$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: WD7GiWLG6dzAoyNnMG93AyBXZMMQEL3UhyKwOSnOgkQ= Subject key identifier: 52:A6:BD:7B:F7:EF:A0:FC:9C:6C:FC:67:BB:EE:64:BB:E0:12:76:C8 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 012C Signing time: Sat 29 Mar 2025 04:02:14 +0000 Manifest this update: Sat 29 Mar 2025 04:02:13 +0000 Manifest next update: Sat 05 Apr 2025 04:02:13 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: ViEWuMCZYaVHbdgHvAl1pODCcY8j7Pz0ezyuqDAWggQ=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49 Validity Not Before: Mar 29 04:02:13 2025 GMT Not After : Apr 5 04:02:13 2025 GMT Subject: CN=67e770c6-d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:9e:ee:46:42:aa:19:0a:bc:bd:46:e8:70: 9c:30:34:85:59:de:a4:9f:b9:4c:99:9b:a1:a3:86: 77:e3:cc:ac:dc:12:d7:ab:fd:1b:59:81:0c:37:af: 64:6a:f9:d5:1c:af:b0:df:94:15:41:ff:3d:2f:d1: 5d:2c:66:1d:19:85:7d:5c:d1:af:a3:22:1f:4c:0f: 54:d0:5d:cb:7a:aa:37:0f:66:c7:d0:10:96:bd:6d: 1b:4a:0b:97:68:fb:fb:1e:7c:eb:90:5e:4a:7a:3f: fb:c6:da:8e:01:1b:89:3e:d5:78:f9:f0:36:f3:ef: 54:61:83:24:61:09:99:2b:44:64:63:88:d5:8f:61: de:22:c9:11:88:be:43:84:41:1a:07:b0:43:fc:e3: d3:43:d9:e4:38:17:7c:c6:a3:92:35:28:e4:39:24: f9:8a:83:a5:54:d1:8f:0f:6f:d1:96:6b:1f:96:10: 20:40:4e:9d:3a:ae:69:35:df:f7:ab:9f:11:4b:e1: 0a:6f:0f:c1:26:9c:b0:13:f8:33:1a:2b:8c:94:b3: a8:ff:73:a8:94:0f:b4:74:39:ce:a9:06:a3:a9:4a: 87:b2:b3:91:f1:ef:27:54:41:6f:a5:bc:d6:a2:30: c3:13:d7:a6:a6:af:bb:ec:cb:a6:1b:3d:0c:dd:35: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A6:BD:7B:F7:EF:A0:FC:9C:6C:FC:67:BB:EE:64:BB:E0:12:76:C8 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7c:52:9b:08:7d:a0:01:3b:bc:3e:e8:1d:0c:6f:14:25:80: aa:3a:a5:fb:2d:b6:1a:f9:06:fa:bc:8a:4e:82:14:55:5f:47: 8e:e4:49:ec:9f:b4:a3:f6:90:06:be:bc:fd:5a:e0:71:3b:2f: 97:d6:3c:c2:25:6e:ef:45:d4:19:c5:28:a8:cd:e5:8f:af:18: 29:4a:ea:33:60:80:b8:21:1f:7d:4c:5b:33:56:01:e8:ef:af: 4a:8d:15:b4:4e:21:be:b8:9f:b8:19:52:aa:ee:9a:b2:94:ee: ab:2d:1e:eb:c1:cd:2d:2b:1f:5d:19:1d:b4:f7:90:c0:bf:71: 1c:c3:68:27:0a:f2:dd:1a:d4:1d:f6:88:66:69:ce:79:f9:68: f7:57:28:c4:45:05:7c:13:c9:1c:9c:f5:a4:93:9c:a2:a5:7c: 89:60:2c:3c:a3:2c:ee:02:95:2e:09:d5:81:09:2e:e4:c5:24: 26:9d:e2:3a:e7:71:37:8d:f8:8b:98:5e:03:0d:aa:b5:fc:d8: 5a:ce:eb:00:e3:01:81:a8:da:72:aa:91:c9:b3:3d:03:5d:15: 02:d4:01:9a:3b:92:ed:13:5c:c1:8a:2b:6e:32:96:b6:5e:d4: ed:58:43:98:15:e7:e4:ce:e4:75:9b:fc:e8:f3:8f:53:9d:20: d6:c0:a7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwMzI5MDQwMjEzWhcNMjUwNDA1MDQwMjEzWjAYMRYwFAYD VQQDEw02N2U3NzBjNi1kNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Wme7kZCqhkKvL1G6HCcMDSFWd6kn7lMmZuho4Z348ys3BLXq/0bWYEMN69k avnVHK+w35QVQf89L9FdLGYdGYV9XNGvoyIfTA9U0F3Leqo3D2bH0BCWvW0bSguX aPv7HnzrkF5Kej/7xtqOARuJPtV4+fA28+9UYYMkYQmZK0RkY4jVj2HeIskRiL5D hEEaB7BD/OPTQ9nkOBd8xqOSNSjkOST5ioOlVNGPD2/RlmsflhAgQE6dOq5pNd/3 q58RS+EKbw/BJpywE/gzGiuMlLOo/3OolA+0dDnOqQajqUqHsrOR8e8nVEFvpbzW ojDDE9empq+77MumGz0M3TW1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKmvXv3 76D8nGz8Z7vuZLvgEnbIMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdfFKbCH2gATu8PugdDG8UJYCqOqX7LbYa+Qb6vIpOghRVX0eO5Ens n7Sj9pAGvrz9WuBxOy+X1jzCJW7vRdQZxSiozeWPrxgpSuozYIC4IR99TFszVgHo 769KjRW0TiG+uJ+4GVKq7pqylO6rLR7rwc0tKx9dGR2095DAv3Ecw2gnCvLdGtQd 9ohmac55+Wj3VyjERQV8E8kcnPWkk5yipXyJYCw8oyzuApUuCdWBCS7kxSQmneI6 53E3jfiLmF4DDaq1/NhazusA4wGBqNpyqpHJsz0DXRUC1AGaO5LtE1zBiituMpa2 XtTtWEOYFefkzuR1m/zo849TnSDWwKeC -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:57 2025 by rpki-client