$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: eDfwTt3IHAGlx0imQll7reFyVvhzG3h/wV8FuKe/lmE= Subject key identifier: E4:EB:BC:AF:E1:BC:54:D8:0A:95:F5:CF:2C:19:47:76:31:9C:E5:E0 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 04A4 Signing time: Thu 15 May 2025 00:02:07 +0000 Manifest this update: Thu 15 May 2025 00:02:07 +0000 Manifest next update: Thu 22 May 2025 00:02:07 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: S1RH/gUXWWiNId+WO1q9BqqH+U7XPrgk9SSBWMADA/8=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: May 15 00:02:07 2025 GMT Not After : May 22 00:02:07 2025 GMT Subject: CN=68252eff-3938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:bc:48:30:0e:a4:b9:64:68:aa:18:96:c1: 85:0e:4d:f7:80:42:38:98:cc:9e:e0:56:21:36:73: e7:50:01:20:8a:79:0c:94:99:56:53:96:7e:ea:6c: 61:57:f6:ff:17:c4:05:8c:84:13:ec:20:da:04:3f: 4c:ae:4b:1c:07:2d:0a:97:33:ef:3c:60:f4:47:af: 16:b1:1e:ac:12:15:6d:23:ee:3c:f2:04:a5:f0:0d: f3:52:76:0f:7b:1b:b9:63:59:79:76:0a:9a:5f:5a: f8:06:88:b0:7c:ee:19:77:90:54:0d:ef:d9:0c:75: fc:90:d7:06:52:7f:ba:f5:3f:17:25:e8:07:c5:73: 60:88:2f:c9:17:69:9a:e3:bb:ab:d1:d4:72:f1:23: e7:3a:f8:d2:bc:8b:97:d7:9d:07:0a:ec:f0:40:74: d4:ac:40:12:db:6a:fd:b4:7e:a7:72:fd:f5:a9:f1: b2:57:06:7c:95:00:4a:e5:eb:54:70:34:58:9e:bb: 9f:28:57:9a:84:63:64:f0:58:69:84:34:92:a7:88: 1c:dd:39:56:d7:53:0f:da:c2:8e:3c:b4:8e:34:ea: 6c:48:06:29:15:e9:5b:91:3d:30:e4:95:db:51:8b: f8:54:fd:2b:48:d7:8f:d6:03:58:fe:a6:35:cc:a0: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EB:BC:AF:E1:BC:54:D8:0A:95:F5:CF:2C:19:47:76:31:9C:E5:E0 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:65:46:61:d6:99:77:2a:c0:5c:f3:84:96:02:16:71:ef:23: 61:4d:9f:9b:9a:b9:58:64:04:17:d5:0a:a4:b0:43:0c:7b:1d: 50:ea:ed:7a:16:b9:36:cc:c9:f3:2b:3a:fb:0e:6f:a0:7b:3f: d4:03:c6:3c:3f:5b:5f:ad:eb:14:e1:d4:96:92:2c:6a:5e:9e: 79:78:6a:97:4d:e7:81:b1:00:1b:18:bf:d6:ba:8b:73:c7:51: c8:e0:ac:9c:53:1b:ba:36:e6:11:de:03:51:13:db:a0:d6:d4: cf:34:2a:2f:64:56:53:67:83:6e:91:53:a0:c0:7d:98:6c:e3: 70:59:69:a6:a3:42:31:28:cf:82:71:0a:74:08:be:e5:11:16: 9e:53:8a:d6:8a:d2:3f:e6:91:8e:8e:ed:25:e9:93:28:fb:a1: a5:fa:6a:43:be:21:88:82:72:72:c2:f9:21:d2:4a:61:2d:37: ef:62:4b:c4:bc:2d:f7:25:3c:ea:3f:b5:19:56:2d:23:fe:cb: 2a:69:ec:6e:ed:65:2b:ba:da:34:62:86:ec:9e:cd:82:9b:f3: 70:2c:28:cc:47:8f:e6:5f:e2:ed:64:72:22:6d:6e:1f:45:92: 5e:92:5c:0f:84:55:3a:39:58:9c:68:3b:c3:e1:eb:03:9c:2b: e1:e8:44:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUwNTE1MDAwMjA3WhcNMjUwNTIyMDAwMjA3WjAYMRYwFAYD VQQDEw02ODI1MmVmZi0zOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07q8SDAOpLlkaKoYlsGFDk33gEI4mMye4FYhNnPnUAEginkMlJlWU5Z+6mxh V/b/F8QFjIQT7CDaBD9MrkscBy0KlzPvPGD0R68WsR6sEhVtI+488gSl8A3zUnYP exu5Y1l5dgqaX1r4BoiwfO4Zd5BUDe/ZDHX8kNcGUn+69T8XJegHxXNgiC/JF2ma 47ur0dRy8SPnOvjSvIuX150HCuzwQHTUrEAS22r9tH6ncv31qfGyVwZ8lQBK5etU cDRYnrufKFeahGNk8FhphDSSp4gc3TlW11MP2sKOPLSONOpsSAYpFelbkT0w5JXb UYv4VP0rSNeP1gNY/qY1zKCqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTrvK/h vFTYCpX1zywZR3YxnOXgMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArZUZh1pl3KsBc84SWAhZx7yNhTZ+bmrlYZAQX1QqksEMMex1Q6u16 Frk2zMnzKzr7Dm+gez/UA8Y8P1tfresU4dSWkixqXp55eGqXTeeBsQAbGL/Wuotz x1HI4KycUxu6NuYR3gNRE9ug1tTPNCovZFZTZ4NukVOgwH2YbONwWWmmo0IxKM+C cQp0CL7lERaeU4rWitI/5pGOju0l6ZMo+6Gl+mpDviGIgnJywvkh0kphLTfvYkvE vC33JTzqP7UZVi0j/ssqaexu7WUruto0Yobsns2Cm/NwLCjMR4/mX+LtZHIibW4f RZJeklwPhFU6OVicaDvD4esDnCvh6ETN -----END CERTIFICATE-----Generated at Fri May 16 03:16:52 2025 by rpki-client