$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: 30uq/mRMS7GU2ChCFsUqaHa/V5QjwMNTs6cDoUIRvfM= Subject key identifier: 1F:0A:35:41:43:80:90:2C:7F:63:2C:02:86:37:82:AC:0C:6F:DC:4E Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 52 Signing time: Sat 05 Apr 2025 06:33:27 +0000 Manifest this update: Sat 05 Apr 2025 06:33:26 +0000 Manifest next update: Sat 12 Apr 2025 06:33:26 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: MRAwMZHIoAy159QC05wv2UtSoCH8ea+UgTunowEfl3I=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46 Validity Not Before: Apr 5 06:33:26 2025 GMT Not After : Apr 12 06:33:26 2025 GMT Subject: CN=67f0ceb6-e5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:e7:02:54:71:bb:4c:3f:c4:a1:4c:59:68: 93:17:d2:6c:3b:0a:38:c3:f3:57:39:4d:c0:79:75: f9:80:2b:5c:4c:ee:1f:82:22:e5:3f:9a:ab:98:65: b6:e7:8f:92:4e:50:37:94:9d:97:07:7a:6c:ee:6a: 33:b0:8e:53:fd:58:0c:cc:9b:68:d9:53:df:77:5f: a7:36:bf:74:18:a7:ec:c0:f1:5c:a8:0b:79:89:68: 20:81:82:16:cf:2f:dc:34:13:95:5b:e1:6b:39:1d: fb:36:13:e7:48:1b:45:e9:5d:e1:8b:a8:61:ae:ba: a3:e9:7c:03:19:e1:61:64:51:9c:61:85:15:56:41: 63:68:64:1a:53:39:ef:05:2b:12:47:6a:1b:77:96: c2:c8:a3:0e:0f:6f:77:f4:c3:7e:e2:e9:c4:3f:5e: ef:28:9f:30:a0:ce:50:7a:26:68:00:f4:c9:03:f2: 17:2b:ae:d2:f3:d3:62:fd:01:99:06:dd:78:24:e1: f1:e4:17:f8:1c:5f:f0:4e:99:56:66:44:6b:92:88: 83:40:b0:c7:1e:89:2a:2c:09:6a:4c:79:c4:7b:7a: 0c:39:3d:37:26:f4:c0:29:d0:61:4b:f3:c4:16:ce: 0d:bb:f9:c8:aa:5b:c0:74:f5:8a:2a:45:1f:a3:f3: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0A:35:41:43:80:90:2C:7F:63:2C:02:86:37:82:AC:0C:6F:DC:4E X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:33:a1:d6:73:32:b7:0c:c4:07:71:37:fa:5e:06:46:24:71: fe:92:03:44:09:7c:f2:e1:d6:83:2c:c2:86:6c:cd:99:dd:8a: bf:22:be:0f:c8:d5:18:8b:f1:06:55:f7:2c:c4:2a:42:35:1f: 57:31:89:c1:03:38:18:a9:e0:a1:0e:d2:97:91:60:2f:66:db: 37:85:cb:15:2f:e2:cb:93:70:a2:e2:60:90:e8:e8:f0:0d:2d: 3c:de:a4:70:91:dc:a0:8a:fa:73:59:b5:82:41:62:51:e6:5d: 85:a0:0a:a3:2f:85:d2:b2:0d:9a:4c:d0:88:87:da:ba:ec:6d: af:b4:c0:1f:d6:d7:72:3b:e0:1f:39:c6:0c:33:37:88:3a:2a: ef:9a:54:78:62:82:a1:0b:62:96:af:ef:8c:3a:63:ed:88:f4: 4f:b1:49:f5:9b:b0:23:95:6f:d5:ca:14:d2:4a:70:fc:d9:27: 61:ff:76:9b:98:ae:6f:e8:c8:f2:f3:9e:60:86:8b:6a:94:ed: 68:4a:b6:e4:b0:e8:ac:d4:ae:e4:b6:7e:ff:7c:f7:e1:aa:4d: 0c:62:6f:c0:e0:62:81:ce:6a:8c:93:2d:c2:9a:1d:f7:18:70: b6:5e:0c:d8:06:a1:1d:da:45:20:54:d1:c5:ed:dc:3a:fd:51: 8d:60:16:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNTA0MDUwNjMzMjZaFw0yNTA0MTIwNjMzMjZaMBgxFjAUBgNV BAMTDTY3ZjBjZWI2LWU1ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdrecCVHG7TD/EoUxZaJMX0mw7CjjD81c5TcB5dfmAK1xM7h+CIuU/mquYZbbn j5JOUDeUnZcHemzuajOwjlP9WAzMm2jZU993X6c2v3QYp+zA8VyoC3mJaCCBghbP L9w0E5Vb4Ws5Hfs2E+dIG0XpXeGLqGGuuqPpfAMZ4WFkUZxhhRVWQWNoZBpTOe8F KxJHaht3lsLIow4Pb3f0w37i6cQ/Xu8onzCgzlB6JmgA9MkD8hcrrtLz02L9AZkG 3Xgk4fHkF/gcX/BOmVZmRGuSiINAsMceiSosCWpMecR7egw5PTcm9MAp0GFL88QW zg27+ciqW8B09YoqRR+j890zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHwo1QUOA kCx/YywChjeCrAxv3E4wHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIzodZzMrcMxAdxN/peBkYkcf6SA0QJfPLh1oMswoZszZndir8ivg/I 1RiL8QZV9yzEKkI1H1cxicEDOBip4KEO0peRYC9m2zeFyxUv4suTcKLiYJDo6PAN LTzepHCR3KCK+nNZtYJBYlHmXYWgCqMvhdKyDZpM0IiH2rrsba+0wB/W13I74B85 xgwzN4g6Ku+aVHhigqELYpav74w6Y+2I9E+xSfWbsCOVb9XKFNJKcPzZJ2H/dpuY rm/oyPLznmCGi2qU7WhKtuSw6KzUruS2fv989+GqTQxib8DgYoHOaoyTLcKaHfcY cLZeDNgGoR3aRSBU0cXt3Dr9UY1gFg4= -----END CERTIFICATE-----Generated at Sun Apr 6 22:02:09 2025 by rpki-client