$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: tLP3HrNua2YNj2VJarkVOrECAS4vTRPscL85Qsq5fUc= Subject key identifier: 6D:8C:61:48:CF:58:86:CE:D9:35:B8:BD:99:2F:4E:E6:49:68:6E:88 Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: 71 Signing time: Mon 07 Apr 2025 05:40:37 +0000 Manifest this update: Mon 07 Apr 2025 05:40:37 +0000 Manifest next update: Mon 14 Apr 2025 05:40:37 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: d1OYu2w90PZJuHO86GLYYeh3KIp9Zm6yT5qnYEhvd/s=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: 9b5hcdjgNu1V+4hiXD0EH0CcG2L6sHhLvtxEI9xLyu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9 Validity Not Before: Apr 7 05:40:37 2025 GMT Not After : Apr 14 05:40:37 2025 GMT Subject: CN=67f36555-9327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:48:a0:c5:8f:0c:b1:d1:0b:02:88:a2:54: b8:99:7c:7c:e4:a0:91:fb:c7:3f:63:91:1d:8f:64: 31:22:23:65:eb:d1:70:b8:06:d2:aa:46:0a:6b:cb: ed:50:26:d2:f7:cd:3f:18:77:8c:59:29:a5:b9:c0: c2:0a:bb:d3:ea:bd:06:1c:9e:bc:b5:4d:95:bf:7b: 59:d8:78:3e:3a:61:2c:14:ba:28:bc:b6:9d:57:14: ea:0d:81:02:a8:59:4e:40:a4:3c:df:a2:20:22:81: dc:cf:e6:fc:0a:77:53:16:c9:ac:49:8f:3f:5a:b2: 9e:6e:e7:be:87:07:6e:9c:f5:76:15:e7:15:e8:2e: 84:90:a8:6e:05:86:dd:98:dd:bb:90:14:09:a5:84: ec:2f:92:81:00:30:5d:84:51:7f:12:51:72:ec:f1: 54:2b:ec:8c:44:a3:2e:ad:0a:d6:d9:7d:f7:12:87: 45:f2:11:bd:f3:c5:3d:ac:56:e1:2a:e8:fd:d5:91: 91:59:b6:fb:89:ec:34:93:ff:73:75:22:77:0d:c8: f1:75:c6:d2:ea:20:c1:3b:4f:c3:f3:f7:dd:83:68: b1:44:ce:b8:66:9c:00:0c:c7:ac:c8:c9:06:ee:a4: 58:27:96:5d:4c:3b:8b:6a:05:f0:e3:b2:9e:f5:0e: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:61:48:CF:58:86:CE:D9:35:B8:BD:99:2F:4E:E6:49:68:6E:88 X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e0:6e:c0:a0:8f:d4:68:9e:1b:7f:08:ef:a9:0e:34:4f:75: 4e:0f:a2:18:ab:1e:95:8b:02:89:c3:65:5e:89:73:40:11:26: 13:f8:00:07:de:cf:7c:de:e7:1b:1f:12:5e:d8:0f:cd:a0:23: 1e:96:56:f4:13:e7:4f:ea:ef:9d:95:f3:b3:dd:2d:dc:34:c7: d5:b2:55:e1:f1:56:9e:de:66:cb:c6:cc:84:ae:32:ce:1c:ff: c7:0f:54:11:3c:eb:28:07:6a:65:02:e7:d8:45:b2:4e:e2:7f: 7f:a4:81:b7:2f:11:71:c3:14:a2:35:c7:b0:9b:ac:f4:fd:49: a8:d1:8c:e3:e0:c9:f4:e7:54:2d:69:9a:f3:3d:cc:5c:4b:fc: 1e:f4:40:81:7b:19:c3:66:a5:3a:3a:03:d9:5c:40:12:3a:52: 61:e0:64:46:24:13:bc:b1:5e:b1:60:e1:a0:88:01:28:d3:59: 7a:f0:67:c0:f2:77:2d:ae:73:67:22:21:5a:74:53:d6:44:ce: 73:71:fa:34:33:08:de:bf:ba:cb:7f:f4:d1:a2:45:1c:be:09: 6e:0f:85:f3:40:d4:4e:38:1a:d7:0b:27:cb:5c:58:c9:15:d0: 34:7c:21:30:4c:47:14:a0:a8:ef:d6:1f:e4:1e:58:c8:b0:a7: 66:10:45:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0JEOTExMC8GA1UEBRMoNjNCQTI4MUQ1NkZBNEZFNkU1MzVCMTI1RTE2REY4MDFE MTJGODA5OTAeFw0yNTA0MDcwNTQwMzdaFw0yNTA0MTQwNTQwMzdaMBgxFjAUBgNV BAMTDTY3ZjM2NTU1LTkzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4ZkigxY8MsdELAoiiVLiZfHzkoJH7xz9jkR2PZDEiI2Xr0XC4BtKqRgpry+1Q JtL3zT8Yd4xZKaW5wMIKu9PqvQYcnry1TZW/e1nYeD46YSwUuii8tp1XFOoNgQKo WU5ApDzfoiAigdzP5vwKd1MWyaxJjz9asp5u576HB26c9XYV5xXoLoSQqG4Fht2Y 3buQFAmlhOwvkoEAMF2EUX8SUXLs8VQr7IxEoy6tCtbZffcSh0XyEb3zxT2sVuEq 6P3VkZFZtvuJ7DST/3N1IncNyPF1xtLqIME7T8Pz992DaLFEzrhmnAAMx6zIyQbu pFgnll1MO4tqBfDjsp71DuzTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbYxhSM9Y hs7ZNbi9mS9O5klobogwHwYDVR0jBBgwFoAUY7ooHVb6T+blNbEl4W34AdEvgJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDQkQ5L0UwNDZCMEI2Njgx ODExRUY5QTUzRTkxOEM0RjlBRTAyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdvb0hWYjZULWJsTmJFbDRXMzRBZEV2Z0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD QkQ5L0UwNDZCMEI2NjgxODExRUY5QTUzRTkxOEM0RjlBRTAyL1k3b29IVmI2VC1i bE5iRWw0VzM0QWRFdmdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALzgbsCgj9Ronht/CO+pDjRPdU4PohirHpWLAonDZV6Jc0ARJhP4AAfe z3ze5xsfEl7YD82gIx6WVvQT50/q752V87PdLdw0x9WyVeHxVp7eZsvGzISuMs4c /8cPVBE86ygHamUC59hFsk7if3+kgbcvEXHDFKI1x7CbrPT9SajRjOPgyfTnVC1p mvM9zFxL/B70QIF7GcNmpTo6A9lcQBI6UmHgZEYkE7yxXrFg4aCIASjTWXrwZ8Dy dy2uc2ciIVp0U9ZEznNx+jQzCN6/ust/9NGiRRy+CW4PhfNA1E44GtcLJ8tcWMkV 0DR8ITBMRxSgqO/WH+QeWMiwp2YQRdQ= -----END CERTIFICATE-----Generated at Mon Apr 7 07:47:36 2025 by rpki-client