$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: 2CQG6XegE8lPaKPm0xHcT3DfULNMGoW2HPIcTNisMeM= Subject key identifier: E2:BA:9F:87:63:1A:AC:8D:5E:55:40:48:38:A9:03:EE:23:85:CE:44 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 0116 Signing time: Sat 03 May 2025 04:13:49 +0000 Manifest this update: Sat 03 May 2025 04:13:49 +0000 Manifest next update: Sat 10 May 2025 04:13:49 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: ZLGfWj4YDXAn2MMJMkkusO+SUmG1N8UJallX4/xu+q0=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: May 3 04:13:49 2025 GMT Not After : May 10 04:13:49 2025 GMT Subject: CN=681597fd-db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:29:fe:ab:6c:5c:f9:9a:7c:60:69:30:5c: 75:d7:97:dc:f1:62:d7:24:00:b2:85:ab:d7:11:ca: 32:50:8f:70:bb:ce:9f:cc:5f:fd:07:e6:73:f1:20: e8:03:01:22:86:73:f0:36:d2:72:20:f2:27:12:1d: 2c:74:ec:60:90:37:43:d0:f7:a6:85:63:cb:67:64: d8:54:b3:fc:12:4e:2d:4b:66:1e:d7:3e:5a:3f:03: aa:8c:a1:de:f0:ab:1e:4d:de:df:5d:0d:6d:0e:98: 0f:bd:85:c4:c6:b6:41:2e:3f:35:83:bb:0c:3e:50: 25:a1:a9:17:ee:0e:51:60:cc:7f:05:a8:54:f5:58: 23:c2:d3:88:26:aa:d6:eb:33:1d:d1:2f:66:1c:fd: a6:75:e6:d2:d6:54:28:40:62:4a:74:6b:ef:33:2c: 0c:82:83:58:aa:4f:7a:12:2a:a4:ab:1e:17:aa:ce: 9b:15:0c:b5:ce:51:c1:f2:d5:2b:44:72:2e:03:0e: 60:ea:83:1c:7b:8e:bf:88:03:54:29:ec:f4:1d:d0: 0d:0c:e3:83:f0:20:79:3b:23:ec:c6:3d:b1:3f:d4: 0d:ca:53:e8:ae:6a:e1:68:17:b4:40:30:17:d3:7b: a6:d5:23:a8:32:55:b1:09:b1:51:fc:30:2b:f8:95: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:9F:87:63:1A:AC:8D:5E:55:40:48:38:A9:03:EE:23:85:CE:44 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:1f:ed:78:9d:78:2f:34:5b:25:58:c3:98:1a:62:1a:e9: b4:d6:7d:fe:c2:12:28:dc:e5:aa:3f:d2:4f:5b:38:5f:0f:bc: ba:b5:54:f7:e2:e0:92:ec:f0:af:0a:f8:79:65:d9:45:ca:d0: b3:38:fe:ff:4f:6e:ed:98:1c:66:0a:c5:17:05:cf:f9:96:ea: d7:50:84:1d:28:92:b5:b7:59:9a:a3:9d:2d:2c:44:bd:07:d3: 25:1e:8b:11:fe:bd:89:8f:c3:27:e9:73:83:f0:dd:3f:c7:a6: 68:4d:a3:d0:95:03:0c:90:45:ac:0f:f1:d5:f0:91:52:22:cf: 9c:ea:ec:a0:9f:d8:bf:24:5a:cb:cd:df:ea:4d:55:57:c3:61: b6:e5:e7:29:69:88:20:9b:ad:94:db:7d:e7:c9:1a:c9:b4:98: 8e:bf:a7:85:dc:2d:b6:2c:ee:e8:2e:a8:81:83:62:91:16:1d: 25:e6:7c:4e:50:d8:2a:86:f8:2d:be:f0:50:ec:ab:da:27:bf: 04:db:39:04:82:73:7e:ff:fa:d9:4e:5f:20:99:82:43:07:c4: 32:06:e8:6f:f2:27:90:e9:f4:d5:33:12:dc:26:ea:45:e6:cf: fa:a5:3a:c5:c8:27:0f:b3:19:9b:9f:f8:b8:27:69:d7:e2:3d: 8c:b3:db:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUwNTAzMDQxMzQ5WhcNMjUwNTEwMDQxMzQ5WjAYMRYwFAYD VQQDEw02ODE1OTdmZC1kYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVAp/qtsXPmafGBpMFx115fc8WLXJACyhavXEcoyUI9wu86fzF/9B+Zz8SDo AwEihnPwNtJyIPInEh0sdOxgkDdD0PemhWPLZ2TYVLP8Ek4tS2Ye1z5aPwOqjKHe 8KseTd7fXQ1tDpgPvYXExrZBLj81g7sMPlAloakX7g5RYMx/BahU9VgjwtOIJqrW 6zMd0S9mHP2mdebS1lQoQGJKdGvvMywMgoNYqk96Eiqkqx4Xqs6bFQy1zlHB8tUr RHIuAw5g6oMce46/iANUKez0HdANDOOD8CB5OyPsxj2xP9QNylPormrhaBe0QDAX 03um1SOoMlWxCbFR/DAr+JUinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK6n4dj GqyNXlVASDipA+4jhc5EMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqSx/teJ14LzRbJVjDmBpiGum01n3+whIo3OWqP9JPWzhfD7y6tVT3 4uCS7PCvCvh5ZdlFytCzOP7/T27tmBxmCsUXBc/5lurXUIQdKJK1t1mao50tLES9 B9MlHosR/r2Jj8Mn6XOD8N0/x6ZoTaPQlQMMkEWsD/HV8JFSIs+c6uygn9i/JFrL zd/qTVVXw2G25ecpaYggm62U233nyRrJtJiOv6eF3C22LO7oLqiBg2KRFh0l5nxO UNgqhvgtvvBQ7KvaJ78E2zkEgnN+//rZTl8gmYJDB8QyBuhv8ieQ6fTVMxLcJupF 5s/6pTrFyCcPsxmbn/i4J2nX4j2Ms9t3 -----END CERTIFICATE-----Generated at Mon May 5 03:31:16 2025 by rpki-client