$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: oal6Ati27I54cbO1h98hPMhcrZMHoAb87YbvqXpmxKg= Subject key identifier: D3:02:7A:3E:5D:78:7A:51:ED:2F:FE:1B:9D:B6:9A:8C:03:AF:5C:A6 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0C96 Signing time: Mon 12 May 2025 18:05:20 +0000 Manifest this update: Mon 12 May 2025 18:05:20 +0000 Manifest next update: Mon 19 May 2025 18:05:20 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: kabicppFRVkKkaEjVg8SRV5UTNxx0DAIoITdrRZZUqM=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: May 12 18:05:20 2025 GMT Not After : May 19 18:05:20 2025 GMT Subject: CN=68223860-f404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:18:6d:10:a6:9c:34:50:dd:27:5c:fe:7b: 40:a3:ba:db:93:a9:3a:f8:b0:93:c2:55:c6:3f:43: 8c:33:5e:9c:11:ca:ef:41:65:b1:74:3e:82:c6:5f: ca:fc:25:03:ba:21:3c:da:9a:4b:9a:99:dc:4a:98: 21:21:09:30:18:81:47:49:ae:0b:76:26:b4:2f:f4: 1d:69:a8:22:24:b3:bc:4c:3a:65:78:f6:e0:f7:e7: fd:08:3a:a9:6f:db:7d:d4:a0:17:68:79:2d:37:3e: c0:a6:3c:25:a4:73:51:a3:4d:54:4d:0b:d4:29:9d: 54:21:27:a0:4e:7b:ee:25:db:24:1b:eb:2e:cf:6f: c5:ff:04:9b:c3:1a:90:ae:80:23:19:cd:1f:8b:22: 43:53:ff:ce:c2:b3:8a:d3:a0:bb:7c:a2:7b:fe:61: 02:13:f2:4e:92:53:20:2c:59:33:f7:65:d3:40:71: 82:a3:b0:a9:53:a9:ee:ff:d1:5f:35:22:87:9c:a9: 89:4e:86:12:38:d1:39:a2:cc:96:79:bb:59:75:b9: bd:d0:26:f7:95:27:94:c8:80:2c:6e:4d:c0:ef:a4: 92:81:2f:e3:ac:ae:22:b9:db:bf:a0:7c:f5:0e:d1: 8b:45:d1:a5:a4:0e:f2:fa:79:64:91:23:e8:f6:b9: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:02:7A:3E:5D:78:7A:51:ED:2F:FE:1B:9D:B6:9A:8C:03:AF:5C:A6 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1e:a6:f5:6f:5d:5d:2a:c2:a7:ba:e2:21:70:e4:e1:b8:4f: 0e:ae:9a:95:a3:c7:57:8b:a5:04:22:37:49:1e:e2:ad:7d:46: 1d:31:80:e2:f7:2b:f9:43:ea:18:43:5a:36:c4:6b:d4:74:2c: 53:32:5d:c8:85:5e:64:77:46:dd:24:74:4e:74:d4:e4:e1:c6: ba:68:ee:86:f2:c6:20:cf:1a:90:7e:5b:01:5b:19:ff:53:a8: ef:6f:ea:46:c0:cc:ed:c7:4b:15:d5:7a:9d:63:70:55:b1:1e: e1:62:6f:4b:18:7c:51:99:04:a3:1e:e1:82:c6:f4:9d:e6:db: 34:72:06:5e:e3:f7:32:86:ab:6a:53:c0:eb:a6:57:0d:85:fb: 67:dc:dc:df:27:27:74:a7:7c:b1:bf:82:2f:db:28:94:ee:f9: bb:fc:9e:0f:95:5b:27:14:73:4f:9a:21:94:af:e9:cd:f9:73: 14:e9:a0:17:26:b5:35:60:b4:65:f3:fa:bb:09:43:0e:09:f7: e0:9a:3a:35:19:47:cf:38:05:5a:b6:fc:d2:cd:05:96:55:19: fe:58:c6:99:3c:bf:f3:d4:6c:b0:98:c2:be:eb:66:e5:7a:ac: ec:41:a1:63:e7:4e:ec:89:4a:51:2f:86:5b:8f:bd:62:6a:2b: af:86:f1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUwNTEyMTgwNTIwWhcNMjUwNTE5MTgwNTIwWjAYMRYwFAYD VQQDEw02ODIyMzg2MC1mNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0AYbRCmnDRQ3Sdc/ntAo7rbk6k6+LCTwlXGP0OMM16cEcrvQWWxdD6Cxl/K /CUDuiE82ppLmpncSpghIQkwGIFHSa4Ldia0L/QdaagiJLO8TDplePbg9+f9CDqp b9t91KAXaHktNz7ApjwlpHNRo01UTQvUKZ1UISegTnvuJdskG+suz2/F/wSbwxqQ roAjGc0fiyJDU//OwrOK06C7fKJ7/mECE/JOklMgLFkz92XTQHGCo7CpU6nu/9Ff NSKHnKmJToYSONE5osyWebtZdbm90Cb3lSeUyIAsbk3A76SSgS/jrK4iudu/oHz1 DtGLRdGlpA7y+nlkkSPo9rk9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMCej5d eHpR7S/+G522mowDr1ymMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADHqb1b11dKsKnuuIhcOThuE8OrpqVo8dXi6UEIjdJHuKtfUYdMYDi 9yv5Q+oYQ1o2xGvUdCxTMl3IhV5kd0bdJHROdNTk4ca6aO6G8sYgzxqQflsBWxn/ U6jvb+pGwMztx0sV1XqdY3BVsR7hYm9LGHxRmQSjHuGCxvSd5ts0cgZe4/cyhqtq U8DrplcNhftn3NzfJyd0p3yxv4Iv2yiU7vm7/J4PlVsnFHNPmiGUr+nN+XMU6aAX JrU1YLRl8/q7CUMOCffgmjo1GUfPOAVatvzSzQWWVRn+WMaZPL/z1GywmMK+62bl eqzsQaFj507siUpRL4Zbj71iaiuvhvH2 -----END CERTIFICATE-----Generated at Wed May 14 03:23:27 2025 by rpki-client