$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: +rUBr1EV1YrF9wb3kXtD/iu5MxRJCl3VBY2i/fZRsRg= Subject key identifier: 28:41:EE:4F:C3:2F:15:AB:0C:16:39:B4:24:FE:9F:E5:B8:26:54:9F Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 064C Signing time: Fri 04 Apr 2025 22:38:00 +0000 Manifest this update: Fri 04 Apr 2025 22:37:59 +0000 Manifest next update: Fri 11 Apr 2025 22:37:59 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: rFEsuIk0DIY6P4Io+vIZP7nSUHYNfXo5mgCATNyck7Y=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: macE2NFUWcDcrdQSGzCQPdT+j1HMD3PGg+S93KaJKT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1 Validity Not Before: Apr 4 22:37:59 2025 GMT Not After : Apr 11 22:37:59 2025 GMT Subject: CN=67f05f48-9057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:ec:8e:65:49:4f:b9:77:4c:d3:a6:3b:78: 01:bc:0a:df:0e:6b:2c:e5:df:1e:2f:2b:2a:1a:6b: 08:96:73:ca:20:e2:bb:54:70:94:be:82:28:cc:c2: b5:de:58:81:6f:ef:1e:52:4c:e0:8a:09:0f:48:f7: 5a:53:f9:ca:49:78:f3:fc:17:1a:bd:87:f3:36:6e: ed:c3:7d:d8:5b:e6:78:45:ee:49:a0:10:8c:22:77: c4:0d:71:35:9a:3b:eb:75:45:6c:ea:1d:cb:2d:c6: 69:c8:fd:b8:2f:d8:69:4b:5d:ec:b9:7b:f4:d7:27: 99:90:24:d6:7d:8a:8b:22:c0:3c:2a:e7:d6:6c:b0: 9c:fa:e3:df:1a:34:cb:a0:92:9b:91:0c:74:c4:c1: 29:c0:df:ff:f3:53:be:6c:ae:9f:c6:23:9a:fd:87: a5:c4:48:22:10:54:77:9f:f8:e2:dd:7b:36:f6:3c: af:2c:c0:c3:3a:64:f7:0c:29:c9:b3:83:03:c1:34: ff:6d:2f:59:b4:02:95:d9:d4:20:fa:60:dd:4a:68: 65:36:74:ec:46:bb:84:e0:f5:d0:38:4f:5d:00:1e: 5a:3e:af:af:b8:11:05:f8:23:f0:d7:6a:d6:4a:38: a7:d9:5b:45:bd:0c:e1:1a:fc:12:b3:2c:aa:fc:18: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:EE:4F:C3:2F:15:AB:0C:16:39:B4:24:FE:9F:E5:B8:26:54:9F X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:e0:cf:b8:95:6b:ca:c6:c7:a4:9e:e6:a8:14:0a:8e:fc: 23:8f:1c:6b:0c:92:c1:e4:fc:53:53:91:99:42:49:68:98:0e: c0:5c:f0:54:d9:9c:b6:e1:f5:61:5f:1a:1b:f7:28:23:a6:ea: 2e:f4:c0:31:93:54:97:d7:3b:37:3f:bf:9a:88:e7:ca:eb:d3: 69:e4:1b:01:14:b9:76:43:1f:54:d4:5e:1a:d4:d7:f0:0c:42: fa:65:40:60:d0:e6:ea:7f:74:ff:cb:e8:3b:96:67:a1:5b:57: 14:e4:06:3b:9b:52:ef:d7:3c:6b:92:9c:09:c0:c7:1e:85:0c: 32:6c:a0:68:46:a6:76:18:21:96:f3:f3:3c:3e:09:40:0c:ae: fe:71:5d:df:8b:ff:06:eb:34:eb:32:67:b9:98:fc:54:70:f9: a1:bb:b3:6f:02:62:4c:b9:fd:d8:6c:83:f4:9e:59:46:83:40: 3d:d5:d8:35:a5:a2:2e:78:5e:93:1c:5e:89:c1:65:1d:55:a9: 0d:0d:3d:f8:ad:25:39:a2:f1:8b:0c:ec:ba:31:9a:1f:7f:ef: db:78:b3:2c:6f:b3:26:a2:35:f3:67:ee:12:d8:7a:98:15:ae: d6:e6:dd:5b:19:70:64:fa:30:96:40:86:a4:fe:ec:5c:81:85: df:2a:5f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwNDA0MjIzNzU5WhcNMjUwNDExMjIzNzU5WjAYMRYwFAYD VQQDEw02N2YwNWY0OC05MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxljsjmVJT7l3TNOmO3gBvArfDmss5d8eLysqGmsIlnPKIOK7VHCUvoIozMK1 3liBb+8eUkzgigkPSPdaU/nKSXjz/BcavYfzNm7tw33YW+Z4Re5JoBCMInfEDXE1 mjvrdUVs6h3LLcZpyP24L9hpS13suXv01yeZkCTWfYqLIsA8KufWbLCc+uPfGjTL oJKbkQx0xMEpwN//81O+bK6fxiOa/YelxEgiEFR3n/ji3Xs29jyvLMDDOmT3DCnJ s4MDwTT/bS9ZtAKV2dQg+mDdSmhlNnTsRruE4PXQOE9dAB5aPq+vuBEF+CPw12rW Sjin2VtFvQzhGvwSsyyq/BhwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChB7k/D LxWrDBY5tCT+n+W4JlSfMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkE+DPuJVrysbHpJ7mqBQKjvwjjxxrDJLB5PxTU5GZQklomA7AXPBU 2Zy24fVhXxob9ygjpuou9MAxk1SX1zs3P7+aiOfK69Np5BsBFLl2Qx9U1F4a1Nfw DEL6ZUBg0Obqf3T/y+g7lmehW1cU5AY7m1Lv1zxrkpwJwMcehQwybKBoRqZ2GCGW 8/M8PglADK7+cV3fi/8G6zTrMme5mPxUcPmhu7NvAmJMuf3YbIP0nllGg0A91dg1 paIueF6THF6JwWUdVakNDT34rSU5ovGLDOy6MZoff+/beLMsb7MmojXzZ+4S2HqY Fa7W5t1bGXBk+jCWQIak/uxcgYXfKl+H -----END CERTIFICATE-----Generated at Sat Apr 5 22:59:21 2025 by rpki-client