$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: zFLXhr4PuwsWYi7IwHb0Q0Gy5iskYgPKsAmbWUvyWYI= Subject key identifier: B1:6F:E6:E1:91:76:1A:2A:E4:C3:0E:87:0A:CE:88:3A:DE:6F:76:8E Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: 95 Signing time: Mon 21 Apr 2025 05:14:18 +0000 Manifest this update: Mon 21 Apr 2025 05:14:17 +0000 Manifest next update: Mon 28 Apr 2025 05:14:17 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: gJFLRV657Gqxn5iWooPJG9nKbXmscqhOwOhfbR2l7u0=) 2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=) 3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: RWKYaNgfk7P7N5uSJ3tE2gik3mua1Il7oXxrRLWnbWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Apr 21 05:14:17 2025 GMT Not After : Apr 28 05:14:17 2025 GMT Subject: CN=6805d42a-c444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:81:c1:57:1e:24:35:a0:f4:57:cc:ca:f5: df:f4:60:6b:bc:5b:51:0c:d7:5b:63:62:3d:35:3f: 65:62:ed:30:09:8d:da:7d:85:dd:e3:d4:5c:48:40: 49:f1:6d:a8:9b:3d:88:73:9b:12:70:e5:fa:93:8f: 0c:5f:de:30:db:f8:a4:52:28:08:fa:69:17:84:47: 2a:31:5f:4a:35:86:26:a8:95:b1:d7:88:2c:18:be: ff:5d:c0:f5:a2:49:a0:2a:92:3e:31:89:1c:64:c7: 64:09:f4:14:4a:ad:50:d7:6f:0d:66:9b:6b:15:21: 08:82:c6:6e:cd:fb:97:d5:49:c3:bb:f8:29:0b:26: 30:1c:a7:c0:ca:96:e5:6e:9b:75:48:64:1e:42:da: 6c:3c:c6:43:f8:2d:83:1c:4b:93:47:11:7f:a4:1c: 56:af:b5:b6:e9:51:9d:4b:2c:c6:aa:e3:ed:ff:ab: 94:3f:03:a0:13:35:ab:0a:6b:54:7a:81:ca:df:b7: 40:e3:0a:59:38:89:83:1d:26:c9:f3:db:95:ab:72: 42:47:69:fd:8d:a3:94:23:73:27:db:1c:4b:72:a4: 44:ef:88:18:b9:55:b1:ce:8f:02:0e:de:d1:00:6a: 88:62:e2:e2:31:0d:bd:b9:39:b3:8a:e9:84:35:68: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:E6:E1:91:76:1A:2A:E4:C3:0E:87:0A:CE:88:3A:DE:6F:76:8E X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:62:3e:ac:36:26:a5:35:54:91:1d:27:3e:9d:d8:a9:3b:22: 5d:51:28:c4:5a:7a:d9:c8:ec:23:05:c0:5d:7b:f8:88:b0:d8: 6a:16:aa:27:80:65:ad:ae:13:63:68:e7:2e:a4:f2:16:ba:31: ab:05:fa:11:d0:6e:d6:58:3c:32:f0:b7:58:88:dc:9f:23:7a: 5d:da:2a:e1:af:a0:91:e7:d1:34:bb:6b:1d:54:b4:dd:2b:22: 59:e2:17:c7:19:fe:07:c3:68:10:ef:f2:03:58:94:2e:18:2c: 24:02:07:56:fa:2c:e5:52:fd:c1:59:bc:c5:25:b9:65:b5:ef: f8:5e:4f:ca:a9:e2:a6:64:ee:b4:7b:68:da:7c:f0:2b:99:c4: 4d:80:8d:b1:a7:02:49:44:64:e3:01:70:e5:85:51:90:6f:09: 50:34:be:31:36:99:fe:48:b7:5c:f5:b3:2a:36:80:bf:b0:32: b3:e6:71:6b:eb:3c:30:81:fc:2b:99:11:d4:37:2d:4f:3c:7d: b0:05:1b:8b:6c:6d:db:d2:ee:d8:5d:69:c2:b3:5d:ea:61:73: d0:54:95:3d:d5:d8:70:b3:4f:71:df:70:0f:0f:64:ee:f3:46: 51:d4:fe:25:78:27:d2:2a:c5:cd:0c:00:68:b6:59:11:27:cf: 4a:f3:72:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwNDIxMDUxNDE3WhcNMjUwNDI4MDUxNDE3WjAYMRYwFAYD VQQDEw02ODA1ZDQyYS1jNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EWBwVceJDWg9FfMyvXf9GBrvFtRDNdbY2I9NT9lYu0wCY3afYXd49RcSEBJ 8W2omz2Ic5sScOX6k48MX94w2/ikUigI+mkXhEcqMV9KNYYmqJWx14gsGL7/XcD1 okmgKpI+MYkcZMdkCfQUSq1Q128NZptrFSEIgsZuzfuX1UnDu/gpCyYwHKfAypbl bpt1SGQeQtpsPMZD+C2DHEuTRxF/pBxWr7W26VGdSyzGquPt/6uUPwOgEzWrCmtU eoHK37dA4wpZOImDHSbJ89uVq3JCR2n9jaOUI3Mn2xxLcqRE74gYuVWxzo8CDt7R AGqIYuLiMQ29uTmziumENWiSLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFv5uGR dhoq5MMOhwrOiDreb3aOMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABYj6sNialNVSRHSc+ndipOyJdUSjEWnrZyOwjBcBde/iIsNhqFqon gGWtrhNjaOcupPIWujGrBfoR0G7WWDwy8LdYiNyfI3pd2irhr6CR59E0u2sdVLTd KyJZ4hfHGf4Hw2gQ7/IDWJQuGCwkAgdW+izlUv3BWbzFJbllte/4Xk/KqeKmZO60 e2jafPArmcRNgI2xpwJJRGTjAXDlhVGQbwlQNL4xNpn+SLdc9bMqNoC/sDKz5nFr 6zwwgfwrmRHUNy1PPH2wBRuLbG3b0u7YXWnCs13qYXPQVJU91dhws09x33APD2Tu 80ZR1P4leCfSKsXNDABotlkRJ89K83Ii -----END CERTIFICATE-----Generated at Tue Apr 22 12:26:20 2025 by rpki-client