$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: UPA6Y4rfbejsSxdhXf5yz8SmnEHjahK7C9J9MWu/P68= Subject key identifier: 09:D1:15:27:FF:3A:AD:F8:1E:C2:5F:57:41:9A:2D:82:D6:0D:F2:59 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 346C Signing time: Fri 04 Apr 2025 15:06:00 +0000 Manifest this update: Fri 04 Apr 2025 15:06:00 +0000 Manifest next update: Fri 11 Apr 2025 15:06:00 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: WmIsSMK7oIQ9skmzbq6ilTmxN34HfsfFIfYNwzZhE3M=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C Validity Not Before: Apr 4 15:06:00 2025 GMT Not After : Apr 11 15:06:00 2025 GMT Subject: CN=67eff558-e1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:7c:11:53:c7:e2:bb:69:78:be:9b:ba:5a: 69:4b:ca:73:9c:96:3e:79:55:63:97:72:d4:3a:2c: 29:fb:3a:12:1c:ef:43:58:b3:ce:cf:08:8a:62:78: 55:66:fc:cc:74:a2:44:42:9b:28:c5:a6:25:9d:6d: 93:70:7f:b5:0a:63:59:bf:af:46:47:73:87:fb:4e: 3f:cd:1a:04:1e:42:6a:60:ee:c6:d1:37:76:f1:fc: 07:05:c0:3f:82:85:85:1c:7a:82:3f:03:5d:8a:56: 83:fe:97:90:b9:65:2a:eb:57:14:90:92:cc:31:8c: 96:be:d8:16:01:d7:2c:49:12:79:5b:fa:e7:76:cc: f6:c0:f2:90:f2:09:86:1f:1a:b1:95:29:2e:50:f1: c3:5b:34:b1:46:00:0b:6c:c4:02:55:2c:cd:cc:2b: 50:97:a8:4c:55:03:8b:f9:1c:ac:32:70:f7:4a:0b: f5:eb:dc:13:b7:bc:ba:af:8f:39:a7:6d:3e:fd:a9: 63:1b:9f:43:8b:3e:24:03:60:c7:07:ce:2d:52:47: c8:f6:9c:0f:4a:76:47:f3:43:d6:8e:a2:a8:39:86: 58:12:0e:3d:d2:ed:e0:34:56:ed:1e:21:72:a4:a4: a0:3a:7f:ca:f2:e1:76:87:50:07:18:57:8e:1a:a7: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:15:27:FF:3A:AD:F8:1E:C2:5F:57:41:9A:2D:82:D6:0D:F2:59 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5c:a1:32:17:bc:10:1f:02:ae:ae:7c:c5:2b:a6:ad:15:60: a9:b6:11:1b:23:db:ad:a7:0c:19:a2:96:14:e1:09:90:fd:f5: 01:db:e0:d0:92:66:b0:46:61:d8:c7:a1:99:14:04:34:f2:a0: c2:3a:2e:5e:90:91:69:ee:4b:92:f8:8b:81:04:a6:39:84:e6: 98:1a:8f:e2:c5:14:3c:ca:e2:d9:46:ac:78:bf:28:c9:bc:ee: bf:49:92:e1:dd:5a:e1:6a:91:f1:78:55:ec:87:b9:56:0c:77: 5b:f9:96:9a:b6:17:8b:bc:51:0c:6f:61:97:f4:8d:87:bf:54: d1:81:5e:43:7c:8f:9c:ac:1a:3b:2e:d5:50:d1:0e:50:7a:8d: f3:a4:2e:a6:de:bb:ca:2a:55:20:b3:e0:33:85:f1:a6:2e:6f: 88:65:27:fd:25:0e:15:02:3c:62:6e:6b:f1:97:de:00:5c:56: 56:89:f2:8b:0c:72:63:f2:3f:c0:cd:1a:a1:ee:7c:f5:d1:44: 20:65:d7:a5:32:4d:a8:2f:7a:35:94:ef:bc:f5:a5:9c:a3:f7: df:4e:f8:78:de:7e:bb:af:68:d2:a8:18:01:1e:a3:35:c1:03: 72:60:cb:cc:35:ae:56:62:79:a6:02:1a:39:7f:26:a0:ee:a3: 57:b6:8d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUwNDA0MTUwNjAwWhcNMjUwNDExMTUwNjAwWjAYMRYwFAYD VQQDEw02N2VmZjU1OC1lMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV58EVPH4rtpeL6bulppS8pznJY+eVVjl3LUOiwp+zoSHO9DWLPOzwiKYnhV ZvzMdKJEQpsoxaYlnW2TcH+1CmNZv69GR3OH+04/zRoEHkJqYO7G0Td28fwHBcA/ goWFHHqCPwNdilaD/peQuWUq61cUkJLMMYyWvtgWAdcsSRJ5W/rndsz2wPKQ8gmG HxqxlSkuUPHDWzSxRgALbMQCVSzNzCtQl6hMVQOL+RysMnD3Sgv169wTt7y6r485 p20+/aljG59Diz4kA2DHB84tUkfI9pwPSnZH80PWjqKoOYZYEg490u3gNFbtHiFy pKSgOn/K8uF2h1AHGFeOGqeqwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnRFSf/ Oq34HsJfV0GaLYLWDfJZMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPXKEyF7wQHwKurnzFK6atFWCpthEbI9utpwwZopYU4QmQ/fUB2+DQ kmawRmHYx6GZFAQ08qDCOi5ekJFp7kuS+IuBBKY5hOaYGo/ixRQ8yuLZRqx4vyjJ vO6/SZLh3VrhapHxeFXsh7lWDHdb+ZaatheLvFEMb2GX9I2Hv1TRgV5DfI+crBo7 LtVQ0Q5Qeo3zpC6m3rvKKlUgs+AzhfGmLm+IZSf9JQ4VAjxibmvxl94AXFZWifKL DHJj8j/AzRqh7nz10UQgZdelMk2oL3o1lO+89aWco/ffTvh43n67r2jSqBgBHqM1 wQNyYMvMNa5WYnmmAho5fyag7qNXto3q -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:13 2025 by rpki-client