$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft File: 0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json) Hash identifier: rQlA0jwdBDIthGs+MV1MuvPB+kmITBDWHgXz4V0kW4k= Subject key identifier: 79:21:DD:F5:F0:71:72:3F:AB:74:5E:C6:8A:9F:36:D2:5F:1E:11:FD Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft Manifest number: 89 Signing time: Sat 05 Apr 2025 05:48:26 +0000 Manifest this update: Sat 05 Apr 2025 05:48:25 +0000 Manifest next update: Sat 12 Apr 2025 05:48:25 +0000 Files and hashes: 1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: E7k681dl0L3VeR71vEhP/OTsaljR8qWnKuUccwSkpsM=) 2: 1818952C8D5811EFAD3A5D3BC4F9AE02.roa (hash: tKSHJqdsSmpGgJzA0ThHFbJCNwhgg/q9aM0ZWxNfpP8=) 3: 30C3ECA444B811EF8C81962AC4F9AE02.roa (hash: YRkHlOrrGzxXTEGbxmwj8yAFxeMrCPHch9CuERcM2OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855 Validity Not Before: Apr 5 05:48:25 2025 GMT Not After : Apr 12 05:48:25 2025 GMT Subject: CN=67f0c42a-0d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:44:ee:7d:e7:81:b5:e3:74:6f:12:c6:72: e0:ac:8c:36:28:b3:e5:65:95:1c:7a:6a:23:9d:65: 79:c5:41:19:c5:78:79:b2:ac:32:fd:3b:c3:53:8f: 3b:a8:7c:0a:a7:68:14:0a:7b:26:f1:88:7f:20:2d: 39:5b:77:a8:b4:f8:f9:0f:d7:0f:b7:67:62:78:ae: 66:29:5b:43:6f:cc:bb:b3:60:27:05:be:56:73:76: fb:ea:60:24:9c:8f:86:54:e0:30:eb:76:f4:ea:d4: 6f:55:54:58:1e:c9:24:c9:2f:c6:a6:c6:f8:8c:72: 53:e2:7d:a2:7e:85:a3:8e:e8:2b:d2:35:1f:bb:56: 17:9f:72:17:98:c9:cd:06:27:9a:68:22:30:89:9a: c6:46:10:70:22:ae:d7:1a:71:c8:3d:33:52:5a:0e: 1e:14:e7:a5:51:09:19:53:4b:d8:c0:5d:be:fc:f7: a6:e0:9e:bb:5e:37:6c:d6:e8:4b:85:1c:3e:f6:4b: 19:31:61:37:00:f3:5a:37:01:b9:e0:67:6e:76:9f: 58:1f:fe:3a:bc:b2:b1:42:c4:27:f9:f8:13:c7:ea: 2b:66:03:6f:7a:5a:79:60:aa:96:8b:16:97:88:22: 5a:0c:e8:70:9c:39:f1:ce:bd:dd:02:8c:cf:43:36: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:DD:F5:F0:71:72:3F:AB:74:5E:C6:8A:9F:36:D2:5F:1E:11:FD X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c1:8a:e8:ea:cc:e9:cd:ad:36:fb:16:44:32:08:0e:43:19: 80:6d:a8:2e:03:aa:47:cc:9a:0f:f1:b6:e0:c0:12:ff:84:00: e2:ef:0c:a9:cc:66:01:ce:99:a8:21:0d:ac:c5:b6:8f:89:aa: d2:b7:56:37:e3:6a:bd:28:54:f5:6c:f9:4f:26:bf:0d:a9:5c: fb:31:04:f7:fa:44:89:13:36:da:e3:13:91:0f:5f:cb:ce:6e: 2d:b7:0f:eb:01:bc:e1:1b:54:f1:97:9b:98:3e:e9:da:61:e2: 2b:5d:04:4b:9d:87:35:6b:51:3f:8f:78:cf:78:8e:1a:0b:6b: 5f:57:c1:6f:e2:2c:95:16:45:87:c0:f1:b9:db:cc:37:2f:2b: be:52:9a:7b:8d:7e:7f:8e:3b:a9:cc:54:33:e2:cd:20:a7:09: 3c:2b:b3:73:a0:88:02:1c:0c:84:ee:f4:1a:d1:7f:2a:69:23: 7d:3e:1f:0d:9e:a1:07:87:1c:fb:6e:71:d4:e6:88:bf:b0:d6: 27:3f:ff:1d:2a:51:94:3c:bc:f4:d6:48:a5:89:87:e2:26:9d: 80:93:96:e4:53:79:67:4a:10:1d:bf:c0:5d:a4:20:d9:52:1e: 34:38:83:46:c7:8a:55:36:17:8f:6d:d6:bf:6a:4f:db:af:7c: ad:41:b1:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjUwNDA1MDU0ODI1WhcNMjUwNDEyMDU0ODI1WjAYMRYwFAYD VQQDEw02N2YwYzQyYS0wZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6ZE7n3ngbXjdG8SxnLgrIw2KLPlZZUcemojnWV5xUEZxXh5sqwy/TvDU487 qHwKp2gUCnsm8Yh/IC05W3eotPj5D9cPt2dieK5mKVtDb8y7s2AnBb5Wc3b76mAk nI+GVOAw63b06tRvVVRYHskkyS/Gpsb4jHJT4n2ifoWjjugr0jUfu1YXn3IXmMnN BieaaCIwiZrGRhBwIq7XGnHIPTNSWg4eFOelUQkZU0vYwF2+/Pem4J67Xjds1uhL hRw+9ksZMWE3APNaNwG54Gdudp9YH/46vLKxQsQn+fgTx+orZgNvelp5YKqWixaX iCJaDOhwnDnxzr3dAozPQzb1zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkh3fXw cXI/q3RexoqfNtJfHhH9MB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS81MDRDRkZFMjQ0OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1 Z1h3Z0stYTNLQjZHblJlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7wYro6szpza02+xZEMggOQxmAbaguA6pHzJoP8bbgwBL/hADi7wyp zGYBzpmoIQ2sxbaPiarSt1Y342q9KFT1bPlPJr8NqVz7MQT3+kSJEzba4xORD1/L zm4ttw/rAbzhG1Txl5uYPunaYeIrXQRLnYc1a1E/j3jPeI4aC2tfV8Fv4iyVFkWH wPG528w3Lyu+Upp7jX5/jjupzFQz4s0gpwk8K7NzoIgCHAyE7vQa0X8qaSN9Ph8N nqEHhxz7bnHU5oi/sNYnP/8dKlGUPLz01kiliYfiJp2Ak5bkU3lnShAdv8BdpCDZ Uh40OINGx4pVNhePbda/ak/br3ytQbEx -----END CERTIFICATE-----Generated at Mon Apr 7 01:25:41 2025 by rpki-client