$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: z1eG7YFN5hwgomNwXUytaKvNzJ9YCuEOD1GLsiZdnOw= Subject key identifier: 6B:3E:19:66:56:20:EC:1D:BA:97:85:79:55:C3:4E:84:FD:26:39:D4 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 27 Signing time: Thu 03 Apr 2025 07:35:00 +0000 Manifest this update: Thu 03 Apr 2025 07:35:00 +0000 Manifest next update: Thu 10 Apr 2025 07:35:00 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: QTIx1k6g4nw+5bZOCrt6yCVOsq1GvanxA2rG6wduvhQ=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103 Validity Not Before: Apr 3 07:35:00 2025 GMT Not After : Apr 10 07:35:00 2025 GMT Subject: CN=67ee3a24-c8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:36:0f:ed:70:db:9e:68:75:4e:f5:69:cf: 75:33:33:a9:dc:d9:11:49:0d:b9:cb:5d:4a:f3:be: 06:42:4b:c8:d0:81:67:1e:85:2b:78:ee:cc:73:96: 4b:48:39:ef:16:07:fe:ac:dc:9a:58:65:cd:16:8a: ea:4d:32:40:b9:a0:b0:08:93:b4:44:35:7e:8e:90: 95:1a:d3:4f:d7:7d:68:95:f1:62:96:a8:f4:4b:cd: 20:4d:d5:8d:37:21:81:60:42:a8:7d:6b:33:ca:3c: 4b:01:2d:f7:64:11:23:99:f0:f3:49:39:5d:b0:da: ed:47:2b:10:c5:28:ea:b4:fa:be:d5:4a:51:b2:16: 88:1f:a5:db:0e:e8:49:59:7f:ad:15:79:b8:b8:58: cb:e6:88:7d:db:d3:e9:6d:05:72:55:d9:d4:40:28: be:0a:bf:60:71:87:98:d6:29:71:78:15:a3:84:8e: 60:c0:19:0f:77:a0:f2:86:05:4d:5e:87:80:28:4f: 0e:15:fa:0b:65:be:f5:23:72:0a:21:23:e9:e6:8c: 85:fc:d6:30:fd:5d:a4:6c:6d:b3:e7:49:15:8a:43: 8f:b9:ca:5b:0d:44:cd:29:ac:e2:9f:5d:74:9e:10: f1:5b:a4:f2:e1:71:c8:e8:14:4c:3f:b6:a5:0e:a8: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:19:66:56:20:EC:1D:BA:97:85:79:55:C3:4E:84:FD:26:39:D4 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:94:e9:52:6e:33:6c:5d:32:c8:aa:e8:53:f4:fc:45:f1:4f: d7:69:67:29:26:26:6a:b4:b5:78:3f:f5:ca:46:81:67:50:11: ab:cc:d5:e2:12:5c:40:60:3c:33:62:a0:14:2c:87:6f:9d:94: e3:3f:e1:98:cb:71:e7:15:ea:d1:19:3a:7b:3f:39:4f:99:d2: 5d:dc:16:c7:1b:9c:07:69:19:4c:e8:2c:71:7a:fa:88:d3:8d: c2:16:db:54:c4:b4:36:23:e1:4c:ca:31:1c:77:52:88:50:48: 88:75:ff:ab:c0:77:be:fb:9b:6e:b5:02:95:57:d3:e4:f9:32: c0:35:52:cb:06:8b:31:a3:88:a1:1d:df:7d:dd:ff:47:f4:02: c8:63:62:fa:13:4f:8d:98:84:1e:f5:41:3b:b5:e5:98:e1:7f: b2:05:a2:7e:a0:7d:23:46:8e:03:c6:c3:da:40:74:7a:1d:5d: de:4c:ed:51:86:ed:5c:c3:21:45:52:3f:a2:19:d0:c1:85:16: f1:90:24:01:56:78:91:cd:a5:e4:c6:f8:ae:d6:60:27:97:3b: 51:1d:d0:25:0e:16:44:a7:79:a1:44:fc:9c:3e:99:21:bf:b0: 61:b1:01:96:a6:73:43:9a:28:86:22:06:28:e1:14:30:cb:24: 60:c9:88:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA0MDMwNzM1MDBaFw0yNTA0MTAwNzM1MDBaMBgxFjAUBgNV BAMTDTY3ZWUzYTI0LWM4YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVeDYP7XDbnmh1TvVpz3UzM6nc2RFJDbnLXUrzvgZCS8jQgWcehSt47sxzlktI Oe8WB/6s3JpYZc0WiupNMkC5oLAIk7RENX6OkJUa00/XfWiV8WKWqPRLzSBN1Y03 IYFgQqh9azPKPEsBLfdkESOZ8PNJOV2w2u1HKxDFKOq0+r7VSlGyFogfpdsO6ElZ f60Vebi4WMvmiH3b0+ltBXJV2dRAKL4Kv2Bxh5jWKXF4FaOEjmDAGQ93oPKGBU1e h4AoTw4V+gtlvvUjcgohI+nmjIX81jD9XaRsbbPnSRWKQ4+5ylsNRM0prOKfXXSe EPFbpPLhccjoFEw/tqUOqGpzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaz4ZZlYg 7B26l4V5VcNOhP0mOdQwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN2U6VJuM2xdMsiq6FP0/EXxT9dpZykmJmq0tXg/9cpGgWdQEavM1eIS XEBgPDNioBQsh2+dlOM/4ZjLcecV6tEZOns/OU+Z0l3cFscbnAdpGUzoLHF6+ojT jcIW21TEtDYj4UzKMRx3UohQSIh1/6vAd777m261ApVX0+T5MsA1UssGizGjiKEd 333d/0f0AshjYvoTT42YhB71QTu15Zjhf7IFon6gfSNGjgPGw9pAdHodXd5M7VGG 7VzDIUVSP6IZ0MGFFvGQJAFWeJHNpeTG+K7WYCeXO1Ed0CUOFkSneaFE/Jw+mSG/ sGGxAZamc0OaKIYiBijhFDDLJGDJiKg= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:38 2025 by rpki-client