$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: 8aI5kTm1gAy5vTU5B374yvHXy92T54XiDiq+sWORBz4= Subject key identifier: 66:46:74:0B:76:21:9B:D1:51:6E:EA:1E:CB:44:3F:36:BC:8F:5A:5D Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 0770 Signing time: Wed 02 Apr 2025 21:25:42 +0000 Manifest this update: Wed 02 Apr 2025 21:25:42 +0000 Manifest next update: Wed 09 Apr 2025 21:25:42 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: Z7rzKOqB7uY/xWpqjc4lZdPNiRaH55E8bRudrXCGJDg=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: SKKgbqIxO8h2gMjhNkPa/ZI17L9sik+EpFHik6yG+pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E Validity Not Before: Apr 2 21:25:42 2025 GMT Not After : Apr 9 21:25:42 2025 GMT Subject: CN=67edab56-ab3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:79:dc:8f:dc:74:5b:80:1e:85:83:c5:ad:fe: f6:96:49:b7:46:e7:24:48:fd:7b:0e:89:5b:5a:f8: 60:88:7b:f0:33:23:f5:4a:74:9b:4c:99:32:17:ce: 67:cd:f4:95:63:1a:38:bc:76:04:77:c5:c0:dc:a3: 1b:75:84:db:12:08:b8:d6:7a:ef:4d:de:cf:70:10: af:b0:7a:95:7f:71:8f:ef:d2:4a:84:38:51:86:d0: f1:0d:31:c5:38:64:e6:5d:50:53:53:96:ca:96:31: 2b:d6:fd:81:8c:06:2a:04:ed:3b:14:f2:4d:d9:80: e7:c2:1d:0f:7d:6c:c7:d2:0c:00:09:1d:2c:75:a0: e7:15:7a:66:33:86:dc:2c:7c:b1:af:74:92:90:f5: 0f:36:dc:57:b5:e8:22:19:49:5c:fc:24:bc:08:86: e1:ae:4f:bc:a1:53:0b:dc:81:ab:8e:f2:4a:7a:7d: d4:54:92:c3:87:ae:a5:0d:65:a3:6d:25:ee:d0:b7: 27:03:f5:18:c7:71:a2:51:e7:6b:b1:78:e2:5d:26: 2c:1d:a2:77:56:a5:be:66:b3:99:30:9b:c8:35:79: 8b:65:d5:6f:be:6b:28:bf:90:96:6f:8d:1f:69:c1: 20:90:4e:5d:32:62:3c:59:88:4d:a2:4a:b9:5f:00: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:74:0B:76:21:9B:D1:51:6E:EA:1E:CB:44:3F:36:BC:8F:5A:5D X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:0e:90:e1:9c:94:0f:a5:0d:c0:dd:53:90:50:3d:dc:45: 32:1f:5e:8e:69:99:ff:8f:1c:18:a0:7b:d8:84:8c:6e:6a:32: 5f:62:de:df:69:46:d1:9a:3b:8b:0e:6e:40:f7:19:ef:68:a7: 7b:83:b7:b5:e3:72:2a:2d:2a:ab:7c:7d:ba:11:fe:c4:f9:d0: bb:7f:90:09:b9:86:d2:d0:50:63:66:ef:8c:f6:9b:c0:79:af: ca:46:3a:c5:39:51:d8:e2:e1:a3:39:94:c3:38:f3:e0:32:13: d4:8a:f8:e4:47:6f:01:9e:fa:1e:09:b7:4a:28:15:cf:d3:1b: 0d:7c:20:73:55:b9:36:14:30:5e:cf:06:68:e1:64:72:d1:d5: e5:31:0d:07:ea:7a:d3:64:a4:60:22:1e:3d:8d:07:20:b8:49: ae:3b:1d:21:3e:d7:84:e3:3c:59:7c:cf:d1:69:5e:72:48:55: 66:64:6b:34:05:64:6b:84:d6:3e:53:98:e9:dc:59:9b:fe:26: 6b:f5:70:64:d4:e8:11:a2:03:90:53:c9:c1:88:ed:b5:1f:95: 5a:dc:1c:44:39:86:97:15:5a:5f:35:8a:f4:14:1a:c0:99:3a: 9c:4d:ec:57:74:84:33:75:aa:78:87:0c:f8:d7:99:30:a7:69: e7:64:bf:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjUwNDAyMjEyNTQyWhcNMjUwNDA5MjEyNTQyWjAYMRYwFAYD VQQDEw02N2VkYWI1Ni1hYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73ncj9x0W4AehYPFrf72lkm3RuckSP17DolbWvhgiHvwMyP1SnSbTJkyF85n zfSVYxo4vHYEd8XA3KMbdYTbEgi41nrvTd7PcBCvsHqVf3GP79JKhDhRhtDxDTHF OGTmXVBTU5bKljEr1v2BjAYqBO07FPJN2YDnwh0PfWzH0gwACR0sdaDnFXpmM4bc LHyxr3SSkPUPNtxXtegiGUlc/CS8CIbhrk+8oVML3IGrjvJKen3UVJLDh66lDWWj bSXu0LcnA/UYx3GiUedrsXjiXSYsHaJ3VqW+ZrOZMJvINXmLZdVvvmsov5CWb40f acEgkE5dMmI8WYhNokq5XwDCswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZGdAt2 IZvRUW7qHstEPza8j1pdMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyw6Q4ZyUD6UNwN1TkFA93EUyH16OaZn/jxwYoHvYhIxuajJfYt7f aUbRmjuLDm5A9xnvaKd7g7e143IqLSqrfH26Ef7E+dC7f5AJuYbS0FBjZu+M9pvA ea/KRjrFOVHY4uGjOZTDOPPgMhPUivjkR28BnvoeCbdKKBXP0xsNfCBzVbk2FDBe zwZo4WRy0dXlMQ0H6nrTZKRgIh49jQcguEmuOx0hPteE4zxZfM/RaV5ySFVmZGs0 BWRrhNY+U5jp3Fmb/iZr9XBk1OgRogOQU8nBiO21H5Va3BxEOYaXFVpfNYr0FBrA mTqcTexXdIQzdap4hwz415kwp2nnZL8n -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:47 2025 by rpki-client