$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: D9r3D1TH9RWUPhqMkRWrtiydKL0DklnERc4ZazN058Q= Subject key identifier: 94:F3:8E:68:D2:29:1B:C8:DA:7A:E1:23:5A:26:61:B6:8E:B5:82:0E Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0BC4 Signing time: Mon 12 May 2025 18:48:00 +0000 Manifest this update: Mon 12 May 2025 18:48:00 +0000 Manifest next update: Mon 19 May 2025 18:48:00 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: jUTutKJxiLhFIW9NWBJW9SJgsjQ1iquvUhO6MlWrEBA=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: May 12 18:48:00 2025 GMT Not After : May 19 18:48:00 2025 GMT Subject: CN=68224260-faf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:f3:7f:03:43:36:44:a1:d7:50:ef:5e:aa: d7:08:9f:c8:52:9c:fd:a4:b0:ad:d9:b6:56:8b:3a: 7c:6e:c3:5e:50:ca:fa:dc:32:37:f6:e7:35:04:b4: 49:44:8b:f9:20:45:98:f8:32:fb:c5:f5:b6:95:1c: dc:14:9b:77:f9:7f:7b:9f:b6:08:17:2c:ed:e2:ab: 64:48:5c:45:e5:b6:4f:71:a6:70:2a:99:cf:94:bc: df:2f:f2:8f:eb:93:fc:42:18:9c:43:2b:f1:3e:c9: 08:b0:8b:83:b2:b1:c4:76:de:e1:c0:fb:2d:fd:7e: 17:65:c1:54:68:fa:05:ea:1c:e4:ba:ab:01:6e:80: 80:73:a2:37:55:93:2d:cf:c1:02:f7:d5:c7:19:48: 99:28:d2:af:7c:f7:44:a6:b3:c9:31:ae:f9:72:dd: 90:f3:74:04:e4:b6:fb:ea:d5:0d:a6:77:26:8b:9c: eb:ba:c1:26:c4:ff:55:00:67:90:b9:00:a3:04:cb: 0b:4c:9a:12:2f:ef:a6:b8:80:ed:5c:80:c7:28:d5: 34:6a:21:10:5f:66:25:e6:c5:1d:ed:e2:e1:40:41: 2e:ec:1c:ba:a0:17:76:1a:e8:e9:13:b4:86:45:97: ea:fb:3f:f0:c3:b3:25:78:b2:89:4d:c7:f0:23:7c: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F3:8E:68:D2:29:1B:C8:DA:7A:E1:23:5A:26:61:B6:8E:B5:82:0E X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:01:23:49:34:92:1e:1a:ff:0b:0b:dd:cd:5f:5d:f4:84:3d: 97:40:12:b8:a5:6e:f6:a5:90:39:72:18:30:60:b7:48:a5:74: de:f6:b3:26:f2:3c:83:f5:2b:bf:81:cf:9a:f4:c4:dd:40:83: 52:a3:a7:af:d3:14:25:e3:2f:94:f0:54:7f:8c:ee:be:64:a6: 21:65:4b:97:d9:22:75:63:4c:4f:5f:3d:c2:b1:5f:79:f5:08: c7:15:ea:24:a0:30:1f:28:35:97:21:f3:a8:e8:e8:88:e8:43: cc:9b:d9:22:6a:a6:c2:ec:1c:3f:45:6d:46:9c:2e:fb:0a:eb: f0:52:98:b3:97:61:c8:83:ec:55:57:2e:b9:58:01:f7:60:11: 97:ff:6f:8d:73:08:e9:ee:6f:b8:5d:14:84:fe:48:7c:e5:14: ed:cc:09:18:c4:fd:64:c2:20:2e:60:4f:6c:e1:86:63:61:96: 87:ed:4b:be:f6:37:a5:02:ac:b8:33:89:41:1d:bc:b3:9a:da: 7f:57:f4:44:b4:aa:95:de:5b:07:48:ee:4a:e7:fa:11:15:ae: b5:2a:25:64:e5:3c:cb:a1:33:5a:48:f0:06:2b:0e:e0:dd:71: 11:4c:fb:a5:85:fe:21:41:0d:16:c9:35:93:5b:07:13:ec:da: d8:43:a2:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUwNTEyMTg0ODAwWhcNMjUwNTE5MTg0ODAwWjAYMRYwFAYD VQQDEw02ODIyNDI2MC1mYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluHzfwNDNkSh11DvXqrXCJ/IUpz9pLCt2bZWizp8bsNeUMr63DI39uc1BLRJ RIv5IEWY+DL7xfW2lRzcFJt3+X97n7YIFyzt4qtkSFxF5bZPcaZwKpnPlLzfL/KP 65P8QhicQyvxPskIsIuDsrHEdt7hwPst/X4XZcFUaPoF6hzkuqsBboCAc6I3VZMt z8EC99XHGUiZKNKvfPdEprPJMa75ct2Q83QE5Lb76tUNpncmi5zrusEmxP9VAGeQ uQCjBMsLTJoSL++muIDtXIDHKNU0aiEQX2Yl5sUd7eLhQEEu7By6oBd2GujpE7SG RZfq+z/ww7MleLKJTcfwI3zZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTzjmjS KRvI2nrhI1omYbaOtYIOMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmASNJNJIeGv8LC93NX130hD2XQBK4pW72pZA5chgwYLdIpXTe9rMm 8jyD9Su/gc+a9MTdQINSo6ev0xQl4y+U8FR/jO6+ZKYhZUuX2SJ1Y0xPXz3CsV95 9QjHFeokoDAfKDWXIfOo6OiI6EPMm9kiaqbC7Bw/RW1GnC77CuvwUpizl2HIg+xV Vy65WAH3YBGX/2+Ncwjp7m+4XRSE/kh85RTtzAkYxP1kwiAuYE9s4YZjYZaH7Uu+ 9jelAqy4M4lBHbyzmtp/V/REtKqV3lsHSO5K5/oRFa61KiVk5TzLoTNaSPAGKw7g 3XERTPulhf4hQQ0WyTWTWwcT7NrYQ6KX -----END CERTIFICATE-----Generated at Wed May 14 04:57:06 2025 by rpki-client