$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: kPXEPwXBahovZQWh7nsPfXzDNCrveqWBdJNWN78l4J8= Subject key identifier: 2F:20:E3:D4:2A:AA:A9:3C:CA:07:C8:BF:10:E7:D6:F4:D6:6E:DC:51 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 0288 Signing time: Thu 03 Apr 2025 01:35:42 +0000 Manifest this update: Thu 03 Apr 2025 01:35:41 +0000 Manifest next update: Thu 10 Apr 2025 01:35:41 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: nkIx3rTTiI3RqdZGIWPtrzgpPBQby0+KFx2nHKSz0hw=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA Validity Not Before: Apr 3 01:35:41 2025 GMT Not After : Apr 10 01:35:41 2025 GMT Subject: CN=67ede5ed-c6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:18:5b:46:40:4b:1c:e8:88:3e:df:c0:a5: ca:53:b9:e9:75:79:a1:87:ba:c9:92:b4:a5:97:b9: c5:7f:87:35:09:80:06:e3:b4:cc:b6:5c:68:34:61: b3:50:ac:79:8c:b7:b7:2f:f5:a0:6f:4a:49:9a:2f: 93:13:43:85:93:97:6a:e1:4e:cf:95:57:b1:86:df: f2:38:02:85:43:2c:01:d1:d3:b6:6b:ce:a4:ec:95: 43:9f:3e:48:56:88:65:b6:a2:df:6e:7b:bf:c6:96: ba:b5:43:33:24:20:59:f2:9a:7c:54:ac:d8:63:3f: 4a:ba:51:99:36:f6:6c:b8:19:a3:04:b3:43:eb:8e: 34:03:96:60:c9:d3:bd:e3:15:10:1b:3d:bf:45:4a: aa:31:07:df:3a:92:c1:8e:f7:74:85:ef:df:37:71: 0c:32:25:09:97:32:5d:0d:30:28:04:36:fb:05:cf: 93:c8:c2:1d:0c:47:e1:11:28:92:6a:d2:15:32:1f: 8a:69:ce:f2:0e:5b:d1:7e:69:bb:88:f5:a8:73:58: eb:46:50:16:8b:a6:a4:bd:a6:b6:f3:ed:4a:31:1d: b4:bc:44:63:db:0f:95:3d:76:d1:7b:a1:3f:10:96: 15:0c:0a:0c:53:bf:c3:5a:62:5a:80:b2:3d:00:7f: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:E3:D4:2A:AA:A9:3C:CA:07:C8:BF:10:E7:D6:F4:D6:6E:DC:51 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:95:2d:21:a5:7b:a8:be:47:e3:4b:e6:5a:f0:20:8e:b5:47: f8:df:b2:44:60:cf:12:61:31:94:49:a7:e5:9a:5b:6e:c1:fe: 16:24:ba:bb:c8:e8:36:94:37:77:f3:af:a1:f7:8f:19:17:06: dc:c5:82:c2:81:b3:15:08:5f:a4:06:da:77:a5:ea:75:b3:1c: ae:3a:3e:89:7f:f0:dd:ff:e6:19:b9:fc:cb:af:7f:5b:09:bf: f8:73:87:4a:96:e4:03:6a:56:e0:3b:c5:74:9c:9b:28:9e:20: 4c:d3:33:96:72:75:56:44:9c:26:64:1b:ee:fa:1a:34:f7:5a: 83:0b:fa:63:09:7b:24:ff:9b:6c:e0:cb:df:c5:14:26:64:6f: 25:1f:43:18:46:0e:6a:14:18:9a:b0:9d:65:b3:05:61:72:04: fc:c4:f6:96:27:ff:74:c0:1e:e0:f2:b0:b4:fb:7d:1a:38:3c: 25:e0:07:cd:7f:a9:bb:1b:f5:cd:f0:a7:5e:ab:dc:c8:c0:3c: 28:80:b4:ea:8c:c9:90:6c:9f:d1:0f:e2:5d:cd:8c:ba:b5:33: af:2c:6c:e3:c0:b0:cb:14:d2:87:e0:ad:33:93:e3:cd:9b:9d: 72:3c:cd:e5:c6:8e:a2:e1:f2:2d:db:d9:4d:4c:af:7a:79:61: 9a:51:21:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwNDAzMDEzNTQxWhcNMjUwNDEwMDEzNTQxWjAYMRYwFAYD VQQDEw02N2VkZTVlZC1jNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFMYW0ZASxzoiD7fwKXKU7npdXmhh7rJkrSll7nFf4c1CYAG47TMtlxoNGGz UKx5jLe3L/Wgb0pJmi+TE0OFk5dq4U7PlVexht/yOAKFQywB0dO2a86k7JVDnz5I VohltqLfbnu/xpa6tUMzJCBZ8pp8VKzYYz9KulGZNvZsuBmjBLND6440A5ZgydO9 4xUQGz2/RUqqMQffOpLBjvd0he/fN3EMMiUJlzJdDTAoBDb7Bc+TyMIdDEfhESiS atIVMh+Kac7yDlvRfmm7iPWoc1jrRlAWi6akvaa28+1KMR20vERj2w+VPXbRe6E/ EJYVDAoMU7/DWmJagLI9AH+sVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8g49Qq qqk8ygfIvxDn1vTWbtxRMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9lS0hpXuovkfjS+Za8CCOtUf437JEYM8SYTGUSaflmltuwf4WJLq7 yOg2lDd386+h948ZFwbcxYLCgbMVCF+kBtp3pep1sxyuOj6Jf/Dd/+YZufzLr39b Cb/4c4dKluQDalbgO8V0nJsoniBM0zOWcnVWRJwmZBvu+ho091qDC/pjCXsk/5ts 4MvfxRQmZG8lH0MYRg5qFBiasJ1lswVhcgT8xPaWJ/90wB7g8rC0+30aODwl4AfN f6m7G/XN8Kdeq9zIwDwogLTqjMmQbJ/RD+JdzYy6tTOvLGzjwLDLFNKH4K0zk+PN m51yPM3lxo6i4fIt29lNTK96eWGaUSFi -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:33 2025 by rpki-client