$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: OLfyomGdACzVfbdMYcPK+ohpawyxxbx+V3j+ZBq/5n0= Subject key identifier: 6F:73:B1:AE:B6:27:52:08:97:90:DA:03:ED:B1:CD:71:6E:49:80:11 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 137A Signing time: Fri 04 Apr 2025 19:17:02 +0000 Manifest this update: Fri 04 Apr 2025 19:17:01 +0000 Manifest next update: Fri 11 Apr 2025 19:17:01 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: 2U2z9czOyoitwCcWjvdP8YnAqsd39g2ldz0OYKOmqis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315 Validity Not Before: Apr 4 19:17:01 2025 GMT Not After : Apr 11 19:17:01 2025 GMT Subject: CN=67f0302d-6911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:63:d9:98:9e:a5:5c:33:ce:fc:24:6b:3d: 55:eb:98:92:71:ff:ae:70:00:15:95:e4:e3:f7:f7: 06:21:a2:d2:02:aa:38:ba:11:4b:75:26:98:62:03: 88:ab:c9:ed:b6:94:81:1b:72:de:da:0d:78:dd:99: 54:d4:ec:cf:bd:11:dd:6f:5a:a2:60:36:5a:31:b7: 8f:3a:08:03:52:45:6d:2c:b8:04:b7:2b:b6:e5:29: 50:7b:84:4e:19:f4:9c:1f:a5:24:03:90:3f:3d:09: e9:10:4f:b0:b9:46:c1:25:06:27:86:d9:6f:52:6b: 52:35:ea:bc:a4:e2:a5:36:65:3c:e6:44:0e:1e:58: f7:30:74:9b:3f:66:c1:8e:8f:55:8a:2c:3a:18:cd: 8f:d0:57:8d:de:bd:7a:6c:d1:28:7d:35:57:2f:f4: 72:cf:a4:6d:79:70:f5:e0:78:b3:50:25:6b:10:05: ef:2b:9b:da:07:62:fb:81:e9:ce:ac:84:43:89:c4: 61:a9:31:e7:a0:ee:7c:45:4d:28:ca:d9:6a:f5:e7: bd:68:87:5b:ea:bd:cf:c1:25:59:2f:99:33:60:07: d9:77:16:74:63:3f:0f:78:1e:2a:74:22:2c:a1:8a: 48:83:8d:47:c6:a1:a8:37:fd:cd:8d:04:0d:f2:52: 06:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:B1:AE:B6:27:52:08:97:90:DA:03:ED:B1:CD:71:6E:49:80:11 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:7a:04:8c:72:10:7a:5d:09:c1:d2:bd:07:fa:bf:cd:df: 4f:2d:c5:ea:e0:67:a6:96:b6:4a:3b:18:f0:3a:e8:cb:a8:38: 25:23:85:24:de:bc:63:38:b7:c2:8b:63:c5:96:4d:75:e1:32: 14:75:5c:79:03:0f:8a:9b:90:b7:a5:2f:20:21:20:76:55:ac: 24:ad:5e:f4:0d:d8:e5:8e:cd:a8:79:ae:5b:a5:6b:93:32:ac: dd:73:0f:d4:f0:a4:4f:98:eb:9f:a9:be:c3:e2:a0:0c:8e:c0: 49:84:52:56:63:50:ca:a0:a2:31:8e:03:3c:0f:b4:0a:36:e9: ea:a6:d3:f4:ac:8f:61:9a:c1:e0:66:86:ab:9a:7f:58:ca:aa: 71:0f:b1:f1:91:2c:08:fe:75:dc:16:09:a5:21:e0:a7:9d:f0: 70:cb:b0:5d:32:d3:de:6b:3f:9d:78:6a:db:ee:4e:a1:21:e7: c6:a5:86:d1:f0:cc:b0:e8:d7:96:bf:07:77:ff:79:2c:52:70: 8d:48:67:a0:95:76:3b:a1:0c:fc:02:e3:28:07:de:eb:e4:c5: 78:28:98:e0:ee:75:cb:7c:80:66:d6:e6:db:a6:8d:ce:7d:85: b3:34:38:1a:0f:ca:53:f5:84:8e:a8:c8:af:9c:a1:ec:d2:07: be:21:f1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwNDA0MTkxNzAxWhcNMjUwNDExMTkxNzAxWjAYMRYwFAYD VQQDEw02N2YwMzAyZC02OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1tj2ZiepVwzzvwkaz1V65iScf+ucAAVleTj9/cGIaLSAqo4uhFLdSaYYgOI q8nttpSBG3Le2g143ZlU1OzPvRHdb1qiYDZaMbePOggDUkVtLLgEtyu25SlQe4RO GfScH6UkA5A/PQnpEE+wuUbBJQYnhtlvUmtSNeq8pOKlNmU85kQOHlj3MHSbP2bB jo9Viiw6GM2P0FeN3r16bNEofTVXL/Ryz6RteXD14HizUCVrEAXvK5vaB2L7genO rIRDicRhqTHnoO58RU0oytlq9ee9aIdb6r3PwSVZL5kzYAfZdxZ0Yz8PeB4qdCIs oYpIg41HxqGoN/3NjQQN8lIG0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9zsa62 J1IIl5DaA+2xzXFuSYARMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVHoEjHIQel0JwdK9B/q/zd9PLcXq4GemlrZKOxjwOujLqDglI4Uk 3rxjOLfCi2PFlk114TIUdVx5Aw+Km5C3pS8gISB2VawkrV70Ddjljs2oea5bpWuT Mqzdcw/U8KRPmOufqb7D4qAMjsBJhFJWY1DKoKIxjgM8D7QKNunqptP0rI9hmsHg Zoarmn9YyqpxD7HxkSwI/nXcFgmlIeCnnfBwy7BdMtPeaz+deGrb7k6hIefGpYbR 8Myw6NeWvwd3/3ksUnCNSGeglXY7oQz8AuMoB97r5MV4KJjg7nXLfIBm1ubbpo3O fYWzNDgaD8pT9YSOqMivnKHs0ge+IfHK -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client