$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft File: ySmS1w7OQRpiVb9AueCkUhSUQA0.mft (raw, json) Hash identifier: Wd1rA6yDwHzI1dN2g6Q4erG2/NbNJj63R86Dwb4UX2c= Subject key identifier: 0F:4B:EC:18:49:62:07:36:67:AC:C8:AA:2F:DA:74:11:D5:4B:08:96 Authority key identifier: C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D Certificate issuer: /CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft Manifest number: 11CD Signing time: Wed 14 May 2025 19:48:49 +0000 Manifest this update: Wed 14 May 2025 19:48:49 +0000 Manifest next update: Wed 21 May 2025 19:48:49 +0000 Files and hashes: 1: ySmS1w7OQRpiVb9AueCkUhSUQA0.crl (hash: hfwum/l8n6Vbc+dI+4XrIbIkLm/FzNfJ7BcQ3HSlyZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Validity Not Before: May 14 19:48:49 2025 GMT Not After : May 21 19:48:49 2025 GMT Subject: CN=6824f3a1-067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:7c:e1:09:fb:1a:dd:33:ce:9d:89:aa:fb: 17:f4:84:c1:e7:e8:20:37:41:cc:a2:4c:5d:2e:f7: 26:44:ad:e4:e3:d5:7d:f3:f1:9a:38:50:86:0d:1b: 13:20:a2:98:73:5a:ce:e4:ac:ff:30:4a:ed:71:ac: d3:c3:bf:95:1c:1d:53:b9:52:62:34:5c:12:68:92: e6:87:7b:3e:f4:75:36:77:02:ff:78:13:24:8b:ce: 32:c7:4f:71:77:ae:0f:1a:92:fd:ad:db:d9:9a:a1: 25:21:fe:be:04:de:a2:76:13:25:c8:ac:63:b7:be: f8:5b:d1:46:95:b4:c7:6c:48:54:d9:2a:1c:e4:ae: ee:03:13:b7:ab:2e:d7:57:d1:46:76:ba:a5:fc:fe: 0b:6e:68:74:8a:b4:83:8b:45:f7:b1:97:1a:e2:44: ba:f4:c9:5d:1c:2a:79:27:ce:db:e8:02:2d:96:28: d9:d4:bb:aa:6b:2f:c2:1e:37:d1:b3:df:2d:8f:c4: f8:6c:c4:5b:4a:75:4b:43:c2:93:8b:fb:fb:3a:8d: 35:71:7e:53:ef:95:1d:15:26:4c:b5:fd:3d:0b:bd: d9:2d:a6:3d:d9:32:65:61:aa:ca:e8:b8:f3:d2:d8: 8c:a9:62:9a:da:a5:52:37:f3:18:41:a1:3f:99:20: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:EC:18:49:62:07:36:67:AC:C8:AA:2F:DA:74:11:D5:4B:08:96 X509v3 Authority Key Identifier: keyid:C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fb:ca:d9:03:88:dc:7e:c6:09:fc:4f:30:0e:10:b1:ef:02: a2:a1:62:3f:b8:0f:14:09:ac:d1:53:84:58:7b:15:91:18:e9: e8:e3:2e:17:48:98:f2:b2:1e:c8:9d:3e:2d:78:da:7d:6b:20: 1b:43:5b:e3:e5:0f:94:1e:05:31:68:27:98:b1:78:9b:05:b3: 0c:b4:f3:5e:9a:74:dd:4d:fd:21:5f:bd:20:28:03:b6:af:11: f2:54:99:90:bf:5a:77:cf:63:be:20:72:85:c0:76:60:a6:63: 7c:5a:07:83:8d:50:53:58:ed:bc:eb:9b:29:b3:8d:29:8b:61: ed:49:ed:af:5e:5a:06:53:31:ae:4b:dc:d6:44:18:40:74:21: d6:6d:ec:a9:b5:3f:cb:d9:1c:8b:bd:7b:0e:14:f9:dc:62:e7: 7e:68:d6:f7:bc:9a:c9:d9:b3:f3:4c:b6:87:91:54:da:d6:0b: 6e:2a:90:91:92:99:d7:f1:a9:40:b0:73:08:75:e5:ae:a0:bc: c6:32:3a:66:e4:73:62:60:bb:1a:ac:3e:91:05:31:ec:ba:64: 97:a4:3f:f1:ed:dc:3b:be:80:a6:63:a9:f7:ab:f1:ae:1d:e1: 11:3d:ef:63:48:98:40:20:03:5c:0d:d7:39:f1:35:c1:da:29: c6:b3:c9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEM5Mjk5MkQ3MEVDRTQxMUE2MjU1QkY0MEI5RTBBNDUy MTQ5NDQwMEQwHhcNMjUwNTE0MTk0ODQ5WhcNMjUwNTIxMTk0ODQ5WjAYMRYwFAYD VQQDEw02ODI0ZjNhMS0wNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7F84Qn7Gt0zzp2JqvsX9ITB5+ggN0HMokxdLvcmRK3k49V98/GaOFCGDRsT IKKYc1rO5Kz/MErtcazTw7+VHB1TuVJiNFwSaJLmh3s+9HU2dwL/eBMki84yx09x d64PGpL9rdvZmqElIf6+BN6idhMlyKxjt774W9FGlbTHbEhU2Soc5K7uAxO3qy7X V9FGdrql/P4Lbmh0irSDi0X3sZca4kS69MldHCp5J87b6AItlijZ1Luqay/CHjfR s98tj8T4bMRbSnVLQ8KTi/v7Oo01cX5T75UdFSZMtf09C73ZLaY92TJlYarK6Ljz 0tiMqWKa2qVSN/MYQaE/mSDqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9L7BhJ Ygc2Z6zIqi/adBHVSwiWMB8GA1UdIwQYMBaAFMkpktcOzkEaYlW/QLngpFIUlEAN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FScGlWYjlBdWVDa1VoU1VR QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTbVMxdzdPUVJwaVZiOUF1ZUNrVWhTVVFBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FS cGlWYjlBdWVDa1VoU1VRQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+8rZA4jcfsYJ/E8wDhCx7wKioWI/uA8UCazRU4RYexWRGOno4y4X SJjysh7InT4teNp9ayAbQ1vj5Q+UHgUxaCeYsXibBbMMtPNemnTdTf0hX70gKAO2 rxHyVJmQv1p3z2O+IHKFwHZgpmN8WgeDjVBTWO2865sps40pi2HtSe2vXloGUzGu S9zWRBhAdCHWbeyptT/L2RyLvXsOFPncYud+aNb3vJrJ2bPzTLaHkVTa1gtuKpCR kpnX8alAsHMIdeWuoLzGMjpm5HNiYLsarD6RBTHsumSXpD/x7dw7voCmY6n3q/Gu HeERPe9jSJhAIANcDdc58TXB2inGs8n8 -----END CERTIFICATE-----Generated at Thu May 15 18:25:10 2025 by rpki-client