$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft File: YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json) Hash identifier: rWaC8kq/Bcgbgw/UVQubeuS8E8AguO4XR0vw8OuhlP0= Subject key identifier: 23:9A:B9:3B:D9:2C:21:C1:02:21:DD:48:B7:93:4C:43:DD:29:68:5C Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 Certificate issuer: /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft Manifest number: 1A Signing time: Sat 31 May 2025 07:29:51 +0000 Manifest this update: Sat 31 May 2025 07:29:50 +0000 Manifest next update: Sat 07 Jun 2025 07:29:50 +0000 Files and hashes: 1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: 3Y2cE0hdL2AuawC9cNVnHr0tQ7Qk057/Ez1NmsBkhJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Validity Not Before: May 31 07:29:50 2025 GMT Not After : Jun 7 07:29:50 2025 GMT Subject: CN=683aafee-67cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:8d:39:86:77:72:5c:ed:ea:a3:62:2d:cc: df:c3:b2:ed:14:a7:98:e0:56:64:89:90:b3:c1:86: 82:26:bf:17:80:88:36:f9:fb:a4:7f:1e:6b:be:18: 88:58:2e:02:4a:6f:23:47:f8:fc:97:14:ec:ef:de: e7:fb:4b:96:56:77:db:cf:57:ae:63:f0:13:36:6b: a5:21:de:18:c7:0f:8f:a8:67:7b:65:70:00:92:8b: 29:66:12:37:76:c1:80:a9:3d:44:56:a2:2d:a5:12: 00:3f:aa:15:e7:c9:48:6b:08:59:60:88:bb:87:cf: 53:fe:e5:38:5f:51:30:46:f7:e6:40:65:52:83:7d: 37:cb:61:20:c4:86:34:3e:4b:51:9b:9a:0b:f2:8a: cb:5c:6c:09:75:9b:cf:05:2e:30:9b:4f:97:c9:39: 1c:e6:bb:c8:d3:52:83:e3:cd:fb:57:ac:38:26:2b: ce:8a:60:9d:cb:ab:1a:09:90:63:9c:bc:4d:b1:0c: e4:09:0e:f9:c9:24:76:f9:ed:92:a4:88:21:7f:21: a4:24:c1:59:63:a0:d7:76:91:be:df:dd:44:ae:51: 40:4a:59:99:1b:44:01:de:45:aa:6a:0a:15:6d:aa: 42:23:f9:29:f4:15:47:9d:ca:2c:52:35:b6:c1:ca: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9A:B9:3B:D9:2C:21:C1:02:21:DD:48:B7:93:4C:43:DD:29:68:5C X509v3 Authority Key Identifier: keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:09:7e:48:ca:fa:c8:4a:d9:04:74:1d:39:52:5e:cf:ac:64: dc:6c:61:e1:fb:b8:b1:89:4f:26:05:39:b6:f4:0d:a3:d4:62: 29:f5:36:3f:98:46:58:97:46:ac:d5:3a:c4:f6:1f:b6:37:e0: 83:6e:f3:f2:9d:29:65:39:38:8e:16:c4:1d:e4:d0:f1:e9:49: 93:c7:f8:36:21:e4:ed:fa:f3:3f:52:06:ad:5d:d3:fd:a7:42: e8:98:4d:1e:8a:dc:a8:31:c2:a5:80:92:e3:f2:15:27:4d:f1: 41:77:07:15:38:c2:93:58:d9:6c:c6:ad:06:c4:b6:d7:b6:5b: 9d:eb:0f:19:f3:4a:51:1a:66:d8:5b:bd:b6:e4:9f:5e:a1:d1: 78:65:07:a6:65:54:7e:8e:bb:ce:6d:2d:14:a6:8a:9c:3c:24: 64:66:d2:dd:1d:ee:20:67:df:c8:1b:a0:7f:6e:9b:00:6a:7c: a7:ea:c5:b2:c1:d1:98:50:46:19:7c:56:49:9c:51:1b:cf:d7: 4b:9f:e2:4f:bb:5c:c4:3f:6a:b4:9e:48:1b:55:37:35:72:d4: 54:30:c4:4c:9a:42:ce:32:fa:2e:37:2f:08:c0:8f:10:df:39: 81:c7:70:13:6f:30:fd:71:08:18:a3:7a:ec:f1:c3:03:28:10: 4c:d3:97:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoNjE4QUUwOUU3NDcxMzZENjZGMTE2NUE3QjhGRUEyRkY3 Mzg2N0RGNjAeFw0yNTA1MzEwNzI5NTBaFw0yNTA2MDcwNzI5NTBaMBgxFjAUBgNV BAMTDTY4M2FhZmVlLTY3Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs0I05hndyXO3qo2ItzN/Dsu0Up5jgVmSJkLPBhoImvxeAiDb5+6R/Hmu+GIhY LgJKbyNH+PyXFOzv3uf7S5ZWd9vPV65j8BM2a6Uh3hjHD4+oZ3tlcACSiylmEjd2 wYCpPURWoi2lEgA/qhXnyUhrCFlgiLuHz1P+5ThfUTBG9+ZAZVKDfTfLYSDEhjQ+ S1GbmgvyistcbAl1m88FLjCbT5fJORzmu8jTUoPjzftXrDgmK86KYJ3LqxoJkGOc vE2xDOQJDvnJJHb57ZKkiCF/IaQkwVljoNd2kb7f3USuUUBKWZkbRAHeRapqChVt qkIj+Sn0FUedyixSNbbByum9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI5q5O9ks IcECId1It5NMQ90paFwwHwYDVR0jBBgwFoAUYYrgnnRxNtZvEWWnuP6i/3OGffYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzBENDY4ODNDMTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRadkVXV251UDZpXzNPR2Zm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVlyZ25uUnhOdFp2RVdXbnVQNmlfM09HZmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzBENDY4ODNDMTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRa dkVXV251UDZpXzNPR2ZmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALoJfkjK+shK2QR0HTlSXs+sZNxsYeH7uLGJTyYFObb0DaPUYin1Nj+Y RliXRqzVOsT2H7Y34INu8/KdKWU5OI4WxB3k0PHpSZPH+DYh5O368z9SBq1d0/2n QuiYTR6K3KgxwqWAkuPyFSdN8UF3BxU4wpNY2WzGrQbEtte2W53rDxnzSlEaZthb vbbkn16h0XhlB6ZlVH6Ou85tLRSmipw8JGRm0t0d7iBn38gboH9umwBqfKfqxbLB 0ZhQRhl8VkmcURvP10uf4k+7XMQ/arSeSBtVNzVy1FQwxEyaQs4y+i43LwjAjxDf OYHHcBNvMP1xCBijeuzxwwMoEEzTl4U= -----END CERTIFICATE-----Generated at Sat May 31 17:57:51 2025 by rpki-client