$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json) Hash identifier: YsntJJugXE3qKZd3CFeyJhgv3DjqNVpvj8gIeIKtrXo= Subject key identifier: AB:B5:00:B7:C4:C3:CF:9E:B6:F2:6C:51:03:7B:58:63:A6:5F:FF:44 Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft Manifest number: 0580 Signing time: Thu 10 Apr 2025 23:14:07 +0000 Manifest this update: Thu 10 Apr 2025 23:14:06 +0000 Manifest next update: Thu 17 Apr 2025 23:14:06 +0000 Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: i+hnJRCUUfzeOkXZ/n3PY/UxEGZdLA1mXbysFCUW/Iw=) 2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: zqhHb4EuNxIhj0MsDdGRZBLgZ5b4JdLttiLWNXtELcI=) 3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: Apr 10 23:14:06 2025 GMT Not After : Apr 17 23:14:06 2025 GMT Subject: CN=67f850bf-dd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:06:cf:b1:1b:09:23:50:1b:0a:38:6d:16: 2e:76:41:cd:ed:4e:0b:33:a1:fa:c2:ab:07:14:d1: b1:9e:6b:5d:46:19:be:26:ae:f6:7b:a8:3c:82:d1: 85:45:af:66:2e:67:9e:56:73:18:07:dd:f5:5c:6f: 89:5b:60:f1:c7:ef:bc:d2:15:57:8b:03:f8:92:6f: cb:79:34:1f:e3:ee:82:6f:3f:4e:dc:e4:a5:4d:c4: e3:ac:ac:65:39:ee:af:8d:f6:54:f3:83:ce:8c:c5: 4b:34:8c:3c:95:50:4a:c4:6a:1a:02:7a:44:cf:a2: cc:5d:ce:4b:56:69:e9:db:20:dd:39:b5:da:26:e0: 71:93:d4:c2:1d:e3:94:53:88:19:6a:64:bb:be:e7: 6d:a1:2b:d9:c7:a5:dd:14:09:99:10:23:a7:33:a2: 55:3e:9d:ca:76:65:fa:ab:ac:e0:9f:e5:5b:0c:b1: dc:15:2f:3f:eb:66:2e:ee:2b:94:48:6d:c5:d1:bf: 9a:0f:05:5a:c6:d1:36:39:8b:f6:7c:7e:a5:19:0f: b9:b3:48:17:8b:e6:c9:44:fd:58:84:63:71:fc:fd: 27:cc:94:64:d3:8f:1e:25:10:4b:f4:75:d3:e9:4f: be:5b:db:30:7c:e6:22:a5:dc:72:25:55:f2:a0:49: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:00:B7:C4:C3:CF:9E:B6:F2:6C:51:03:7B:58:63:A6:5F:FF:44 X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f3:81:b6:88:c0:f8:4e:63:cf:69:75:b9:b4:e8:80:09:ce: 32:68:78:37:9d:1c:80:64:10:e3:51:8d:f0:92:b6:50:b5:c5: 7c:ac:a6:98:5f:56:5c:dc:6e:d1:ca:bf:56:ed:cc:7d:6a:f6: fd:ef:36:f7:ef:bf:55:50:43:ae:d3:fe:84:56:d1:88:03:15: 2d:3b:29:4c:93:67:20:16:5f:18:61:21:d9:d9:9b:77:4e:e4: a2:4d:40:c2:fe:53:ae:f6:24:31:e3:a0:a6:7e:55:6d:67:3d: df:c1:ba:cb:f5:25:0a:72:b4:cd:32:10:4b:a1:68:d6:34:4a: 50:90:ec:49:c5:af:b6:b4:eb:df:39:e3:99:a6:bd:8b:5b:0a: cc:f0:e4:46:2f:c6:06:cb:02:32:a4:f4:36:aa:28:7e:f9:33: 93:dd:20:cf:c4:75:2b:c0:cc:ee:d2:c2:8b:be:63:79:3c:22: 78:fc:95:99:c3:07:8a:ae:3f:6e:b8:f2:af:7e:20:eb:65:ce: 29:3b:73:28:c9:7e:6c:93:2d:7b:b6:8b:b1:cc:6a:4b:69:28: b6:3e:7c:70:2d:ca:78:03:35:96:74:0d:94:92:1a:05:5b:65: c4:13:ac:04:2f:bc:3d:f3:76:e9:c6:84:1a:14:28:ac:88:e6: 70:92:ab:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjUwNDEwMjMxNDA2WhcNMjUwNDE3MjMxNDA2WjAYMRYwFAYD VQQDEw02N2Y4NTBiZi1kZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8oGz7EbCSNQGwo4bRYudkHN7U4LM6H6wqsHFNGxnmtdRhm+Jq72e6g8gtGF Ra9mLmeeVnMYB931XG+JW2Dxx++80hVXiwP4km/LeTQf4+6Cbz9O3OSlTcTjrKxl Oe6vjfZU84POjMVLNIw8lVBKxGoaAnpEz6LMXc5LVmnp2yDdObXaJuBxk9TCHeOU U4gZamS7vudtoSvZx6XdFAmZECOnM6JVPp3KdmX6q6zgn+VbDLHcFS8/62Yu7iuU SG3F0b+aDwVaxtE2OYv2fH6lGQ+5s0gXi+bJRP1YhGNx/P0nzJRk048eJRBL9HXT 6U++W9swfOYipdxyJVXyoElljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu1ALfE w8+etvJsUQN7WGOmX/9EMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0 RzdjQzREaUNveVgtdV82YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW84G2iMD4TmPPaXW5tOiACc4yaHg3nRyAZBDjUY3wkrZQtcV8rKaY X1Zc3G7Ryr9W7cx9avb97zb3779VUEOu0/6EVtGIAxUtOylMk2cgFl8YYSHZ2Zt3 TuSiTUDC/lOu9iQx46CmflVtZz3fwbrL9SUKcrTNMhBLoWjWNEpQkOxJxa+2tOvf OeOZpr2LWwrM8ORGL8YGywIypPQ2qih++TOT3SDPxHUrwMzu0sKLvmN5PCJ4/JWZ wweKrj9uuPKvfiDrZc4pO3MoyX5sky17touxzGpLaSi2PnxwLcp4AzWWdA2UkhoF W2XEE6wEL7w983bpxoQaFCisiOZwkquu -----END CERTIFICATE-----Generated at Sat Apr 12 17:31:28 2025 by rpki-client