$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: YYTJppeAzbSTqoV+EKSepLLAuZX7/yZYufA+fBPH1eE= Subject key identifier: 76:63:6E:CF:DF:8B:39:12:A3:34:68:D5:1F:2F:7A:29:89:3E:C6:C0 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0F82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0F7C Signing time: Wed 02 Apr 2025 17:38:17 +0000 Manifest this update: Wed 02 Apr 2025 17:38:17 +0000 Manifest next update: Wed 09 Apr 2025 17:38:17 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: d0bfhaYgw6tsSL6NzKl/vtg/ee+OXnKVIx/0HpU1AyU=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: X/citOv1Ggn8GInkQClxSFdoCzSDhLVJCA7AtRBk39U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3970 (0xf82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B Validity Not Before: Apr 2 17:38:17 2025 GMT Not After : Apr 9 17:38:17 2025 GMT Subject: CN=67ed7609-06ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:0a:77:86:67:8b:02:f8:2f:d0:ef:6e:ce: ae:98:6d:c2:85:d8:f8:44:96:2d:32:44:78:c2:da: f5:a0:3b:16:86:20:d8:fa:36:b7:8a:bf:6f:69:a8: 30:cd:6e:3c:d7:b6:d4:36:a2:64:40:ad:89:51:37: a4:96:d1:82:f8:26:6c:fc:9d:5c:ea:df:6d:fa:be: 71:c8:d3:23:86:08:65:d3:dd:61:d9:0e:47:e7:90: 33:4d:25:f8:e6:a4:90:99:15:66:54:52:68:98:23: 7d:f1:8c:06:84:91:b4:0a:06:6e:76:d0:28:5f:c9: 83:f5:aa:ab:03:df:77:cb:90:14:f0:03:4f:5c:7b: d1:11:86:f7:cf:e8:be:03:d0:48:4a:51:75:0d:5e: da:b3:cd:93:1f:c3:0b:92:76:04:b3:f3:c4:69:2c: 43:6c:74:5a:4a:47:68:72:44:71:ec:39:1c:ef:e3: 0f:34:68:09:0c:9a:b1:b2:1e:d4:26:aa:07:e6:f8: 86:2a:c5:9e:7f:37:ae:9c:c2:49:14:b3:3a:a7:7b: 82:f9:29:36:c5:79:75:d1:6c:8a:90:ee:51:5e:e2: 90:e1:89:9b:30:0d:5f:3a:5f:5a:01:61:15:00:57: 42:c8:26:eb:ec:3a:ae:4b:35:07:7c:93:06:52:5c: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:6E:CF:DF:8B:39:12:A3:34:68:D5:1F:2F:7A:29:89:3E:C6:C0 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:63:c2:02:9e:b4:83:8f:c1:ee:9a:45:99:7e:b2:8e:a9: b1:41:30:f3:ab:23:de:53:20:ba:7e:24:50:e7:b2:ab:cd:e6: 6d:ae:fc:33:5c:63:cb:c7:6e:b8:10:a5:00:c2:93:c9:d4:f4: e4:77:b6:5d:ee:4c:0f:28:56:59:ae:1e:1e:5d:b9:be:9a:e5: 36:10:a3:62:d7:10:a0:00:03:b0:af:d0:61:41:e6:2a:32:07: 87:56:24:d8:13:78:d0:19:c4:00:4a:ff:37:56:e1:35:39:5b: 00:64:12:ea:8d:16:4c:a5:bd:42:93:a1:95:08:2c:5e:95:9e: 41:35:2f:fb:81:9e:f6:03:e7:e8:c0:83:ec:17:1f:77:bb:1f: d0:96:5c:1f:41:41:47:aa:4e:63:85:88:7d:34:37:90:3c:14: 69:b0:9b:58:ec:87:04:b2:1c:0a:c5:2f:ff:35:fb:20:47:e6: 69:61:6c:39:9e:8a:ec:4e:c3:bf:20:35:6b:eb:59:b2:f8:a6: cb:31:96:86:14:68:ff:b3:0a:0e:2b:f6:a5:4d:91:27:9e:42: 1f:5c:32:c8:60:ae:b5:b8:a6:2c:92:a4:37:70:e0:69:9d:c6: da:a4:96:be:bd:d6:67:19:4f:a7:3e:9f:f9:17:ae:45:85:63: 45:f6:87:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNDAyMTczODE3WhcNMjUwNDA5MTczODE3WjAYMRYwFAYD VQQDEw02N2VkNzYwOS0wNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx58Kd4ZniwL4L9Dvbs6umG3Chdj4RJYtMkR4wtr1oDsWhiDY+ja3ir9vaagw zW4817bUNqJkQK2JUTekltGC+CZs/J1c6t9t+r5xyNMjhghl091h2Q5H55AzTSX4 5qSQmRVmVFJomCN98YwGhJG0CgZudtAoX8mD9aqrA993y5AU8ANPXHvREYb3z+i+ A9BISlF1DV7as82TH8MLknYEs/PEaSxDbHRaSkdockRx7Dkc7+MPNGgJDJqxsh7U JqoH5viGKsWefzeunMJJFLM6p3uC+Sk2xXl10WyKkO5RXuKQ4YmbMA1fOl9aAWEV AFdCyCbr7DquSzUHfJMGUlw29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZjbs/f izkSozRo1R8veimJPsbAMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKr2PCAp60g4/B7ppFmX6yjqmxQTDzqyPeUyC6fiRQ57KrzeZtrvwz XGPLx264EKUAwpPJ1PTkd7Zd7kwPKFZZrh4eXbm+muU2EKNi1xCgAAOwr9BhQeYq MgeHViTYE3jQGcQASv83VuE1OVsAZBLqjRZMpb1Ck6GVCCxelZ5BNS/7gZ72A+fo wIPsFx93ux/QllwfQUFHqk5jhYh9NDeQPBRpsJtY7IcEshwKxS//NfsgR+ZpYWw5 norsTsO/IDVr61my+KbLMZaGFGj/swoOK/alTZEnnkIfXDLIYK61uKYskqQ3cOBp ncbapJa+vdZnGU+nPp/5F65FhWNF9ocj -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:55 2025 by rpki-client