$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: 9FyXy957QrksYT0yPeCeOANKS5d6oc8uc58595tu6FM= Subject key identifier: 98:C3:C6:DD:C2:3C:56:49:D6:D8:97:5F:3F:47:64:63:13:A1:13:60 Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 0114 Signing time: Fri 09 May 2025 04:02:07 +0000 Manifest this update: Fri 09 May 2025 04:02:06 +0000 Manifest next update: Fri 16 May 2025 04:02:06 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: WIzb6kFIIX32rpuf95V1OCZTN28osqveQPE9FxUbsiI=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: May 9 04:02:06 2025 GMT Not After : May 16 04:02:06 2025 GMT Subject: CN=681d7e3e-a642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:82:49:09:9d:a5:8f:4a:b7:33:73:cf:3d: 81:43:75:57:80:a3:e9:e4:35:a9:21:7e:77:1c:55: de:3b:39:30:b5:b1:a4:07:e5:88:5a:f8:26:33:f8: 89:c0:73:92:dc:18:fd:33:39:38:81:26:28:cb:19: ba:1e:14:02:27:19:06:b8:0b:a0:5a:a9:77:61:b9: 39:a1:aa:ae:8b:70:ba:5e:ea:df:61:20:b4:3a:5c: f8:b5:9c:77:4d:82:52:9e:ae:43:1e:0a:c9:6e:28: a6:7c:6f:db:bc:d7:b8:29:24:03:04:a8:87:f6:92: d1:6f:fb:f8:42:ac:5a:bc:b4:04:b7:b7:69:b8:97: 83:7d:49:3e:59:80:6f:6d:47:bd:63:3f:79:31:95: 7c:d6:33:fc:fc:c0:22:0d:ab:8d:22:24:e5:67:fd: ee:75:1a:42:a3:09:1b:d3:21:7f:a4:74:6f:94:2b: eb:25:0b:83:1f:16:38:5c:2e:0a:a3:cc:2d:d8:76: 21:e7:44:da:7e:31:2c:f3:c6:14:d1:23:9f:58:51: 75:83:e0:67:c1:d2:48:e5:d8:01:ae:4d:76:1a:b2: 80:0a:02:c2:13:75:40:5c:16:ff:ad:93:88:51:f6: 44:f4:b6:d9:3a:4b:5f:94:dd:07:aa:d9:77:a2:f7: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C3:C6:DD:C2:3C:56:49:D6:D8:97:5F:3F:47:64:63:13:A1:13:60 X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:07:bb:5f:1b:f4:a5:15:5a:f5:10:66:f5:d9:11:e2:96:b4: 33:e5:43:c7:14:79:f3:8c:71:90:a6:69:e0:d6:f6:43:b8:23: eb:22:a4:9a:b8:4c:11:9f:fe:13:b1:c7:7f:b8:3c:a8:0d:da: a4:65:44:d7:01:54:e7:33:05:f1:50:cd:bb:c8:a8:27:cb:8e: 74:8f:24:9d:f5:f2:d9:93:f7:8f:2a:5b:ea:3a:7d:5b:2c:cc: 0f:cb:0d:0d:82:f0:f2:5a:bc:d9:4c:ce:f3:2b:24:95:2c:5f: 70:5f:8f:f0:0d:e5:8c:af:81:3e:0a:15:b1:1e:1c:22:3d:5f: 51:40:49:3b:56:84:b3:2c:69:6e:12:6a:32:f9:eb:f7:b6:40: 28:99:59:66:c8:6a:24:d0:5c:ad:93:cd:07:e9:21:1f:9c:1e: 1a:6c:1d:01:8d:62:db:5b:70:cc:22:9c:40:53:60:98:3d:a4: 14:3f:db:3e:80:5d:00:92:3e:5f:8a:8f:55:11:26:5b:d3:89: 69:18:a9:db:3f:7f:a3:b7:4c:1b:7e:2a:dd:47:57:2b:19:29: dd:b5:76:f7:ad:07:8c:8e:64:93:3c:7e:41:d2:a6:78:2e:b1: b6:92:c3:51:32:2c:37:a8:13:78:e1:cb:42:2f:d4:9b:65:87: ff:4a:d9:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjUwNTA5MDQwMjA2WhcNMjUwNTE2MDQwMjA2WjAYMRYwFAYD VQQDEw02ODFkN2UzZS1hNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNmCSQmdpY9KtzNzzz2BQ3VXgKPp5DWpIX53HFXeOzkwtbGkB+WIWvgmM/iJ wHOS3Bj9Mzk4gSYoyxm6HhQCJxkGuAugWql3Ybk5oaqui3C6XurfYSC0Olz4tZx3 TYJSnq5DHgrJbiimfG/bvNe4KSQDBKiH9pLRb/v4QqxavLQEt7dpuJeDfUk+WYBv bUe9Yz95MZV81jP8/MAiDauNIiTlZ/3udRpCowkb0yF/pHRvlCvrJQuDHxY4XC4K o8wt2HYh50TafjEs88YU0SOfWFF1g+BnwdJI5dgBrk12GrKACgLCE3VAXBb/rZOI UfZE9LbZOktflN0Hqtl3ovdKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjDxt3C PFZJ1tiXXz9HZGMToRNgMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArB7tfG/SlFVr1EGb12RHilrQz5UPHFHnzjHGQpmng1vZDuCPrIqSa uEwRn/4Tscd/uDyoDdqkZUTXAVTnMwXxUM27yKgny450jySd9fLZk/ePKlvqOn1b LMwPyw0NgvDyWrzZTM7zKySVLF9wX4/wDeWMr4E+ChWxHhwiPV9RQEk7VoSzLGlu Emoy+ev3tkAomVlmyGok0Fytk80H6SEfnB4abB0BjWLbW3DMIpxAU2CYPaQUP9s+ gF0Akj5fio9VESZb04lpGKnbP3+jt0wbfirdR1crGSndtXb3rQeMjmSTPH5B0qZ4 LrG2ksNRMiw3qBN44ctCL9SbZYf/StmP -----END CERTIFICATE-----Generated at Fri May 9 07:23:05 2025 by rpki-client