$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: XGR48QDGsKYIw3q6jT3X39DhV9TWW5KYfMdnT+NIKmM= Subject key identifier: 02:5F:97:B7:89:21:DE:8E:9C:66:8E:71:3D:6E:96:20:5A:53:AC:2F Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: 8B Signing time: Sun 11 May 2025 05:16:01 +0000 Manifest this update: Sun 11 May 2025 05:16:00 +0000 Manifest next update: Sun 18 May 2025 05:16:00 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: 9WguFfsiBor6lhHuTnW5cLP/NSzYxMUZPOQ2qRd0wts=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: HB8QMXYnImTcdy2zBeTOvUb91weeMYAQqjoTwrsvfrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: May 11 05:16:00 2025 GMT Not After : May 18 05:16:00 2025 GMT Subject: CN=68203290-0fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:27:63:4b:7f:56:4d:81:9e:1f:fd:19:0a: 83:bd:84:01:93:8e:53:84:67:6b:3a:ff:b4:d5:c7: 7b:89:3d:9d:20:72:9f:84:3a:46:5c:16:4a:51:96: 0a:84:01:f1:b6:cf:92:d7:74:d7:50:c7:69:06:f6: 62:7b:a8:57:34:67:fa:41:7e:6e:0f:b5:5e:dd:22: 94:14:45:4e:7a:67:20:4e:83:57:59:37:1a:ca:40: 30:0c:22:36:a2:f7:d3:cf:e9:98:ae:73:12:03:6a: df:60:92:1d:b2:fb:9e:ef:3c:60:45:c2:d7:c3:32: b9:43:74:80:65:a6:4e:44:24:61:24:d0:84:f4:92: 20:8f:00:be:f7:ba:e0:77:1c:d7:9a:96:f4:50:f2: 2a:5e:01:b5:1c:43:dc:1d:de:b4:cc:89:79:1c:77: 8d:fa:32:c1:3a:c6:e1:d4:97:ef:35:c6:07:4f:77: 7d:c6:be:80:f1:bf:ac:ce:70:9e:2a:96:14:47:b1: 54:15:0f:cc:f8:13:6d:e2:de:73:d5:2a:65:ef:5e: 55:a9:76:55:62:ab:74:cc:d0:32:80:7c:5d:3f:d2: fb:5d:16:d9:d6:2d:ca:6a:91:06:66:1e:d1:dc:f4: 00:ea:bc:0a:2c:fd:ae:b0:33:0c:f2:3b:37:e2:15: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:97:B7:89:21:DE:8E:9C:66:8E:71:3D:6E:96:20:5A:53:AC:2F X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:70:ac:78:60:1e:c4:89:af:fe:ba:f5:0a:5d:3a:ab:18: 50:f9:b3:63:c5:4b:f1:69:18:74:cd:f9:0d:60:7a:0a:11:55: a6:d5:64:59:23:4e:f2:76:58:1f:7d:9d:6d:85:b1:80:cb:49: 86:d3:36:85:08:48:4d:3a:d3:5d:13:7d:ae:83:c9:6b:73:ab: 9d:92:f6:92:02:18:20:0a:eb:43:45:ae:d5:02:1b:47:5f:c0: c1:5f:11:08:98:be:86:ab:c9:ea:1c:3e:9b:bd:af:27:cf:8c: 82:2a:8f:3d:2c:56:f7:17:3f:4c:c5:45:8f:b6:96:7b:e3:e6: 60:0e:e0:9c:b3:5e:e3:75:02:3f:3e:06:ee:8b:6c:10:6e:5e: 90:f9:aa:d4:eb:21:6e:e4:e1:37:83:b9:5e:eb:8a:e7:0b:2f: 1f:38:67:f5:f6:22:77:0d:b3:3d:2e:07:a5:17:fb:9a:39:b8: 37:3e:0e:d4:d5:6e:b2:3d:f3:71:59:06:80:b4:1b:8e:2f:40: 32:7e:f6:ce:55:5d:00:a0:31:29:dc:04:63:36:86:a7:61:ad: 83:7b:57:56:1b:47:f3:fb:5e:a3:95:78:90:54:45:52:a0:8c: 3e:83:6c:c8:ab:b4:54:a5:fc:53:18:b9:56:34:fe:36:fa:74: 58:06:b5:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwNTExMDUxNjAwWhcNMjUwNTE4MDUxNjAwWjAYMRYwFAYD VQQDEw02ODIwMzI5MC0wZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtQnY0t/Vk2Bnh/9GQqDvYQBk45ThGdrOv+01cd7iT2dIHKfhDpGXBZKUZYK hAHxts+S13TXUMdpBvZie6hXNGf6QX5uD7Ve3SKUFEVOemcgToNXWTcaykAwDCI2 ovfTz+mYrnMSA2rfYJIdsvue7zxgRcLXwzK5Q3SAZaZORCRhJNCE9JIgjwC+97rg dxzXmpb0UPIqXgG1HEPcHd60zIl5HHeN+jLBOsbh1JfvNcYHT3d9xr6A8b+sznCe KpYUR7FUFQ/M+BNt4t5z1Spl715VqXZVYqt0zNAygHxdP9L7XRbZ1i3KapEGZh7R 3PQA6rwKLP2usDMM8js34hV63QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJfl7eJ Id6OnGaOcT1uliBaU6wvMB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYwXCseGAexImv/rr1Cl06qxhQ+bNjxUvxaRh0zfkNYHoKEVWm1WRZ I07ydlgffZ1thbGAy0mG0zaFCEhNOtNdE32ug8lrc6udkvaSAhggCutDRa7VAhtH X8DBXxEImL6Gq8nqHD6bva8nz4yCKo89LFb3Fz9MxUWPtpZ74+ZgDuCcs17jdQI/ Pgbui2wQbl6Q+arU6yFu5OE3g7le64rnCy8fOGf19iJ3DbM9LgelF/uaObg3Pg7U 1W6yPfNxWQaAtBuOL0AyfvbOVV0AoDEp3ARjNoanYa2De1dWG0fz+16jlXiQVEVS oIw+g2zIq7RUpfxTGLlWNP42+nRYBrWu -----END CERTIFICATE-----Generated at Sun May 11 22:27:14 2025 by rpki-client