$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft File: YtERnxiOP3wTVfZTngZDbaJo_50.mft (raw, json) Hash identifier: uQ3SxIgNL9x4gQgnmTRIM8rxoNcWJyeFpv0423vSMOY= Subject key identifier: 1D:68:3D:11:EB:6A:17:F3:0C:54:D6:FA:32:0C:AE:47:4F:DD:98:C3 Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft Manifest number: 0388 Signing time: Thu 03 Apr 2025 00:57:26 +0000 Manifest this update: Thu 03 Apr 2025 00:57:25 +0000 Manifest next update: Thu 10 Apr 2025 00:57:25 +0000 Files and hashes: 1: YtERnxiOP3wTVfZTngZDbaJo_50.crl (hash: q8sylSeiornOEYZEmqwTvSe3cZItqS5JZK0Mhr5ayzw=) 2: 09BF3678E79211EEAB391A25C4F9AE02.roa (hash: G4n21VRpqKoP+0eqit+Yo0v81ZJD3oHJqQ/Ky/zl68o=) 3: 280B8550FD3611EEB7932778C4F9AE02.roa (hash: k6THokNNgkgErJRrYrousZIlobYn3ymk37svdAyXZD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5266 Validity Not Before: Apr 3 00:57:25 2025 GMT Not After : Apr 10 00:57:25 2025 GMT Subject: CN=67eddcf6-2c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:9e:5d:d7:29:00:48:cf:92:97:c2:fe:fa: 5d:a8:0c:53:3e:00:c9:52:7e:cd:e4:dc:33:bf:e4: 6c:38:4a:b1:51:61:ca:e6:03:fa:e7:4e:5d:02:5d: b9:50:34:d1:9d:b3:1b:28:97:10:9d:33:34:09:a0: c9:22:23:1c:d9:95:a4:96:17:1d:f3:65:43:e1:fe: d7:b5:c8:d1:82:25:a4:9d:f2:f9:42:15:51:9c:e4: f3:d2:27:7e:18:f9:1b:3e:ca:64:bb:1e:e3:c1:ef: 7e:cb:2d:56:4a:b4:6e:04:5c:d5:5e:02:1d:31:5f: 98:0b:db:f8:12:1e:17:c4:a8:1f:12:c5:ce:ba:21: 8f:fd:43:2f:f8:66:c9:08:6d:de:75:b3:b7:49:5d: cd:f7:d0:56:21:b5:01:c7:2c:fe:9f:2d:fb:91:8e: fd:0f:1a:46:b2:94:c9:fd:ac:1d:a0:32:65:f0:83: af:eb:66:90:ba:c7:d7:4d:07:cd:76:01:1f:b6:25: a9:00:b0:aa:d0:2a:eb:f2:10:38:59:1b:d7:80:27: 9b:24:bf:09:e1:34:71:ca:29:48:23:fc:7a:d3:25: 07:b3:6b:63:6c:0f:0e:40:47:27:40:75:67:ad:ed: 9a:39:05:51:99:4a:a1:2a:bb:1d:71:e6:0f:f4:31: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:68:3D:11:EB:6A:17:F3:0C:54:D6:FA:32:0C:AE:47:4F:DD:98:C3 X509v3 Authority Key Identifier: keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:43:8e:03:54:a9:53:e3:bc:d9:01:51:48:0f:e5:26:be: 2a:18:83:ba:c9:af:22:38:03:f3:16:83:f1:e6:e0:a8:fd:7b: 8d:18:62:3e:cb:5e:2e:74:9b:4b:91:2b:bf:68:3e:ba:ff:6c: b7:47:87:0a:a3:77:f1:e6:27:cc:ac:1a:24:69:ee:b5:05:0b: f7:84:09:2b:88:73:57:ff:22:f0:04:e8:77:91:4a:66:37:4a: a4:49:be:0b:4d:4f:f6:cb:9e:6d:79:60:53:57:38:07:fd:7b: ec:8e:78:56:68:0d:db:75:b5:33:4e:4c:d1:65:f2:de:25:e3: 86:95:58:0f:24:54:f8:e3:e9:21:86:20:06:e3:8e:9e:05:4a: 0b:94:80:f0:87:87:df:1e:29:94:7e:24:78:eb:57:49:eb:79: 73:e4:7d:3d:69:04:5c:08:94:d6:55:24:37:4d:f5:3b:9c:62: a3:b1:b8:05:72:cf:1f:75:d6:80:78:c6:24:59:98:a9:cb:58: 42:3e:ef:56:ee:25:05:e4:64:1b:13:2a:2b:de:02:0a:77:db: a1:62:36:9b:33:c2:90:d3:f2:b8:06:ef:a7:b0:20:2f:fd:b1: 79:34:fb:a1:dc:13:ba:66:d3:53:0a:07:13:4e:45:7c:80:e6: 99:4c:22:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNjYxMTAvBgNVBAUTKDYyRDExMTlGMTg4RTNGN0MxMzU1RjY1MzlFMDY0MzZE QTI2OEZGOUQwHhcNMjUwNDAzMDA1NzI1WhcNMjUwNDEwMDA1NzI1WjAYMRYwFAYD VQQDEw02N2VkZGNmNi0yYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hCeXdcpAEjPkpfC/vpdqAxTPgDJUn7N5Nwzv+RsOEqxUWHK5gP6505dAl25 UDTRnbMbKJcQnTM0CaDJIiMc2ZWklhcd82VD4f7XtcjRgiWknfL5QhVRnOTz0id+ GPkbPspkux7jwe9+yy1WSrRuBFzVXgIdMV+YC9v4Eh4XxKgfEsXOuiGP/UMv+GbJ CG3edbO3SV3N99BWIbUBxyz+ny37kY79DxpGspTJ/awdoDJl8IOv62aQusfXTQfN dgEftiWpALCq0Crr8hA4WRvXgCebJL8J4TRxyilII/x60yUHs2tjbA8OQEcnQHVn re2aOQVRmUqhKrsdceYP9DFQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1oPRHr ahfzDFTW+jIMrkdP3ZjDMB8GA1UdIwQYMBaAFGLREZ8Yjj98E1X2U54GQ22iaP+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI2Ni8yN0JDNTBDNEEx M0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Azd1RWZlpUbmdaRGJhSm9f NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0RVJueGlPUDN3VFZmWlRuZ1pEYmFKb181MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI2Ni8yN0JDNTBDNEExM0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Az d1RWZlpUbmdaRGJhSm9fNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdkOOA1SpU+O82QFRSA/lJr4qGIO6ya8iOAPzFoPx5uCo/XuNGGI+ y14udJtLkSu/aD66/2y3R4cKo3fx5ifMrBokae61BQv3hAkriHNX/yLwBOh3kUpm N0qkSb4LTU/2y55teWBTVzgH/XvsjnhWaA3bdbUzTkzRZfLeJeOGlVgPJFT44+kh hiAG446eBUoLlIDwh4ffHimUfiR461dJ63lz5H09aQRcCJTWVSQ3TfU7nGKjsbgF cs8fddaAeMYkWZipy1hCPu9W7iUF5GQbEyor3gIKd9uhYjabM8KQ0/K4Bu+nsCAv /bF5NPuh3BO6ZtNTCgcTTkV8gOaZTCLM -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:01 2025 by rpki-client