$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json) Hash identifier: vKvXQH6lQN8+0fwz95MjLVdLmqWRJu1Mhklta3jVbt4= Subject key identifier: C4:0C:E5:FB:15:76:FB:D3:10:F9:50:F3:26:AF:64:2B:BF:80:7A:5A Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft Manifest number: 3484 Signing time: Sat 10 May 2025 14:43:12 +0000 Manifest this update: Sat 10 May 2025 14:43:12 +0000 Manifest next update: Sat 17 May 2025 14:43:12 +0000 Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: RI0j6hxyr0BIXyb4X82psloMVltVVD18MUAENN62kwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: May 10 14:43:12 2025 GMT Not After : May 17 14:43:12 2025 GMT Subject: CN=681f6600-8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:71:7c:a2:c8:f4:7d:eb:22:20:af:48:a3: 6e:7a:21:25:17:84:cd:18:c3:22:97:fc:46:ca:ec: 97:a4:cb:59:2b:42:f7:f7:78:a1:29:b6:ef:5c:29: 4c:66:13:1e:51:18:b8:6c:45:92:6d:31:97:f9:07: fa:ba:a0:d7:a8:94:72:89:18:00:d5:5a:d5:75:f1: bc:4c:00:f5:c8:a0:b4:70:8d:d5:7d:8b:e8:3e:51: f1:57:94:1c:e8:ba:a9:eb:d1:90:44:26:80:51:66: e9:df:71:ee:14:1a:68:3c:9e:30:a6:3e:94:8d:82: 93:91:c5:80:39:51:52:cd:03:80:88:c6:60:c5:48: f8:e1:f1:24:92:81:cd:2a:2a:d3:36:8b:36:b4:cb: de:55:30:50:d0:21:2e:6c:43:61:fe:ce:8c:e7:d4: 85:a5:bc:49:a1:3b:1a:ae:5a:57:94:0d:2d:55:e0: 00:4a:84:86:29:3e:fb:1f:40:8b:16:6e:b5:65:95: c7:95:9d:3c:09:73:4b:4f:c1:78:14:e8:3e:1f:11: 05:bd:43:9e:5d:1b:64:ae:a0:6b:07:f5:b5:19:c0: 04:5e:e3:ab:53:ba:4f:d7:9a:84:74:b4:a1:1e:df: 70:f3:6f:3b:d4:39:04:ad:82:52:91:6a:f5:65:d5: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0C:E5:FB:15:76:FB:D3:10:F9:50:F3:26:AF:64:2B:BF:80:7A:5A X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9e:8f:41:1c:6f:70:40:62:72:a7:20:2d:50:00:cf:cf:61: a1:9d:1d:55:ad:db:2b:f3:a7:bf:75:6c:d9:84:59:c6:82:ff: d7:c6:67:c8:ce:49:51:4d:af:9b:c5:d0:1a:1d:d8:0b:94:b3: f6:9c:1a:86:32:39:52:15:88:c9:63:18:f5:4d:85:c9:6f:a1: f1:55:87:d9:d5:e4:26:c9:d1:d4:58:a3:11:3e:6e:24:2d:09: b0:bf:f3:83:81:eb:54:e2:f9:56:23:ac:db:78:1f:75:06:85: 3e:1d:c4:a3:84:d1:e2:7e:9a:86:aa:ff:64:ef:fa:43:a8:13: b3:b4:29:47:15:7e:ea:ae:b6:65:70:bd:24:3d:ac:6d:32:67: c6:90:cb:ed:de:af:f9:a7:19:20:df:2b:e4:85:2f:01:ec:e7: 54:ac:90:e7:c9:58:5c:68:ea:4f:7f:4c:95:1a:93:06:c6:24: 02:56:95:f7:2b:8f:a4:ae:f3:7e:ce:4a:37:9b:ae:f6:ea:64: 1b:3c:ca:4f:51:f8:00:a7:ce:1d:34:10:bd:57:e3:54:94:11: 5c:2c:9d:dc:e7:2d:7d:bf:f7:1a:4e:30:9c:90:f5:ac:2b:b3: e8:ac:cc:5a:48:bb:9c:39:91:ec:63:f7:61:12:1f:ec:75:50: 7d:cc:50:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjUwNTEwMTQ0MzEyWhcNMjUwNTE3MTQ0MzEyWjAYMRYwFAYD VQQDEw02ODFmNjYwMC04ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wdxfKLI9H3rIiCvSKNueiElF4TNGMMil/xGyuyXpMtZK0L393ihKbbvXClM ZhMeURi4bEWSbTGX+Qf6uqDXqJRyiRgA1VrVdfG8TAD1yKC0cI3VfYvoPlHxV5Qc 6Lqp69GQRCaAUWbp33HuFBpoPJ4wpj6UjYKTkcWAOVFSzQOAiMZgxUj44fEkkoHN KirTNos2tMveVTBQ0CEubENh/s6M59SFpbxJoTsarlpXlA0tVeAASoSGKT77H0CL Fm61ZZXHlZ08CXNLT8F4FOg+HxEFvUOeXRtkrqBrB/W1GcAEXuOrU7pP15qEdLSh Ht9w82871DkErYJSkWr1ZdUOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQM5fsV dvvTEPlQ8yavZCu/gHpaMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC TEpmQzNPeDhrRzVoclRKYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByno9BHG9wQGJypyAtUADPz2GhnR1Vrdsr86e/dWzZhFnGgv/XxmfI zklRTa+bxdAaHdgLlLP2nBqGMjlSFYjJYxj1TYXJb6HxVYfZ1eQmydHUWKMRPm4k LQmwv/ODgetU4vlWI6zbeB91BoU+HcSjhNHifpqGqv9k7/pDqBOztClHFX7qrrZl cL0kPaxtMmfGkMvt3q/5pxkg3yvkhS8B7OdUrJDnyVhcaOpPf0yVGpMGxiQCVpX3 K4+krvN+zko3m6726mQbPMpPUfgAp84dNBC9V+NUlBFcLJ3c5y19v/caTjCckPWs K7PorMxaSLucOZHsY/dhEh/sdVB9zFC+ -----END CERTIFICATE-----Generated at Sun May 11 11:48:24 2025 by rpki-client