$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: wj4VFH9S7emMPS1gt8S5kkWrBUpUuFxn6Sp0MxiPYLs= Subject key identifier: B5:48:61:A5:84:B5:11:8A:80:6F:CB:03:29:BF:88:97:CC:8F:82:FE Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 08C5 Signing time: Mon 12 May 2025 20:18:57 +0000 Manifest this update: Mon 12 May 2025 20:18:56 +0000 Manifest next update: Mon 19 May 2025 20:18:56 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: PCmlAPxayJ+g2gwtP/N9POZFDjip3WUsQBXjKJrsjIY=) 2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=) 3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455, serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: May 12 20:18:56 2025 GMT Not After : May 19 20:18:56 2025 GMT Subject: CN=682257b1-18ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:66:08:30:51:5d:e4:29:39:0d:e7:57:70: 55:14:30:19:bf:72:78:ea:35:bc:63:2a:64:47:9d: 52:1f:82:45:1a:10:61:95:db:12:cc:78:55:1a:73: 89:29:5d:55:df:71:03:51:2f:09:03:39:74:5f:18: 12:22:1a:54:ae:2f:fd:0d:03:97:ce:9f:d1:46:21: e0:10:a1:4f:cc:b1:d9:16:9b:55:1e:3d:da:26:fc: fb:20:35:06:50:98:c6:fa:2f:17:d5:5d:41:3e:2a: 95:ca:cf:b8:28:d9:31:fd:1e:66:cb:f6:3c:12:07: 50:fd:19:f0:f1:0f:e3:91:4f:db:91:69:85:bf:18: d6:1f:46:b7:4b:d1:bc:0c:4c:a7:4a:f4:e8:5d:ec: 4f:95:cc:8f:0b:ea:17:6b:f0:13:a2:36:3b:e4:3f: f8:8d:b5:c6:1a:2b:6c:c6:c7:51:4c:18:16:3d:d4: 13:a8:70:48:3b:29:a3:66:37:3d:57:47:d0:c9:9a: d7:0a:92:6d:94:01:90:3e:a7:d0:47:1c:90:54:ff: 31:2b:7c:0d:da:09:24:8d:17:9e:16:64:19:4c:34: d5:aa:54:3a:93:33:05:a2:95:fc:50:46:7c:16:e1: a0:18:54:c1:0a:38:fa:72:84:d5:b3:7c:d3:67:f5: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:48:61:A5:84:B5:11:8A:80:6F:CB:03:29:BF:88:97:CC:8F:82:FE X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:da:53:08:b3:aa:b0:09:de:c3:c8:b3:dc:ca:7f:43:e5:a3: 58:c4:a3:46:ef:17:10:ad:7e:15:06:82:18:37:a9:ba:99:55: 43:56:ac:a0:00:71:e2:02:c4:49:f8:37:ba:67:1a:46:0b:75: 3b:8c:e6:c0:98:23:33:a3:7f:f2:91:96:ac:6c:4b:cf:ec:f5: 0e:c3:11:89:ae:be:94:09:11:42:d0:1e:af:c6:67:de:dc:9a: bf:71:6b:ce:d4:20:cf:ca:a2:de:92:30:07:c2:f1:b3:5e:22: 4a:be:7d:6c:11:f6:aa:b7:35:d1:40:bf:0c:74:aa:01:25:04: fc:64:fa:06:8c:5b:b6:70:28:01:8b:e8:f8:6e:5b:9c:8f:02: d9:22:7a:5c:33:c8:06:bb:2c:2f:2a:3e:97:36:7f:9b:4b:46: 9d:63:34:2d:dc:45:12:d1:58:66:7b:cb:f7:db:86:64:b5:27: da:8d:c2:57:23:fa:6d:72:51:93:db:42:00:d3:14:2c:a1:0c: 0b:88:ec:bb:15:69:69:50:0a:6b:0c:4f:e2:65:75:69:eb:aa: a6:b5:44:7c:8e:8d:fa:14:e8:9b:a1:e5:21:5b:f0:1f:2f:04: 12:66:1d:22:41:7e:dd:fc:b3:07:b1:82:84:ff:b8:96:5c:f4: cd:0d:fb:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjUwNTEyMjAxODU2WhcNMjUwNTE5MjAxODU2WjAYMRYwFAYD VQQDEw02ODIyNTdiMS0xOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyspmCDBRXeQpOQ3nV3BVFDAZv3J46jW8YypkR51SH4JFGhBhldsSzHhVGnOJ KV1V33EDUS8JAzl0XxgSIhpUri/9DQOXzp/RRiHgEKFPzLHZFptVHj3aJvz7IDUG UJjG+i8X1V1BPiqVys+4KNkx/R5my/Y8EgdQ/Rnw8Q/jkU/bkWmFvxjWH0a3S9G8 DEynSvToXexPlcyPC+oXa/ATojY75D/4jbXGGitsxsdRTBgWPdQTqHBIOymjZjc9 V0fQyZrXCpJtlAGQPqfQRxyQVP8xK3wN2gkkjReeFmQZTDTVqlQ6kzMFopX8UEZ8 FuGgGFTBCjj6coTVs3zTZ/WkJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVIYaWE tRGKgG/LAym/iJfMj4L+MB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62lMIs6qwCd7DyLPcyn9D5aNYxKNG7xcQrX4VBoIYN6m6mVVDVqyg AHHiAsRJ+De6ZxpGC3U7jObAmCMzo3/ykZasbEvP7PUOwxGJrr6UCRFC0B6vxmfe 3Jq/cWvO1CDPyqLekjAHwvGzXiJKvn1sEfaqtzXRQL8MdKoBJQT8ZPoGjFu2cCgB i+j4blucjwLZInpcM8gGuywvKj6XNn+bS0adYzQt3EUS0Vhme8v324ZktSfajcJX I/ptclGT20IA0xQsoQwLiOy7FWlpUAprDE/iZXVp66qmtUR8jo36FOiboeUhW/Af LwQSZh0iQX7d/LMHsYKE/7iWXPTNDfuj -----END CERTIFICATE-----Generated at Mon May 12 23:05:59 2025 by rpki-client