$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json) Hash identifier: 5CHnS7xvsjaxYMbvEM/D10JkBcyqvfaArFL8yeg2Vmc= Subject key identifier: 5F:76:44:74:5D:65:1C:97:40:F0:4C:EC:45:AB:D6:8C:B8:6E:0C:EE Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft Manifest number: 7F Signing time: Sat 29 Mar 2025 05:59:00 +0000 Manifest this update: Sat 29 Mar 2025 05:58:59 +0000 Manifest next update: Sat 05 Apr 2025 05:58:59 +0000 Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: HcXu+6vQHEFlGSjWljTsw/vpEEwmJdT/r7Rnc/i61pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9 Validity Not Before: Mar 29 05:58:59 2025 GMT Not After : Apr 5 05:58:59 2025 GMT Subject: CN=67e78c23-d300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:bf:08:7e:57:b1:97:11:a5:30:e6:45:cb: 8a:6d:0d:0d:d7:5c:92:5a:c9:ba:63:83:0a:6e:9e: 1b:cb:39:56:dd:88:c5:7e:a2:5e:c1:2e:0a:07:a1: 0e:7f:d1:66:d9:92:3a:44:fc:a5:33:41:5b:0d:07: 5e:45:4d:76:27:95:06:dc:9a:3c:bb:3f:06:76:87: b3:76:25:1d:18:eb:41:01:9b:62:b1:10:33:f7:a4: 93:56:9d:6d:98:6c:2a:1f:75:aa:c4:97:1a:47:45: 42:a4:7f:69:66:36:30:32:5f:d4:51:19:65:23:67: 1e:de:1d:a4:b5:96:5e:f2:db:36:5d:56:b2:5e:49: 1d:e4:78:19:ac:17:4a:34:8e:91:26:ff:42:e4:27: 7e:ef:fd:92:ee:7b:60:ad:3d:5d:01:00:8c:8a:44: 87:bd:68:7e:8a:ef:63:33:01:3c:e5:b1:60:d4:65: ea:b2:fb:90:07:cf:8f:58:97:40:6c:84:1c:bc:a7: bc:1d:96:ee:e5:3a:ea:92:07:9a:09:55:c0:83:e9: a0:c6:76:4f:e9:6b:ee:9d:2f:78:85:c0:33:0c:ed: 91:2b:ff:a1:62:38:e7:d5:49:c8:a7:b7:81:4d:41: ac:ea:c6:86:d1:79:92:d1:34:f5:98:b1:33:2f:ad: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:44:74:5D:65:1C:97:40:F0:4C:EC:45:AB:D6:8C:B8:6E:0C:EE X509v3 Authority Key Identifier: keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:21:7b:0f:99:4e:2c:d6:4d:9d:c7:c9:33:d8:ad:8b:77:28: 49:56:89:6f:5b:7b:c8:57:3e:db:92:6d:b4:5d:a1:99:43:17: f5:be:8c:91:28:53:9e:35:58:14:8f:dd:b4:1b:17:90:1d:11: e5:af:f8:85:20:69:3b:f6:47:15:e9:a3:54:d9:f3:09:3f:2f: 52:cd:15:10:16:2f:25:df:35:f4:24:66:91:6b:87:98:b5:b5: 4f:5d:91:47:4b:c1:df:74:d7:a6:57:61:58:7d:dc:70:d1:9b: eb:6f:8f:76:3c:5c:8a:47:94:4d:ec:83:3f:60:98:b0:03:93: aa:f5:56:35:e7:f6:2e:aa:59:e2:a6:1a:8c:d0:8d:58:a3:ec: ca:b8:c1:34:14:4f:db:34:c1:ff:5a:0e:8b:55:83:c5:68:9a: 09:a3:46:35:ed:0f:ca:c7:6b:a1:79:2c:e6:9a:b5:5e:fb:a9: ad:0e:1e:fd:89:5d:5b:a2:27:95:4d:0d:f5:79:c0:18:0d:7f: bf:34:db:90:c9:38:93:fb:9d:fb:51:5b:c5:64:90:ea:87:72: 2f:5a:77:29:c3:c6:29:b5:61:dd:b7:9a:8d:2b:16:36:04:8b: d4:22:ba:40:9f:e5:39:bc:6b:f3:5d:be:ec:11:f3:8a:54:41: 15:75:fb:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFGOTExMC8GA1UEBRMoNjJDQTlDMTI2RTE0RkZCQkJDM0Q2NDA3MTA1RUJFMTUx Qjk5NjA1QjAeFw0yNTAzMjkwNTU4NTlaFw0yNTA0MDUwNTU4NTlaMBgxFjAUBgNV BAMTDTY3ZTc4YzIzLWQzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNh78IflexlxGlMOZFy4ptDQ3XXJJaybpjgwpunhvLOVbdiMV+ol7BLgoHoQ5/ 0WbZkjpE/KUzQVsNB15FTXYnlQbcmjy7PwZ2h7N2JR0Y60EBm2KxEDP3pJNWnW2Y bCofdarElxpHRUKkf2lmNjAyX9RRGWUjZx7eHaS1ll7y2zZdVrJeSR3keBmsF0o0 jpEm/0LkJ37v/ZLue2CtPV0BAIyKRIe9aH6K72MzATzlsWDUZeqy+5AHz49Yl0Bs hBy8p7wdlu7lOuqSB5oJVcCD6aDGdk/pa+6dL3iFwDMM7ZEr/6FiOOfVScint4FN QazqxobReZLRNPWYsTMvrbbvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX3ZEdF1l HJdA8EzsRavWjLhuDO4wHwYDVR0jBBgwFoAUYsqcEm4U/7u8PWQHEF6+FRuZYFsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUY5LzQ4NEYyNkU2NEFD RjExRUZCODIxOEUxNUM0RjlBRTAyL1lzcWNFbTRVXzd1OFBXUUhFRjYtRlJ1WllG cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNxY0VtNFVfN3U4UFdRSEVGNi1GUnVaWUZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUY5LzQ4NEYyNkU2NEFDRjExRUZCODIxOEUxNUM0RjlBRTAyL1lzcWNFbTRVXzd1 OFBXUUhFRjYtRlJ1WllGcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIhew+ZTizWTZ3HyTPYrYt3KElWiW9be8hXPtuSbbRdoZlDF/W+jJEo U541WBSP3bQbF5AdEeWv+IUgaTv2RxXpo1TZ8wk/L1LNFRAWLyXfNfQkZpFrh5i1 tU9dkUdLwd9016ZXYVh93HDRm+tvj3Y8XIpHlE3sgz9gmLADk6r1VjXn9i6qWeKm GozQjVij7Mq4wTQUT9s0wf9aDotVg8VomgmjRjXtD8rHa6F5LOaatV77qa0OHv2J XVuiJ5VNDfV5wBgNf78025DJOJP7nftRW8VkkOqHci9adynDxim1Yd23mo0rFjYE i9QiukCf5Tm8a/NdvuwR84pUQRV1+0k= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client