$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: AMOFzJdHdHC4KugqOsTFChiSG4mGfcxHSQv/A8avTqM= Subject key identifier: CF:3B:2D:A4:B0:59:3C:C6:54:C7:D8:6D:4C:27:79:BF:04:FA:24:2E Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 0188 Signing time: Sun 11 May 2025 02:33:34 +0000 Manifest this update: Sun 11 May 2025 02:33:33 +0000 Manifest next update: Sun 18 May 2025 02:33:33 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: xZw653ZuMLUvNoo7Je9TG+y3qH2QW6aj34wOrjPAlCw=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: May 11 02:33:33 2025 GMT Not After : May 18 02:33:33 2025 GMT Subject: CN=68200c7d-6e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:0e:f1:b5:eb:77:0b:b1:e0:3b:2b:e5:a4: 9d:b3:47:3d:e6:90:3e:3d:64:ec:fb:87:42:11:87: d4:0d:20:29:d2:74:35:19:98:2f:79:75:2b:4f:df: 90:3f:f0:d3:4e:54:83:4d:99:e1:d0:36:bf:97:a1: 53:cd:e0:bd:76:be:30:1d:d1:c4:d0:b3:5c:e2:27: cc:e9:4e:d5:ac:aa:2b:f3:a4:81:75:23:a6:ca:08: 97:15:6c:aa:8b:08:fb:c1:59:34:87:eb:02:97:ff: e5:b9:67:34:a2:9e:ba:2c:3f:32:07:b9:f6:c6:b2: fb:1c:ef:93:e5:29:49:af:0a:c9:82:11:9f:7e:68: 32:54:5e:eb:22:67:6d:5f:0d:84:72:78:d0:d9:fa: 12:86:fc:18:63:87:17:1c:b6:7f:4f:30:38:8f:55: b4:a0:9d:fe:5e:63:21:15:5e:aa:c0:e5:a2:ce:70: cb:79:53:9b:66:ab:f6:a6:4a:80:fa:44:21:f6:db: 06:83:83:9d:ec:07:1c:fa:62:6e:2c:97:a1:4e:70: c1:05:e7:c4:5d:83:75:65:2d:c6:7a:9c:99:7a:0d: b8:fd:3f:4d:3c:6d:d6:88:ee:0f:86:63:44:3b:49: f2:01:f8:bb:ed:24:da:b6:05:2a:67:50:81:13:5f: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3B:2D:A4:B0:59:3C:C6:54:C7:D8:6D:4C:27:79:BF:04:FA:24:2E X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ae:1f:d1:e9:11:3a:55:69:b1:91:1b:d1:e2:1b:3f:c3:d7: af:f5:fd:df:6e:1a:85:84:c6:65:76:a2:68:25:91:c8:65:8a: d7:02:a5:83:d7:3d:17:e3:6d:d9:8a:a1:af:59:e0:c4:49:19: 51:26:32:9c:e3:4b:fc:04:ef:18:cc:fa:f0:4c:c7:5d:0e:95: be:2a:26:10:9c:03:67:3a:ea:17:1c:b1:5b:da:3b:db:d1:b0: af:d7:eb:79:3e:4e:7d:ed:f3:46:8d:ce:0d:46:0b:0c:0b:4f: c3:e4:6a:88:20:47:ed:e9:52:dc:9c:78:ab:4e:4d:f7:ba:99: d3:c0:2f:d3:10:8d:3e:e6:a4:0a:02:6d:c0:da:50:78:43:18: 62:65:eb:16:d1:a5:8c:10:80:57:b0:ec:3e:8d:51:4b:36:5e: 50:ee:c6:b1:3b:a0:02:1c:2f:ab:59:80:e1:9f:d4:c6:36:b6: 48:30:8f:9f:b6:69:77:33:87:52:8c:5a:73:fb:08:7c:93:8c: 65:95:be:34:d1:ab:1f:09:60:bc:b3:f7:11:b8:05:33:a7:d7: fc:c1:51:90:23:e3:f5:a5:ca:59:fb:c3:e1:0f:eb:94:65:01: 10:2d:2b:3c:7b:b4:01:03:17:d0:36:16:a8:5e:e5:79:f5:89: 62:3c:b2:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwNTExMDIzMzMzWhcNMjUwNTE4MDIzMzMzWjAYMRYwFAYD VQQDEw02ODIwMGM3ZC02ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05EO8bXrdwux4Dsr5aSds0c95pA+PWTs+4dCEYfUDSAp0nQ1GZgveXUrT9+Q P/DTTlSDTZnh0Da/l6FTzeC9dr4wHdHE0LNc4ifM6U7VrKor86SBdSOmygiXFWyq iwj7wVk0h+sCl//luWc0op66LD8yB7n2xrL7HO+T5SlJrwrJghGffmgyVF7rImdt Xw2EcnjQ2foShvwYY4cXHLZ/TzA4j1W0oJ3+XmMhFV6qwOWiznDLeVObZqv2pkqA +kQh9tsGg4Od7Acc+mJuLJehTnDBBefEXYN1ZS3GepyZeg24/T9NPG3WiO4PhmNE O0nyAfi77STatgUqZ1CBE1/c2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM87LaSw WTzGVMfYbUwneb8E+iQuMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4rh/R6RE6VWmxkRvR4hs/w9ev9f3fbhqFhMZldqJoJZHIZYrXAqWD 1z0X423ZiqGvWeDESRlRJjKc40v8BO8YzPrwTMddDpW+KiYQnANnOuoXHLFb2jvb 0bCv1+t5Pk597fNGjc4NRgsMC0/D5GqIIEft6VLcnHirTk33upnTwC/TEI0+5qQK Am3A2lB4QxhiZesW0aWMEIBXsOw+jVFLNl5Q7saxO6ACHC+rWYDhn9TGNrZIMI+f tml3M4dSjFpz+wh8k4xllb400asfCWC8s/cRuAUzp9f8wVGQI+P1pcpZ+8PhD+uU ZQEQLSs8e7QBAxfQNhaoXuV59YliPLKl -----END CERTIFICATE-----Generated at Mon May 12 00:43:00 2025 by rpki-client