$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.mft File: ySd_ApwVszeVNmb3S5x-bLOQf0Q.mft (raw, json) Hash identifier: x8ps8OOqAdZQHHO5mnryGEp9JiXIxq2HmfNj5kAfQXs= Subject key identifier: 90:B9:66:D2:AE:01:EC:5D:79:B4:0B:7E:FE:03:E1:EA:81:C7:1F:22 Authority key identifier: C9:27:7F:02:9C:15:B3:37:95:36:66:F7:4B:9C:7E:6C:B3:90:7F:44 Certificate issuer: /CN=A91F0DAC/serialNumber=C9277F029C15B337953666F74B9C7E6CB3907F44 Certificate serial: 0FF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySd_ApwVszeVNmb3S5x-bLOQf0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.mft Manifest number: 0FDD Signing time: Tue 08 Apr 2025 17:30:22 +0000 Manifest this update: Tue 08 Apr 2025 17:30:22 +0000 Manifest next update: Tue 15 Apr 2025 17:30:22 +0000 Files and hashes: 1: ySd_ApwVszeVNmb3S5x-bLOQf0Q.crl (hash: LI6tGqCI5aVwpGcLVdddXt06q2EfnlxZFlxQIjS46JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.crl rsync://rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySd_ApwVszeVNmb3S5x-bLOQf0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4088 (0xff8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0DAC Validity Not Before: Apr 8 17:30:22 2025 GMT Not After : Apr 15 17:30:22 2025 GMT Subject: CN=67f55d2e-b1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:e9:ba:25:fc:cd:cb:9c:2a:e8:18:e7:a8: fa:77:88:f6:a8:db:ce:9c:e2:eb:88:8d:5d:14:f7: 9f:cb:fe:62:ca:d5:0c:65:d6:f3:12:51:5c:cd:30: 33:45:ab:bc:fd:56:a9:99:d2:79:54:36:1b:9d:9b: 49:fa:89:da:6f:23:64:e8:96:c3:f0:45:b8:e2:9a: a4:61:4f:ad:8d:10:4c:05:b5:66:9c:7f:ce:fe:1b: c4:52:7f:e2:3c:4f:00:67:c4:d4:60:a8:17:24:7e: 82:bf:4b:0e:3a:1d:bc:1e:4d:56:20:d6:8c:75:78: 26:d7:28:56:b9:61:c2:8e:21:1c:95:a6:6e:45:fa: 60:3e:08:b0:72:6b:98:44:87:1e:df:7a:d9:f3:ca: 10:98:db:8a:04:91:d1:c0:e0:c1:3e:dd:6c:b7:7a: 9a:5f:04:99:92:74:7e:2c:f6:36:10:2c:07:db:59: fa:73:d7:86:d9:8d:89:8e:8d:c8:3a:ee:69:70:1a: bb:70:07:9b:97:56:6d:bd:6e:a9:84:e9:47:bd:d5: 33:c8:71:42:c7:0f:af:10:e0:60:55:f4:05:1f:f8: 31:a9:8d:85:b9:77:b5:1b:a7:82:c6:fc:08:06:4c: e7:88:39:b9:bb:a1:b1:bb:30:60:4b:72:aa:d2:d9: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:66:D2:AE:01:EC:5D:79:B4:0B:7E:FE:03:E1:EA:81:C7:1F:22 X509v3 Authority Key Identifier: keyid:C9:27:7F:02:9C:15:B3:37:95:36:66:F7:4B:9C:7E:6C:B3:90:7F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySd_ApwVszeVNmb3S5x-bLOQf0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0DAC/0CE1964E4FCA11E9B38BA22BC4F9AE02/ySd_ApwVszeVNmb3S5x-bLOQf0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:21:30:d6:52:3a:f1:ee:2e:1e:a9:3e:57:50:c5:80:84: 2b:39:09:0f:94:09:7c:e4:76:32:a2:e2:b9:ad:75:35:0e:fe: ec:cb:61:5a:71:74:4c:8f:3a:e3:3e:57:35:37:86:1a:69:56: ee:71:1a:a4:a0:ff:95:b4:2f:dc:22:d0:1e:f4:24:5b:69:8e: 04:36:73:b5:99:23:ae:34:48:ae:62:ae:6a:25:f0:ce:a6:0c: f0:b8:8a:f0:5a:99:a3:78:3d:0d:4f:53:40:ae:13:26:ed:f8: e5:4c:32:73:56:cd:0e:23:38:46:16:fe:ef:8e:c3:c9:c5:04: 13:57:3b:54:af:10:e6:8a:32:1c:ee:77:fa:14:f6:d6:6e:84: 37:48:f9:97:70:18:a2:86:7f:e8:2f:e8:5a:ea:93:d2:91:01: 8c:3f:cd:85:dd:cd:72:26:d8:ca:c1:a4:2f:d2:86:af:f9:1c: bd:83:f0:43:4b:c4:4b:60:f2:0b:80:75:dd:1c:dc:9b:93:8b: ac:44:33:ca:f2:b8:f9:7b:b7:1a:16:db:31:08:91:6b:bd:5f: a4:2a:bb:01:e5:b2:b9:a1:34:14:9d:43:2d:b3:c1:2c:68:49: 5b:30:56:67:49:23:cf:03:82:d9:4a:a3:d0:ce:a0:1a:68:bb: b8:aa:fb:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEQUMxMTAvBgNVBAUTKEM5Mjc3RjAyOUMxNUIzMzc5NTM2NjZGNzRCOUM3RTZD QjM5MDdGNDQwHhcNMjUwNDA4MTczMDIyWhcNMjUwNDE1MTczMDIyWjAYMRYwFAYD VQQDEw02N2Y1NWQyZS1iMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwzpuiX8zcucKugY56j6d4j2qNvOnOLriI1dFPefy/5iytUMZdbzElFczTAz Rau8/VapmdJ5VDYbnZtJ+onabyNk6JbD8EW44pqkYU+tjRBMBbVmnH/O/hvEUn/i PE8AZ8TUYKgXJH6Cv0sOOh28Hk1WINaMdXgm1yhWuWHCjiEclaZuRfpgPgiwcmuY RIce33rZ88oQmNuKBJHRwODBPt1st3qaXwSZknR+LPY2ECwH21n6c9eG2Y2Jjo3I Ou5pcBq7cAebl1ZtvW6phOlHvdUzyHFCxw+vEOBgVfQFH/gxqY2FuXe1G6eCxvwI BkzniDm5u6GxuzBgS3Kq0tmVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC5ZtKu AexdebQLfv4D4eqBxx8iMB8GA1UdIwQYMBaAFMknfwKcFbM3lTZm90ucfmyzkH9E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMERBQy8wQ0UxOTY0RTRG Q0ExMUU5QjM4QkEyMkJDNEY5QUUwMi95U2RfQXB3VnN6ZVZObWIzUzV4LWJMT1Fm MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTZF9BcHdWc3plVk5tYjNTNXgtYkxPUWYwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MERBQy8wQ0UxOTY0RTRGQ0ExMUU5QjM4QkEyMkJDNEY5QUUwMi95U2RfQXB3VnN6 ZVZObWIzUzV4LWJMT1FmMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYSCEw1lI68e4uHqk+V1DFgIQrOQkPlAl85HYyouK5rXU1Dv7sy2Fa cXRMjzrjPlc1N4YaaVbucRqkoP+VtC/cItAe9CRbaY4ENnO1mSOuNEiuYq5qJfDO pgzwuIrwWpmjeD0NT1NArhMm7fjlTDJzVs0OIzhGFv7vjsPJxQQTVztUrxDmijIc 7nf6FPbWboQ3SPmXcBiihn/oL+ha6pPSkQGMP82F3c1yJtjKwaQv0oav+Ry9g/BD S8RLYPILgHXdHNybk4usRDPK8rj5e7caFtsxCJFrvV+kKrsB5bK5oTQUnUMts8Es aElbMFZnSSPPA4LZSqPQzqAaaLu4qvsi -----END CERTIFICATE-----Generated at Wed Apr 9 22:34:29 2025 by rpki-client