$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json) Hash identifier: 2Ueu+bHHWT1I22ioUKWaUBzLVbm+cGHz3HECEKe+jPc= Subject key identifier: 79:17:45:6E:25:8B:97:BF:07:36:E6:D8:1A:7A:55:8D:AC:A7:86:E1 Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft Manifest number: 0348 Signing time: Mon 12 May 2025 22:14:16 +0000 Manifest this update: Mon 12 May 2025 22:14:16 +0000 Manifest next update: Mon 19 May 2025 22:14:16 +0000 Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: X+Cs/FjXw4EOnfMPmI51G+VLlm6FZ+7gEDXbtNkMP9o=) 2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Validity Not Before: May 12 22:14:16 2025 GMT Not After : May 19 22:14:16 2025 GMT Subject: CN=682272b8-83c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:5d:6b:4e:51:b0:f4:3d:dd:90:4a:33:7b: 3c:de:f7:43:72:9f:af:d2:fb:fe:b2:50:c3:bd:78: 6e:a6:7d:e0:ff:17:71:f3:37:8a:a8:d3:37:99:c3: 97:a6:2b:80:4c:76:d6:29:12:6c:2e:b3:5b:7e:25: f2:42:14:70:90:1c:93:c2:4e:7d:d9:3f:cc:6d:5b: 9a:63:34:c7:f5:95:30:f3:71:29:88:3c:27:b9:bb: 3a:a6:cf:d2:4c:22:85:89:cd:28:f9:14:03:4e:49: 71:40:78:5d:45:40:0d:25:e6:49:a3:f7:dc:09:48: 01:bd:ce:d9:65:89:7a:9a:68:bc:65:7a:c4:b8:45: 61:7e:2e:b5:84:a3:8a:be:18:5f:76:d2:47:02:b4: 34:60:ee:4c:7b:e1:24:b2:a0:f7:44:0d:ee:c8:57: 92:00:40:27:2a:71:31:59:da:3a:8f:77:a1:0a:db: 28:c0:70:ee:a3:d6:00:81:13:fa:b4:4a:dc:17:37: a7:58:b3:90:4f:63:d5:07:d9:d3:50:03:47:d1:27: d2:38:d5:00:db:f9:3c:12:dc:0c:42:14:4e:2f:1d: d4:02:8d:50:ed:d8:17:c2:50:f6:57:b7:ca:ff:e6: 98:ba:97:37:e2:6d:04:da:79:86:3b:b9:4f:74:e0: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:45:6E:25:8B:97:BF:07:36:E6:D8:1A:7A:55:8D:AC:A7:86:E1 X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:e6:ee:9e:07:97:78:ec:94:31:8e:61:eb:be:80:de:89: 09:8a:50:e3:45:35:2d:ab:f4:63:63:90:07:8d:a7:17:2c:dd: 2d:2c:01:96:0a:dc:95:e9:b2:8a:d4:c8:0e:ae:ec:92:27:23: 87:82:be:f8:99:20:26:44:69:11:4b:bd:bc:31:b7:ea:d3:42: ad:0a:c2:ec:9d:35:31:11:86:79:04:20:bb:5d:fe:b9:cb:e5: c1:12:07:96:83:41:c9:2c:b7:2c:69:09:34:23:c8:58:a0:fe: 00:47:27:c7:43:a7:ea:1d:e6:e8:a9:7c:71:2e:5f:48:5b:6d: 64:3d:8f:3d:70:4f:d2:d3:2d:b0:e2:9c:65:e3:54:54:c1:34: 37:53:9b:77:af:64:be:7a:69:5b:4d:2a:2a:5b:e7:61:a7:44: 77:17:a2:b9:e8:12:7f:6f:68:d5:41:83:55:54:5f:2f:f5:3e: 0e:90:ea:e1:ba:22:bf:29:fd:64:f8:74:69:60:5a:04:6f:eb: 37:1d:7a:22:4f:ce:18:1b:1e:a0:6c:fd:3b:cc:ba:1e:e4:72: ec:da:1b:cb:9c:51:6a:b9:bc:b1:ba:24:0a:bf:86:45:30:51: 28:c9:80:08:f1:1b:d8:5d:d0:1e:d0:7c:1c:e7:1b:c8:79:cd: cc:a7:36:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjUwNTEyMjIxNDE2WhcNMjUwNTE5MjIxNDE2WjAYMRYwFAYD VQQDEw02ODIyNzJiOC04M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMZda05RsPQ93ZBKM3s83vdDcp+v0vv+slDDvXhupn3g/xdx8zeKqNM3mcOX piuATHbWKRJsLrNbfiXyQhRwkByTwk592T/MbVuaYzTH9ZUw83EpiDwnubs6ps/S TCKFic0o+RQDTklxQHhdRUANJeZJo/fcCUgBvc7ZZYl6mmi8ZXrEuEVhfi61hKOK vhhfdtJHArQ0YO5Me+EksqD3RA3uyFeSAEAnKnExWdo6j3ehCtsowHDuo9YAgRP6 tErcFzenWLOQT2PVB9nTUANH0SfSONUA2/k8EtwMQhROLx3UAo1Q7dgXwlD2V7fK /+aYupc34m0E2nmGO7lPdOC9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkXRW4l i5e/Bzbm2Bp6VY2sp4bhMB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9CRjFFNzExOEJBQzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1Vv cnFRaExNN2JjcFlUcVpGVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbebungeXeOyUMY5h676A3okJilDjRTUtq/RjY5AHjacXLN0tLAGW CtyV6bKK1MgOruySJyOHgr74mSAmRGkRS728Mbfq00KtCsLsnTUxEYZ5BCC7Xf65 y+XBEgeWg0HJLLcsaQk0I8hYoP4ARyfHQ6fqHeboqXxxLl9IW21kPY89cE/S0y2w 4pxl41RUwTQ3U5t3r2S+emlbTSoqW+dhp0R3F6K56BJ/b2jVQYNVVF8v9T4OkOrh uiK/Kf1k+HRpYFoEb+s3HXoiT84YGx6gbP07zLoe5HLs2hvLnFFqubyxuiQKv4ZF MFEoyYAI8RvYXdAe0Hwc5xvIec3MpzZc -----END CERTIFICATE-----Generated at Wed May 14 09:23:48 2025 by rpki-client