$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft File: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json) Hash identifier: UDg2vzr/JYyaYLKIQkIWE2/F3PLuH8JgXd2umgC4STQ= Subject key identifier: 4B:92:1C:E8:5D:C7:30:FE:9F:14:DF:67:96:3E:B4:8E:4C:27:78:04 Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 Certificate issuer: /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft Manifest number: 01BD Signing time: Wed 19 Feb 2025 04:05:18 +0000 Manifest this update: Wed 19 Feb 2025 04:05:17 +0000 Manifest next update: Wed 26 Feb 2025 04:05:17 +0000 Files and hashes: 1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: MN+HEPA0LUuMhrK7lM5OMpMEEpJaSI586FHxy9pYE6s=) 2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: AKVXd/DH9YanLRhXJZMqC5LiMXYq5bZo14nqm8XdwR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 04:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B39 Validity Not Before: Feb 19 04:05:17 2025 GMT Not After : Feb 26 04:05:17 2025 GMT Subject: CN=67b5587e-1415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:c4:29:d3:cb:d8:44:da:fa:57:c9:ab:30: 81:6a:d7:7a:9c:9e:37:e7:27:ea:a1:05:e7:a7:31: ea:df:a6:f6:87:dd:d0:fd:86:3c:2e:ad:ba:b4:8d: 6e:ba:ed:a1:20:39:93:be:4b:d3:6f:11:4d:d3:fd: 9f:7c:b9:73:cc:9b:a1:41:15:e0:72:a8:57:00:a0: e5:34:66:eb:23:49:77:60:1a:4c:9d:29:09:25:bd: d8:ba:b7:ad:5b:84:3f:50:d5:7b:fc:1a:cd:12:4a: 4e:03:db:e6:f3:ce:2a:60:0f:38:3f:d3:00:e6:7f: ff:74:e1:d0:43:e3:0f:b3:2c:f4:c0:e0:f5:90:fe: 88:82:a6:d6:81:d6:33:f2:e9:64:52:28:6a:f2:15: 9d:ab:5a:73:99:1a:13:c3:8f:24:0a:85:d0:14:bd: d6:b9:35:89:02:22:e9:5c:be:96:cf:b9:f5:7f:63: 5e:99:c0:dd:b9:cc:6d:1b:b7:5c:c2:a4:b5:24:33: f3:19:d4:2e:eb:5d:11:6f:0c:63:53:da:03:55:07: 0d:86:26:7f:b4:7d:26:1d:37:d8:58:09:d9:44:e1: e2:7d:55:ab:dd:9f:98:a5:81:5a:c6:5c:a6:f8:47: 3b:3b:79:34:bd:9c:81:e6:4c:2c:8b:1b:72:8a:c4: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:1C:E8:5D:C7:30:FE:9F:14:DF:67:96:3E:B4:8E:4C:27:78:04 X509v3 Authority Key Identifier: keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:86:04:bd:73:1d:a3:bb:bb:31:9e:e2:e3:d0:14:de:14:d4: f3:9c:a4:6b:40:8f:9d:7a:b7:ee:18:f2:01:bf:c7:21:78:79: fa:7b:e7:63:fb:0e:22:9d:27:68:62:09:43:c0:84:5c:61:51: e6:62:d0:7d:c7:d2:6b:51:9a:5a:52:17:d3:79:c3:89:24:3e: 80:69:e9:0b:88:6a:2b:8c:4a:c9:9b:95:80:33:db:22:8a:ac: 1b:59:4d:3c:d3:81:27:9c:c9:c9:ae:70:20:de:b4:46:49:cd: f0:a4:c5:33:67:43:8c:aa:38:4c:6b:37:3a:f1:f8:8d:75:cb: b9:75:d9:11:4b:8a:07:60:fb:48:a2:23:ac:18:b8:0b:c2:05: ec:e0:1d:97:a9:17:a4:fe:7f:82:82:e2:61:37:f7:9e:02:9f: 2d:a4:1d:6f:da:43:d8:1e:26:72:1c:7e:c2:70:42:f1:b7:3a: f8:90:cb:6a:55:71:3f:f3:a9:21:8d:b2:89:a0:1a:c3:f5:db: e9:c3:d3:98:1e:37:fc:3a:5d:c8:af:d9:41:df:a6:6e:07:5f: 2b:af:70:33:13:f4:31:56:0b:75:a2:8f:85:07:89:35:24:40: 8b:70:e4:f4:e4:c4:bc:7b:d6:0d:ad:34:e3:33:13:88:95:31: 62:bb:48:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCMzkxMTAvBgNVBAUTKEQxOEY5OEE0MUMwQURDOEM4MTg0QjgyNkE3MUYzRUYy N0YxOTUzMjMwHhcNMjUwMjE5MDQwNTE3WhcNMjUwMjI2MDQwNTE3WjAYMRYwFAYD VQQDEw02N2I1NTg3ZS0xNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbbEKdPL2ETa+lfJqzCBatd6nJ435yfqoQXnpzHq36b2h93Q/YY8Lq26tI1u uu2hIDmTvkvTbxFN0/2ffLlzzJuhQRXgcqhXAKDlNGbrI0l3YBpMnSkJJb3Yuret W4Q/UNV7/BrNEkpOA9vm884qYA84P9MA5n//dOHQQ+MPsyz0wOD1kP6IgqbWgdYz 8ulkUihq8hWdq1pzmRoTw48kCoXQFL3WuTWJAiLpXL6Wz7n1f2NemcDducxtG7dc wqS1JDPzGdQu610RbwxjU9oDVQcNhiZ/tH0mHTfYWAnZROHifVWr3Z+YpYFaxlym +Ec7O3k0vZyB5kwsixtyisQWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuSHOhd xzD+nxTfZ5Y+tI5MJ3gEMB8GA1UdIwQYMBaAFNGPmKQcCtyMgYS4JqcfPvJ/GVMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUIzOS9CNzY5OUQyQzQ0 NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJeUJoTGdtcHg4LThuOFpV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZLVlwQndLM0l5QmhMZ21weDgtOG44WlV5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUIzOS9CNzY5OUQyQzQ0NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJ eUJoTGdtcHg4LThuOFpVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAshgS9cx2ju7sxnuLj0BTeFNTznKRrQI+derfuGPIBv8cheHn6e+dj +w4inSdoYglDwIRcYVHmYtB9x9JrUZpaUhfTecOJJD6AaekLiGorjErJm5WAM9si iqwbWU0804EnnMnJrnAg3rRGSc3wpMUzZ0OMqjhMazc68fiNdcu5ddkRS4oHYPtI oiOsGLgLwgXs4B2XqRek/n+CguJhN/eeAp8tpB1v2kPYHiZyHH7CcELxtzr4kMtq VXE/86khjbKJoBrD9dvpw9OYHjf8Ol3Ir9lB36ZuB18rr3AzE/QxVgt1oo+FB4k1 JECLcOT05MS8e9YNrTTjMxOIlTFiu0i9 -----END CERTIFICATE-----Generated at Thu Feb 20 02:57:10 2025 by rpki-client