$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: ED7WMuXgAizf4InKwWagEkHrseI0+9G67MpidWAcyNU= Subject key identifier: BF:57:35:9A:08:EA:C8:6D:4E:3C:48:3F:A9:F5:A2:7F:AF:93:5F:78 Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 15E6 Signing time: Fri 04 Apr 2025 17:42:46 +0000 Manifest this update: Fri 04 Apr 2025 17:42:45 +0000 Manifest next update: Fri 11 Apr 2025 17:42:45 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: ogI4OmMfzjHt5KqFMisVmLQzvViHnAYBqBTEuqtIKJs=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 1r2d/Ak19T6Kjigl8OFNB0MlpnTTA5brSJxtx4WES4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F Validity Not Before: Apr 4 17:42:45 2025 GMT Not After : Apr 11 17:42:45 2025 GMT Subject: CN=67f01a16-fab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:3d:a5:ca:d9:a6:a7:0d:f2:6d:f2:a3:a8: 2a:22:e8:a7:64:47:52:cc:51:73:ad:39:6b:3e:91: 6a:3b:96:b9:07:43:0e:f7:5c:8a:d9:61:1d:d5:66: 34:2a:3f:9f:a7:bd:53:b2:94:93:8f:bc:e0:44:94: fa:7a:6c:91:a4:87:dc:3e:13:ad:71:dd:44:80:95: 28:5a:a2:2c:22:fa:ac:a7:f2:ee:d1:bc:d7:77:79: 1b:0c:7a:84:45:f7:7d:2f:67:03:01:b5:4d:45:42: ca:95:b1:90:ec:4b:fb:a1:63:40:11:cb:ed:6e:4e: fd:fc:4b:06:c1:7d:96:20:14:48:b7:11:10:dc:39: 96:87:d3:77:1f:b3:94:9c:e5:44:70:1b:4f:f6:29: f3:42:36:1d:d0:34:56:b5:37:70:32:2c:f3:03:db: 11:41:ce:92:11:c6:04:11:3c:4d:d4:67:be:1a:7a: 9c:a9:2e:a6:7c:c4:28:db:0e:ab:2e:43:23:6e:15: 99:00:87:3d:2d:ca:18:81:e1:c0:d2:df:6b:66:88: 8c:51:cd:b3:f0:44:f4:49:0f:a7:cc:15:d5:0f:16: 6e:62:60:e1:81:00:02:8d:9a:cb:6c:7d:80:85:8b: 1a:ed:a3:88:ed:a0:5d:70:0f:ac:ea:2c:f5:1f:15: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:57:35:9A:08:EA:C8:6D:4E:3C:48:3F:A9:F5:A2:7F:AF:93:5F:78 X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:72:94:df:da:92:49:31:d3:69:13:4c:bf:b3:c4:ab:e8:68: 07:d0:5c:ed:9c:64:db:05:4e:d3:4b:1c:b8:3f:4d:a5:e5:a1: 69:b9:ec:b8:75:f4:e4:b2:d7:20:85:d2:a9:45:6d:51:b5:80: 15:f5:a8:b6:ad:03:d8:ee:02:a9:29:c1:c1:64:05:35:74:cc: 67:9f:17:78:ac:a3:b2:eb:a9:f2:de:78:d5:46:f3:29:18:19: cb:79:7d:91:09:31:54:9c:ed:ab:fb:9e:5f:66:18:3e:26:6e: 5c:75:37:c4:2b:96:57:2a:7d:98:9b:86:3b:dc:2d:a5:dc:c1: a1:c0:71:ad:39:a3:d7:37:c4:c4:26:15:36:fd:01:ec:85:69: f9:bb:43:cf:1c:72:5f:fe:a9:68:53:5d:65:e5:db:12:4e:a9: 92:c7:41:98:b3:fc:21:4a:6c:d6:bb:c0:1f:c2:02:d1:4f:56: d1:33:cc:49:30:75:1d:a4:6b:23:92:cd:43:f5:26:91:36:d6: 89:49:0f:af:01:56:ab:23:b2:de:b4:91:cd:84:67:c3:4f:42: 7c:cc:b8:30:87:50:d5:94:e4:e3:ab:a9:ff:d1:95:45:37:63: d1:1f:d3:c0:cf:b7:0b:21:3f:3b:c8:47:92:94:87:58:dc:63: d2:2f:08:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwNDA0MTc0MjQ1WhcNMjUwNDExMTc0MjQ1WjAYMRYwFAYD VQQDEw02N2YwMWExNi1mYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3E9pcrZpqcN8m3yo6gqIuinZEdSzFFzrTlrPpFqO5a5B0MO91yK2WEd1WY0 Kj+fp71TspSTj7zgRJT6emyRpIfcPhOtcd1EgJUoWqIsIvqsp/Lu0bzXd3kbDHqE Rfd9L2cDAbVNRULKlbGQ7Ev7oWNAEcvtbk79/EsGwX2WIBRItxEQ3DmWh9N3H7OU nOVEcBtP9inzQjYd0DRWtTdwMizzA9sRQc6SEcYEETxN1Ge+GnqcqS6mfMQo2w6r LkMjbhWZAIc9LcoYgeHA0t9rZoiMUc2z8ET0SQ+nzBXVDxZuYmDhgQACjZrLbH2A hYsa7aOI7aBdcA+s6iz1HxVPGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9XNZoI 6shtTjxIP6n1on+vk194MB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgcpTf2pJJMdNpE0y/s8Sr6GgH0FztnGTbBU7TSxy4P02l5aFpuey4 dfTkstcghdKpRW1RtYAV9ai2rQPY7gKpKcHBZAU1dMxnnxd4rKOy66ny3njVRvMp GBnLeX2RCTFUnO2r+55fZhg+Jm5cdTfEK5ZXKn2Ym4Y73C2l3MGhwHGtOaPXN8TE JhU2/QHshWn5u0PPHHJf/qloU11l5dsSTqmSx0GYs/whSmzWu8AfwgLRT1bRM8xJ MHUdpGsjks1D9SaRNtaJSQ+vAVarI7LetJHNhGfDT0J8zLgwh1DVlOTjq6n/0ZVF N2PRH9PAz7cLIT87yEeSlIdY3GPSLwgX -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:08 2025 by rpki-client