:AE:92:E8:8C X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:4b:c7:6c:91:e5:81:e1:cf:bc:31:9e:bb:5e:03:cf:cc: 5e:a8:51:dc:f1:a2:97:00:57:ff:88:5e:e5:d0:d7:47:a4:51: e5:bb:7b:11:00:01:6c:7d:e6:b8:4e:62:98:1a:ca:ee:3d:7f: 12:36:6b:a0:fb:8b:e6:69:bd:c3:c6:1a:91:14:90:a3:84:40: c7:c4:e3:e0:eb:81:f4:6d:05:fe:60:e8:0f:47:e7:ed:02:80: 18:78:12:f3:ca:09:63:4e:b7:7f:50:f5:5b:ef:80:4f:9a:7f: 03:9b:ac:95:6c:4f:16:6a:5b:13:e3:f2:77:58:12:10:2e:0e: d8:32:3c:cb:10:69:12:cc:92:1c:a5:77:ae:d8:c9:cf:91:38: bc:b0:ad:ce:0d:18:b9:fc:39:f4:82:5f:ca:b9:39:78:98:f6: 71:83:3a:77:f1:f1:66:29:a2:fe:72:ee:3a:c3:53:b2:a4:a9: 92:40:e8:20:86:60:a2:ff:f3:75:e9:85:11:72:34:fc:0e:ea: 87:4d:4c:be:2b:e2:83:a4:e9:c8:3b:ac:d3:f4:ff:f3:55:7e: 65:e4:92:67:ca:9b:ee:42:b4:94:5c:a0:98:43:f1:a6:9f:e2: fe:ab:a9:76:75:f2:1a:fc:e9:31:fc:e0:b5:ac:20:20:26:7d: e8:c0:b0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjUwNDAyMTc0NDUxWhcNMjUwNDA5MTc0NDUxWjAYMRYwFAYD VQQDEw02N2VkNzc5My1jN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt9Tn9i+Oll8GPFSV5b6vOWoLHyURigzyXl8im4i6iXF6Od9fbuGFxQHWWEh WH/zx+F2jqL0LXYzR9rjHQUOhFCZrqX0aObzqEvq4pCRyQk7mOIVyWYEXcD9/aP8 Re31XTuuDTG818uqeWor2FrUPBjZZIolXvRCWGji9HTmTOt9i1dN3HPYEPnW5gS1 PzCtiiMRBzbl7Vjl/fwyVrLBdRy7GVHcOxa7aONeWv1zUcqayUizNRm540kZ5UDB B2z/PREU2n9iwoDYesIJFQxtpJZb5WkGycMaToh29+NanDEvmmDuiYV4eNJZIirs K+ux8kU/VcqZdM6iA9K2xP4pdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeDzH3D xGOyaltt6LclwN+ukuiMMB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUMyNS82ODdBMTBBNjc2NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQ alZFRzNzdlhMVy1nbklHT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAbEvHbJHlgeHPvDGeu14Dz8xeqFHc8aKXAFf/iF7l0NdHpFHlu3sR AAFsfea4TmKYGsruPX8SNmug+4vmab3DxhqRFJCjhEDHxOPg64H0bQX+YOgPR+ft AoAYeBLzygljTrd/UPVb74BPmn8Dm6yVbE8WalsT4/J3WBIQLg7YMjzLEGkSzJIc pXeu2MnPkTi8sK3ODRi5/Dn0gl/KuTl4mPZxgzp38fFmKaL+cu46w1OypKmSQOgg hmCi//N16YURcjT8DuqHTUy+K+KDpOnIO6zT9P/zVX5l5JJnypvuQrSUXKCYQ/Gm n+L+q6l2dfIa/Okx/OC1rCAgJn3owLAU -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:50 2025 by rpki-client