$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json) Hash identifier: hps10ke7/MnocvQn1hhzPsctmtNptgEv2WefIz4ey/w= Subject key identifier: DD:F4:B7:F6:A6:9B:F5:E6:89:74:12:2E:2B:03:E3:D5:15:3C:7B:D7 Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft Manifest number: 9A Signing time: Thu 03 Apr 2025 05:36:30 +0000 Manifest this update: Thu 03 Apr 2025 05:36:30 +0000 Manifest next update: Thu 10 Apr 2025 05:36:30 +0000 Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: 6DA5EPMMS9aIAnwSLNCiBCRm2V5K9DUTil8UKKlbMfk=) 2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: xTsY4iW+fb2o0N8YA+SXz8YOTeNUYyhxpihIk2CiRFI=) 3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: 5AufB2RsG7jdJMojc2DVF486w/PxZ39VMbcx9j28U7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF Validity Not Before: Apr 3 05:36:30 2025 GMT Not After : Apr 10 05:36:30 2025 GMT Subject: CN=67ee1e5e-e309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:11:78:7e:af:92:94:13:a6:fd:93:7e:eb: 21:9f:6e:be:91:c2:15:29:59:94:c1:8d:f8:2f:1f: ce:c4:00:82:9f:a1:9d:7a:91:2c:ec:77:d7:be:2f: c4:51:14:17:b4:d4:2b:04:c7:93:3b:e9:f0:31:c0: ca:a2:a3:ba:90:eb:81:0f:a4:8c:e2:dc:bc:cd:c6: b7:24:a6:2d:78:e5:15:37:3f:29:ec:72:29:37:bd: ee:55:46:b5:09:ae:a1:12:0d:00:65:63:71:21:77: c1:99:0d:02:ea:ed:da:c2:1a:c5:00:46:18:1a:12: 1b:41:14:9e:00:37:b8:ec:4a:88:38:ff:52:e8:6e: 10:b5:90:65:f4:0d:05:f2:62:e6:b6:1f:c5:8b:c6: cb:3a:77:ce:90:36:74:32:21:bc:55:ab:1a:94:8a: 53:38:0e:6d:2a:71:7a:a8:b2:5c:9d:9e:3a:86:3b: e4:ac:1d:4d:36:23:1c:ac:f8:3d:88:eb:7c:d3:83: ee:07:f8:af:14:18:25:19:13:e2:40:a6:7a:48:1b: 99:74:5c:0f:e4:db:eb:f9:ac:5f:b7:23:3a:fc:c5: 9c:d5:4c:fe:e5:c9:14:1d:8c:23:f1:2c:27:43:21: ea:28:8f:0b:0c:20:81:6a:a7:3f:d9:d9:c1:6c:ad: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:B7:F6:A6:9B:F5:E6:89:74:12:2E:2B:03:E3:D5:15:3C:7B:D7 X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:08:a6:b5:a2:4c:a7:77:b2:b6:4b:1c:73:0e:b2:a1:3c:37: ed:77:6c:ed:60:d6:b2:e3:b2:63:eb:70:3b:65:b0:57:a6:50: 4e:e7:27:f0:f9:9f:c0:66:c5:78:09:86:11:33:b8:17:d7:c3: 14:23:bf:4c:bd:e9:fe:6d:cf:c8:f0:19:00:06:1c:ac:07:61: d5:e0:4c:3d:d7:d4:52:08:cb:8a:2a:80:45:74:af:36:da:b2: 05:2f:80:04:4f:66:30:0f:28:29:e3:68:6a:72:02:d8:b7:8f: 4a:c1:42:1a:17:83:5e:71:2a:00:a2:a3:7d:3f:e0:0c:19:32: 27:98:c7:d9:f3:fa:3e:85:36:13:2e:ae:ff:90:bf:dc:15:cb: 0d:0c:03:58:d9:c0:ce:97:f6:4d:56:10:97:35:3f:03:15:0e: b6:d0:e7:55:e9:52:ea:c6:51:25:23:01:50:cb:fb:d1:c2:fe: f3:a4:a9:a9:78:41:c0:9e:57:29:d2:97:86:e7:36:62:06:1d: 25:5d:47:0e:06:db:ff:9b:83:11:99:97:4b:da:7e:fb:2e:1c: 26:28:a1:d3:7b:5d:cc:0b:c3:2b:81:05:3f:ec:33:1f:aa:0a: be:42:7e:3f:58:28:f5:01:11:74:a6:76:a4:50:d3:51:ee:6e: 14:9e:72:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw NUJERjRGNzYwHhcNMjUwNDAzMDUzNjMwWhcNMjUwNDEwMDUzNjMwWjAYMRYwFAYD VQQDEw02N2VlMWU1ZS1lMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmAReH6vkpQTpv2Tfushn26+kcIVKVmUwY34Lx/OxACCn6GdepEs7HfXvi/E URQXtNQrBMeTO+nwMcDKoqO6kOuBD6SM4ty8zca3JKYteOUVNz8p7HIpN73uVUa1 Ca6hEg0AZWNxIXfBmQ0C6u3awhrFAEYYGhIbQRSeADe47EqIOP9S6G4QtZBl9A0F 8mLmth/Fi8bLOnfOkDZ0MiG8VasalIpTOA5tKnF6qLJcnZ46hjvkrB1NNiMcrPg9 iOt804PuB/ivFBglGRPiQKZ6SBuZdFwP5Nvr+axftyM6/MWc1Uz+5ckUHYwj8Swn QyHqKI8LDCCBaqc/2dnBbK0BowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN30t/am m/XmiXQSLisD49UVPHvXMB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTZGRi9EMjgxRTczMDJFMjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9X cTJ5bE5fSTBld0lGdmZUM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCKa1okynd7K2SxxzDrKhPDftd2ztYNay47Jj63A7ZbBXplBO5yfw +Z/AZsV4CYYRM7gX18MUI79Mven+bc/I8BkABhysB2HV4Ew919RSCMuKKoBFdK82 2rIFL4AET2YwDygp42hqcgLYt49KwUIaF4NecSoAoqN9P+AMGTInmMfZ8/o+hTYT Lq7/kL/cFcsNDANY2cDOl/ZNVhCXNT8DFQ620OdV6VLqxlElIwFQy/vRwv7zpKmp eEHAnlcp0peG5zZiBh0lXUcOBtv/m4MRmZdL2n77LhwmKKHTe13MC8MrgQU/7DMf qgq+Qn4/WCj1ARF0pnakUNNR7m4UnnJ0 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:05 2025 by rpki-client