$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: a44TAJWTiXgnLhGb83aKS5DLI0Bg4wYQfoyL51kca8E= Subject key identifier: 7A:5F:65:88:40:14:5F:41:B0:AA:89:B1:6F:93:58:8D:E8:06:19:B4 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 1044 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 1044 Signing time: Wed 14 May 2025 17:31:23 +0000 Manifest this update: Wed 14 May 2025 17:31:22 +0000 Manifest next update: Wed 21 May 2025 17:31:22 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: 1bE6GGRNROwJlVhWn5lcc/RQqwHGCsiS0bP/UcpNt+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4164 (0x1044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: May 14 17:31:22 2025 GMT Not After : May 21 17:31:22 2025 GMT Subject: CN=6824d36a-3eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:1a:81:da:c4:93:87:7a:95:15:ec:f8:d4: e1:89:53:c9:0b:2a:65:af:fc:6d:85:98:83:f2:b7: 95:df:93:de:b3:3c:7b:7d:30:03:e1:c9:58:22:56: d3:33:3f:18:5e:3f:45:06:a4:ee:de:f9:9f:1f:f3: 2a:64:69:c4:8a:97:71:5f:ff:33:bc:29:fe:09:ad: 28:e4:6e:cd:03:fa:9e:c6:3b:b1:dd:99:15:9e:21: e6:a7:45:c8:2e:40:69:99:36:ea:75:c9:a0:5a:fb: e3:e4:6c:eb:4a:0e:fc:b4:5d:77:5b:4f:36:40:32: c3:af:ef:d4:9f:2c:cd:85:04:d6:88:16:c8:de:69: 1c:0e:b8:e0:4d:a4:02:32:e9:a7:f9:53:d0:81:48: 68:b3:8e:1e:95:a0:23:27:3b:54:2a:26:b4:7e:53: 15:30:b8:e3:f4:f6:cc:e9:f1:7b:d2:a7:e3:1a:bf: d4:aa:56:e4:67:45:99:13:81:e6:a7:ca:37:09:e6: 18:26:5d:93:09:eb:4c:0d:35:83:30:dd:b9:82:e4: 4d:e9:00:b0:89:fc:ad:93:f3:90:41:08:8a:8a:3a: 9c:29:6e:41:3f:4f:11:85:37:85:92:49:78:3e:a5: 5e:23:3b:a6:f3:ef:8a:25:99:6b:ea:23:f6:5c:3a: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:65:88:40:14:5F:41:B0:AA:89:B1:6F:93:58:8D:E8:06:19:B4 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3e:3c:d2:34:9a:90:96:11:f6:6b:68:e8:cc:59:fe:92:ee: 3c:e4:fd:e4:23:97:77:ac:4a:46:44:f6:2f:1c:97:90:30:01: 58:7c:f6:7d:44:cf:f7:21:ad:d5:8e:ae:76:81:31:07:ed:25: 9b:10:90:c9:49:ed:4b:11:8f:41:f8:94:9e:d8:5c:01:50:bf: 55:55:2b:3b:4c:03:12:8c:de:ec:4b:c4:b2:c4:35:6a:47:60: 37:14:9a:4d:cf:d0:7d:f1:3a:66:dc:c7:1b:ed:a1:02:a2:d8: ca:11:1c:19:1b:4c:34:fb:6f:75:f1:1c:b0:8c:9f:25:cc:f5: 56:3c:95:44:ed:ae:ed:b5:4a:3d:f6:94:4b:ea:5d:09:ea:e0: 0f:36:2a:56:cf:ec:96:09:c8:6a:75:d0:43:f2:2b:bc:e8:e9: a0:7b:c5:12:bc:75:3c:45:24:67:6a:51:9e:ec:e9:b1:9f:b1: 22:e9:0d:5a:e5:d7:a0:fb:c8:7b:ac:d3:60:1e:ce:8d:e0:06: a9:33:0b:29:84:19:dd:10:83:fb:84:63:82:66:6c:5c:a8:b2: 2c:7f:b4:68:87:d3:a3:be:df:6a:ff:94:27:9e:d4:f2:5d:8c: bd:12:8c:ec:b8:24:7c:e2:6c:b4:14:d9:58:e5:a3:7f:1d:f9: 42:30:74:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwNTE0MTczMTIyWhcNMjUwNTIxMTczMTIyWjAYMRYwFAYD VQQDEw02ODI0ZDM2YS0zZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQAagdrEk4d6lRXs+NThiVPJCyplr/xthZiD8reV35Peszx7fTAD4clYIlbT Mz8YXj9FBqTu3vmfH/MqZGnEipdxX/8zvCn+Ca0o5G7NA/qexjux3ZkVniHmp0XI LkBpmTbqdcmgWvvj5GzrSg78tF13W082QDLDr+/UnyzNhQTWiBbI3mkcDrjgTaQC Mumn+VPQgUhos44elaAjJztUKia0flMVMLjj9PbM6fF70qfjGr/UqlbkZ0WZE4Hm p8o3CeYYJl2TCetMDTWDMN25guRN6QCwifytk/OQQQiKijqcKW5BP08RhTeFkkl4 PqVeIzum8++KJZlr6iP2XDpW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpfZYhA FF9BsKqJsW+TWI3oBhm0MB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfPjzSNJqQlhH2a2jozFn+ku485P3kI5d3rEpGRPYvHJeQMAFYfPZ9 RM/3Ia3Vjq52gTEH7SWbEJDJSe1LEY9B+JSe2FwBUL9VVSs7TAMSjN7sS8SyxDVq R2A3FJpNz9B98Tpm3Mcb7aECotjKERwZG0w0+2918RywjJ8lzPVWPJVE7a7ttUo9 9pRL6l0J6uAPNipWz+yWCchqddBD8iu86Omge8USvHU8RSRnalGe7Omxn7Ei6Q1a 5deg+8h7rNNgHs6N4AapMwsphBndEIP7hGOCZmxcqLIsf7Roh9Ojvt9q/5QnntTy XYy9EozsuCR84my0FNlY5aN/HflCMHTr -----END CERTIFICATE-----Generated at Thu May 15 07:06:37 2025 by rpki-client