$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: /AOQcHN4slWvWmNHdK+kBNOfTd+Orhslrb9CnRwO+l4= Subject key identifier: 62:E1:AE:D7:E4:4C:C9:7E:DA:C9:45:17:E3:AA:FF:D7:53:1A:A6:12 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0122 Signing time: Tue 13 May 2025 03:54:48 +0000 Manifest this update: Tue 13 May 2025 03:54:48 +0000 Manifest next update: Tue 20 May 2025 03:54:48 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: 9jqD888eX7eprR/iedurxvJtHWf2jCsbKG2cmrc6Mw0=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: May 13 03:54:48 2025 GMT Not After : May 20 03:54:48 2025 GMT Subject: CN=6822c288-9370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:98:9a:07:c3:99:cf:20:85:b2:74:f2:3b: 79:73:5a:33:c6:ea:f3:44:7b:b4:3d:ef:47:cd:4a: 11:a1:41:0e:0b:2a:e1:af:22:b3:c6:92:10:e7:0c: 9d:c8:83:2c:f1:87:f4:f9:d7:fd:5f:9c:f8:5b:52: 01:48:62:26:8d:23:77:c0:ce:35:91:e1:c0:44:0f: 79:97:0a:21:e3:0b:16:ea:55:c8:f0:fb:d2:3f:c2: 0a:a0:9c:65:e9:fc:16:50:4e:2d:4e:a2:dc:72:1d: 7e:e5:c9:05:d7:92:5a:1b:e2:ec:3a:9e:ba:28:4d: 3c:74:48:e5:66:fe:3f:1a:74:d5:94:4a:46:4a:62: 8b:5c:c6:b7:14:64:3a:4f:70:e0:48:66:93:7d:c1: 54:74:29:a4:50:f5:48:f8:2e:2c:8a:d8:23:14:b6: 62:e5:fb:06:75:2b:82:39:9b:64:f4:6b:39:bc:c8: 8e:8e:2c:1b:b9:a2:d8:d4:f5:d0:90:d6:a8:44:9e: 9c:30:1d:3d:28:d4:be:2b:eb:f0:0a:75:43:e3:13: 4f:ac:8b:1f:92:6a:81:aa:44:18:f6:36:71:70:84: 3e:e3:e0:a9:80:6a:2b:a4:44:fa:f4:f0:74:82:7a: e2:d5:14:80:c6:7b:ec:91:be:b1:a9:e9:46:70:ac: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E1:AE:D7:E4:4C:C9:7E:DA:C9:45:17:E3:AA:FF:D7:53:1A:A6:12 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cb:15:be:8d:f2:6f:f9:4a:97:9c:80:a3:23:82:bb:08:be: 64:a8:a7:0c:92:f3:d4:8c:48:f5:cc:68:39:5c:12:af:3c:30: 6c:57:af:cf:17:2e:b8:87:79:32:e0:00:9b:81:e8:19:27:3e: 76:38:12:60:81:e7:3f:6e:b2:10:44:6f:13:c5:6e:a9:5b:39: 5f:73:fd:d1:9d:9e:7b:e4:3f:7d:66:4f:74:ed:78:6a:62:39: e8:0a:89:25:ae:2c:e2:8b:bf:c1:de:6e:d2:23:dc:99:25:7b: 40:7a:a5:4e:61:54:bb:18:92:8f:12:0c:e4:b4:80:39:57:08: 48:d1:db:b4:bf:52:a1:97:4f:0b:0b:10:3f:54:80:67:91:4e: c6:45:88:ef:99:7d:7e:01:ca:ed:4c:e6:39:82:61:64:cf:dd: 64:e5:6c:af:cb:54:9b:59:cd:d8:2a:96:c7:20:3c:13:f9:36: b9:d5:e4:06:85:47:6b:41:5a:d0:18:99:1c:64:8b:7a:ed:d0: 0b:76:59:09:e8:0f:60:5a:3c:da:61:8c:df:8e:cf:2e:98:95: da:17:7b:c4:d5:57:b2:09:56:74:d5:54:4f:0d:c9:7d:87:1c: 69:94:8b:15:d0:c4:53:6b:2b:2b:0e:70:bd:6b:e8:a8:ff:3a: c9:cc:33:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwNTEzMDM1NDQ4WhcNMjUwNTIwMDM1NDQ4WjAYMRYwFAYD VQQDEw02ODIyYzI4OC05MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38uYmgfDmc8ghbJ08jt5c1ozxurzRHu0Pe9HzUoRoUEOCyrhryKzxpIQ5wyd yIMs8Yf0+df9X5z4W1IBSGImjSN3wM41keHARA95lwoh4wsW6lXI8PvSP8IKoJxl 6fwWUE4tTqLcch1+5ckF15JaG+LsOp66KE08dEjlZv4/GnTVlEpGSmKLXMa3FGQ6 T3DgSGaTfcFUdCmkUPVI+C4sitgjFLZi5fsGdSuCOZtk9Gs5vMiOjiwbuaLY1PXQ kNaoRJ6cMB09KNS+K+vwCnVD4xNPrIsfkmqBqkQY9jZxcIQ+4+CpgGorpET69PB0 gnri1RSAxnvskb6xqelGcKyGHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLhrtfk TMl+2slFF+Oq/9dTGqYSMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFyxW+jfJv+UqXnICjI4K7CL5kqKcMkvPUjEj1zGg5XBKvPDBsV6/P Fy64h3ky4ACbgegZJz52OBJggec/brIQRG8TxW6pWzlfc/3RnZ575D99Zk907Xhq YjnoCoklrizii7/B3m7SI9yZJXtAeqVOYVS7GJKPEgzktIA5VwhI0du0v1Khl08L CxA/VIBnkU7GRYjvmX1+AcrtTOY5gmFkz91k5Wyvy1SbWc3YKpbHIDwT+Ta51eQG hUdrQVrQGJkcZIt67dALdlkJ6A9gWjzaYYzfjs8umJXaF3vE1VeyCVZ01VRPDcl9 hxxplIsV0MRTaysrDnC9a+io/zrJzDOn -----END CERTIFICATE-----Generated at Wed May 14 10:38:44 2025 by rpki-client