$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 5Qd5O+RoXetkN5iC+N1hz/gkiFpt2grQMNroX/5eWLE= Subject key identifier: 1E:1D:2B:10:5B:B0:A8:18:12:BD:76:AC:BA:88:A6:0D:EF:72:35:FB Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 110E Signing time: Fri 04 Apr 2025 19:50:00 +0000 Manifest this update: Fri 04 Apr 2025 19:49:59 +0000 Manifest next update: Fri 11 Apr 2025 19:49:59 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: XzB/WkMkDWX9TCZXzvSQzX0B7hmKwj5RxUbS5iLq5Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6 Validity Not Before: Apr 4 19:49:59 2025 GMT Not After : Apr 11 19:49:59 2025 GMT Subject: CN=67f037e7-9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:27:44:74:aa:b9:13:20:ff:5d:9f:b3:82: 61:d2:6d:14:81:a2:3b:58:df:e0:f5:2a:d0:19:7b: bc:47:98:42:46:90:41:de:61:5f:3c:82:ff:75:67: bb:de:67:61:26:3d:58:d2:8d:86:43:df:fa:58:bc: a1:bc:47:56:66:46:29:0d:c0:37:52:11:8f:f6:7d: 45:03:ad:ac:31:89:5e:0c:4b:c4:c5:8f:c9:61:7e: 5f:cd:f0:d8:33:19:b4:79:60:a7:fb:1e:10:b5:24: d2:4a:61:42:1e:f4:a5:5f:5a:c0:c2:db:24:d0:93: 61:a8:c7:7a:60:20:6e:a5:36:16:05:26:de:0c:86: ce:1e:90:13:6d:e5:ea:50:7a:ce:5a:0e:a3:2f:ac: a8:b1:da:aa:97:9d:c2:93:62:34:3a:31:ee:92:31: 2d:be:a2:6e:ce:27:58:d2:38:3c:4d:bc:04:10:1c: b7:12:14:c5:1b:be:d2:c8:d7:18:84:c0:cb:a1:79: 85:2b:f7:21:46:42:c1:ea:4e:69:cb:dd:83:ad:1b: 98:44:2a:88:37:09:17:4b:5a:f5:f1:d8:af:5b:95: 27:48:18:8a:78:1b:f8:fd:bc:b2:3f:e9:73:91:cd: 15:ec:25:74:0c:3b:1b:0c:7b:44:23:0b:17:35:c1: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1D:2B:10:5B:B0:A8:18:12:BD:76:AC:BA:88:A6:0D:EF:72:35:FB X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:0d:e8:5d:0d:fd:04:19:ba:a5:24:3d:4d:aa:65:cd:d1: ec:b0:21:5b:1e:8d:9b:38:d3:6a:4b:cd:c3:8b:55:49:d6:ed: 56:28:11:1b:08:0d:2e:1e:cd:f1:59:cb:be:44:c1:96:ba:c8: dc:53:5b:a9:2d:5b:ee:a7:02:d2:ed:ef:f0:bd:ee:b1:f9:6d: 57:29:cf:c9:db:d1:ac:e5:d5:b4:3f:4f:c1:a2:6e:6f:3d:9f: 9b:d7:89:61:0b:d7:8c:46:c5:1a:76:e3:75:61:e9:0f:a7:54: 5c:6a:4b:5e:b5:64:10:de:fa:ed:28:96:fc:f4:d8:c9:57:7f: c7:98:eb:e5:7a:00:39:fd:21:29:a6:b1:e7:55:7a:10:3b:2f: 2d:e6:d6:01:16:ac:4d:ef:09:6d:0f:12:68:c9:57:80:a4:f5: b1:f8:71:13:57:94:33:f2:bf:d0:fe:69:45:06:be:f8:ef:ce: a6:db:b5:3e:e4:db:cd:6c:40:82:47:e9:ab:0e:b3:b9:60:45: 56:7a:89:6d:33:18:cf:ef:d5:ae:e4:91:75:c3:28:bc:19:63: b8:c0:4d:8f:28:04:f1:31:ba:66:0e:b4:96:5c:9c:bd:80:d2: 60:9e:ee:40:e0:14:0d:3d:ef:17:69:29:b7:e2:17:a7:f9:d6: c3:94:ea:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwNDA0MTk0OTU5WhcNMjUwNDExMTk0OTU5WjAYMRYwFAYD VQQDEw02N2YwMzdlNy05ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bknRHSquRMg/12fs4Jh0m0UgaI7WN/g9SrQGXu8R5hCRpBB3mFfPIL/dWe7 3mdhJj1Y0o2GQ9/6WLyhvEdWZkYpDcA3UhGP9n1FA62sMYleDEvExY/JYX5fzfDY Mxm0eWCn+x4QtSTSSmFCHvSlX1rAwtsk0JNhqMd6YCBupTYWBSbeDIbOHpATbeXq UHrOWg6jL6yosdqql53Ck2I0OjHukjEtvqJuzidY0jg8TbwEEBy3EhTFG77SyNcY hMDLoXmFK/chRkLB6k5py92DrRuYRCqINwkXS1r18divW5UnSBiKeBv4/byyP+lz kc0V7CV0DDsbDHtEIwsXNcGYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4dKxBb sKgYEr12rLqIpg3vcjX7MB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqQ3oXQ39BBm6pSQ9TaplzdHssCFbHo2bONNqS83Di1VJ1u1WKBEb CA0uHs3xWcu+RMGWusjcU1upLVvupwLS7e/wve6x+W1XKc/J29Gs5dW0P0/Bom5v PZ+b14lhC9eMRsUaduN1YekPp1RcaktetWQQ3vrtKJb89NjJV3/HmOvlegA5/SEp prHnVXoQOy8t5tYBFqxN7wltDxJoyVeApPWx+HETV5Qz8r/Q/mlFBr74786m27U+ 5NvNbECCR+mrDrO5YEVWeoltMxjP79Wu5JF1wyi8GWO4wE2PKATxMbpmDrSWXJy9 gNJgnu5A4BQNPe8XaSm34hen+dbDlOpD -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client