$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: XXE0+CHSYlm3YCJJcU0GTAfp2SleBHJwVKCQjZkRzQg= Subject key identifier: 0F:7E:95:65:C7:37:15:42:5F:45:C0:9C:D5:14:3D:EE:7F:C9:1B:C0 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 011B Signing time: Sun 11 May 2025 03:40:57 +0000 Manifest this update: Sun 11 May 2025 03:40:56 +0000 Manifest next update: Sun 18 May 2025 03:40:56 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: TsGzVSTjDaIIOEncpM7pbM4tjZ58hi2tPRN4wBaF+sw=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: May 11 03:40:56 2025 GMT Not After : May 18 03:40:56 2025 GMT Subject: CN=68201c49-e8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:24:3f:09:6c:5d:6a:cf:04:af:92:e3:34: 24:18:c7:77:1e:eb:f4:23:11:d9:a6:c0:6d:a8:85: 8b:9b:21:9a:e8:a2:bd:f1:df:17:f1:ba:1d:4d:be: 66:61:e5:f6:94:9c:ea:d3:5f:05:28:33:22:84:24: 65:7d:76:e1:10:eb:e3:e9:4b:6a:24:f2:21:a3:fe: 87:8b:d2:c7:fa:8e:c1:fe:77:a8:8d:fb:c6:96:f9: 82:d7:33:f1:b4:a7:ea:a6:ae:59:98:e0:20:98:68: bd:79:dc:c9:7d:55:b3:c0:13:35:b1:d5:80:31:88: 07:de:f3:43:bc:06:06:b2:40:4b:98:d6:dd:f2:05: 83:37:ea:9a:cf:5c:87:00:77:b8:cc:69:1c:05:10: f7:c8:95:bb:cd:f6:c5:2e:4e:8a:d2:1e:87:cc:62: c9:b6:1d:b3:fd:84:f8:bf:7c:55:66:30:78:ff:98: c1:09:b4:cc:58:45:44:84:b0:08:fc:34:82:46:33: 7a:e8:8d:ca:e4:09:c2:53:d7:b4:d6:28:24:37:02: 19:4f:85:2a:0f:b3:7d:e0:29:28:a1:25:39:31:12: d3:74:fc:aa:05:ed:af:0d:a2:4e:9c:81:74:e5:d5: 93:7a:23:47:8f:d5:50:e8:e6:67:42:ee:8c:c8:1c: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:95:65:C7:37:15:42:5F:45:C0:9C:D5:14:3D:EE:7F:C9:1B:C0 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6a:7a:d2:cd:11:9b:19:36:0f:08:7e:1e:01:ff:59:d9:1a: 78:eb:78:ad:0d:99:16:98:71:8a:ac:be:ad:7c:4b:2d:dd:71: 60:43:5e:b1:04:cc:31:7b:b4:b7:7c:14:d7:89:53:82:18:bf: 1a:11:bd:8c:29:8b:46:aa:d9:18:55:91:15:41:e0:a0:e6:54: 8c:81:9d:df:c0:ba:61:1b:9f:f3:8e:98:8b:dc:7a:c6:0e:aa: 95:73:21:19:08:0c:dc:b5:f1:57:af:75:4e:49:1e:b9:fa:b8: f0:c3:29:64:30:8a:84:43:a6:85:72:ee:46:99:71:e1:11:57: 9b:d9:f9:94:6e:b6:de:2d:c7:de:ef:c5:6d:f0:33:af:22:1d: 47:38:13:a6:87:9b:ca:1f:16:6a:bb:15:14:7c:df:a5:08:97: 17:30:47:45:08:0e:b1:a2:2f:b0:30:c0:30:1e:2b:9c:8a:ad: e9:77:f7:ca:90:c1:2c:b3:b4:b3:dc:c0:df:66:a5:cf:7a:73: 26:f5:36:de:b6:bf:b4:21:62:cb:f5:3d:9b:d5:5c:b0:c6:73: 65:2f:bd:b3:5e:e7:f3:bd:99:7b:9b:f6:fc:24:88:9c:60:a0: 6b:21:d4:a7:4c:f0:a8:ac:72:ec:a0:5b:a2:dd:02:e3:68:36: d0:ba:57:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjUwNTExMDM0MDU2WhcNMjUwNTE4MDM0MDU2WjAYMRYwFAYD VQQDEw02ODIwMWM0OS1lOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuIkPwlsXWrPBK+S4zQkGMd3Huv0IxHZpsBtqIWLmyGa6KK98d8X8bodTb5m YeX2lJzq018FKDMihCRlfXbhEOvj6UtqJPIho/6Hi9LH+o7B/neojfvGlvmC1zPx tKfqpq5ZmOAgmGi9edzJfVWzwBM1sdWAMYgH3vNDvAYGskBLmNbd8gWDN+qaz1yH AHe4zGkcBRD3yJW7zfbFLk6K0h6HzGLJth2z/YT4v3xVZjB4/5jBCbTMWEVEhLAI /DSCRjN66I3K5AnCU9e01igkNwIZT4UqD7N94CkooSU5MRLTdPyqBe2vDaJOnIF0 5dWTeiNHj9VQ6OZnQu6MyBwCCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9+lWXH NxVCX0XAnNUUPe5/yRvAMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnanrSzRGbGTYPCH4eAf9Z2Rp463itDZkWmHGKrL6tfEst3XFgQ16x BMwxe7S3fBTXiVOCGL8aEb2MKYtGqtkYVZEVQeCg5lSMgZ3fwLphG5/zjpiL3HrG DqqVcyEZCAzctfFXr3VOSR65+rjwwylkMIqEQ6aFcu5GmXHhEVeb2fmUbrbeLcfe 78Vt8DOvIh1HOBOmh5vKHxZquxUUfN+lCJcXMEdFCA6xoi+wMMAwHiuciq3pd/fK kMEss7Sz3MDfZqXPenMm9Tbetr+0IWLL9T2b1VywxnNlL72zXufzvZl7m/b8JIic YKBrIdSnTPCorHLsoFui3QLjaDbQulcZ -----END CERTIFICATE-----Generated at Sun May 11 15:22:27 2025 by rpki-client