$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: oNUxrCU0eVE9WKWfaRictmwp/7kWAGFv4gVqmcAKiUc= Subject key identifier: 7C:2A:1D:D3:CE:FF:0F:4E:48:48:84:9C:9F:9A:02:01:09:02:43:84 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0122 Signing time: Thu 15 May 2025 04:05:48 +0000 Manifest this update: Thu 15 May 2025 04:05:48 +0000 Manifest next update: Thu 22 May 2025 04:05:48 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: pTRNLHDi2/RVr4J4ww+c843Rx0FPwHBZptZIjzbsn6s=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: May 15 04:05:48 2025 GMT Not After : May 22 04:05:48 2025 GMT Subject: CN=6825681c-a4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:40:85:d8:bf:b3:4f:88:0d:80:ad:37:c1: 9e:a2:ce:76:af:62:a1:d6:45:bc:70:6f:35:5b:8e: 1b:52:27:10:1d:0d:a8:f7:a2:cd:2f:24:08:11:55: c8:b5:da:98:39:ea:71:71:89:16:f6:1f:99:66:f0: bb:03:c8:23:1f:6a:d3:3d:58:72:55:9c:41:e9:f1: a8:6b:20:27:35:e8:8b:92:aa:60:be:2b:13:ab:1f: 40:3a:55:8f:33:ba:80:d4:d7:f2:1a:ad:ed:7c:64: 0b:e3:b5:4f:7a:e2:67:18:a8:78:11:aa:14:fb:07: a4:be:41:35:1c:1b:da:59:85:7b:e6:38:46:62:30: f8:bc:e6:2b:09:6d:ba:c1:70:44:b3:95:65:ea:4c: 51:52:c5:cb:4d:01:59:76:bb:87:32:e5:92:d9:16: 4a:32:1c:28:72:24:7a:d1:58:49:58:87:51:22:ec: cc:cd:64:0c:af:35:dc:f0:e2:6c:22:20:67:1e:b8: 9b:b1:23:ed:12:58:04:42:57:1a:b7:42:c2:0d:96: a4:4d:59:8c:d0:68:69:5a:81:13:01:11:de:4b:32: d6:82:90:2a:ef:81:26:fa:92:a9:60:52:95:16:f8: 72:6e:66:ce:65:0e:df:08:76:14:87:38:53:4c:e1: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:1D:D3:CE:FF:0F:4E:48:48:84:9C:9F:9A:02:01:09:02:43:84 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:40:0b:e1:b4:b1:73:dd:1a:b8:0f:83:78:b5:4f:02:40:24: 9f:f5:04:d8:32:f9:ba:d5:2d:54:f1:47:97:fa:78:be:db:37: 90:ae:2b:b9:23:d3:63:35:e5:26:97:69:4c:d9:64:c5:c8:01: 9e:67:34:4b:90:3c:6c:16:cc:c0:64:ea:b3:aa:d2:40:04:16: 12:71:41:7f:75:02:93:45:c2:4a:9c:b6:a6:bf:d4:66:7a:ff: 80:3b:68:17:fe:a2:6b:59:92:b4:e0:2c:11:28:11:78:49:90: 8b:97:e5:85:0a:28:46:a3:de:5c:45:ed:39:73:6e:49:d0:0a: 6c:b9:7f:b6:d0:8f:be:87:06:9b:4d:46:0b:5f:a8:f4:b9:2a: 4e:ee:0f:6f:eb:97:b7:cc:60:57:2e:7f:ca:fb:4b:ed:f5:ae: dc:53:46:2f:22:94:9b:a2:2e:32:14:1f:09:76:0f:02:77:d0: 58:90:ae:f5:81:23:da:82:f6:a7:c1:88:29:4d:2d:d7:5a:b3: a4:aa:24:2a:57:11:99:28:19:7e:c8:4b:51:c7:78:a8:3a:37: f8:02:c3:bc:76:01:eb:aa:e9:d0:e5:0a:40:97:a6:b8:c2:40: 51:06:d2:23:c5:01:3f:e4:32:d3:1f:49:50:8b:98:f7:16:b0: 56:fb:05:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNTE1MDQwNTQ4WhcNMjUwNTIyMDQwNTQ4WjAYMRYwFAYD VQQDEw02ODI1NjgxYy1hNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbhAhdi/s0+IDYCtN8Geos52r2Kh1kW8cG81W44bUicQHQ2o96LNLyQIEVXI tdqYOepxcYkW9h+ZZvC7A8gjH2rTPVhyVZxB6fGoayAnNeiLkqpgvisTqx9AOlWP M7qA1NfyGq3tfGQL47VPeuJnGKh4EaoU+wekvkE1HBvaWYV75jhGYjD4vOYrCW26 wXBEs5Vl6kxRUsXLTQFZdruHMuWS2RZKMhwociR60VhJWIdRIuzMzWQMrzXc8OJs IiBnHribsSPtElgEQlcat0LCDZakTVmM0GhpWoETARHeSzLWgpAq74Em+pKpYFKV FvhybmbOZQ7fCHYUhzhTTOEpMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwqHdPO /w9OSEiEnJ+aAgEJAkOEMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaQAvhtLFz3Rq4D4N4tU8CQCSf9QTYMvm61S1U8UeX+ni+2zeQriu5 I9NjNeUml2lM2WTFyAGeZzRLkDxsFszAZOqzqtJABBYScUF/dQKTRcJKnLamv9Rm ev+AO2gX/qJrWZK04CwRKBF4SZCLl+WFCihGo95cRe05c25J0ApsuX+20I++hwab TUYLX6j0uSpO7g9v65e3zGBXLn/K+0vt9a7cU0YvIpSboi4yFB8Jdg8Cd9BYkK71 gSPagvanwYgpTS3XWrOkqiQqVxGZKBl+yEtRx3ioOjf4AsO8dgHrqunQ5QpAl6a4 wkBRBtIjxQE/5DLTH0lQi5j3FrBW+wX/ -----END CERTIFICATE-----Generated at Thu May 15 21:46:50 2025 by rpki-client