$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: B0LUkbueYiYRG/xgNuc6+rG6fw6cy2xIMfT0oL51sWE= Subject key identifier: 7D:21:A6:FF:0C:16:4E:37:28:32:CD:34:7B:9B:2E:85:73:ED:44:22 Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 34A2 Signing time: Sun 04 May 2025 15:17:20 +0000 Manifest this update: Sun 04 May 2025 15:17:20 +0000 Manifest next update: Sun 11 May 2025 15:17:20 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 0qExSknhYA5d9SR+DizyLa7Uuic4L2H494JFhp0y4Dw=) 2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=) 3: 1DF2E9F2D3D011EFAF492E7BC4F9AE02.roa (hash: DdcwMrYgxms39/2lnopBgWj9ObBDY+6LEivm3sNs/Qs=) 4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=) 5: 1D7E458ED3D011EFAF492E7BC4F9AE02.roa (hash: cfuG3Q6SxCv5NEHrNvBKgcm8n0lxZoatwiMQRslcJQQ=) 6: 40B6E2081B5C11F08C45FC65C4F9AE02.roa (hash: BvepmJmkwHdx9eDwegND6OvYI1a/Clt8J0RGrX/Bg74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: May 4 15:17:20 2025 GMT Not After : May 11 15:17:20 2025 GMT Subject: CN=68178500-59ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:fb:99:e8:1d:dc:fb:91:1a:2b:7a:53:89: c0:b6:cb:0e:ca:b9:5a:28:91:88:ae:6e:d1:1e:b1: 3f:73:4b:ee:80:1b:9a:02:3a:50:19:57:1b:6a:92: 96:3d:2c:28:59:43:51:44:62:c5:c9:8d:48:8b:f8: db:fc:1d:e9:05:3c:50:4e:cf:99:34:76:35:dc:72: 5f:3a:ee:a0:30:b3:0e:48:86:93:f5:11:77:9d:dc: ac:8c:df:ea:57:68:6e:c1:80:6b:f9:23:3c:bd:24: b1:c7:8f:b0:6a:1d:c7:63:c1:37:3a:ba:13:4a:16: ab:91:ff:bb:86:b8:7e:2b:78:1a:4d:7e:6d:5d:ae: ed:af:b2:54:bf:ce:2d:28:19:c1:9b:f4:94:25:80: 61:ba:de:94:f1:8d:e6:d0:bb:83:02:42:eb:fe:b2: 6d:c1:5c:8e:11:7a:4b:f0:bf:3e:7f:e4:05:49:85: aa:37:4c:d9:f9:95:5a:de:c9:86:5e:bd:b3:f5:74: 0d:3c:4a:50:be:af:43:40:b0:72:7c:75:ec:56:b9: ec:90:6b:c7:c3:1d:97:f9:72:49:81:d9:92:87:15: 86:95:c8:fb:59:c8:3c:51:af:ea:3c:73:14:4b:af: 5f:5f:29:11:90:45:d0:8f:10:40:e1:67:90:52:c1: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:A6:FF:0C:16:4E:37:28:32:CD:34:7B:9B:2E:85:73:ED:44:22 X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:05:e0:4b:e8:c4:e8:7f:18:95:df:64:6d:46:d0:c4:79:f6: 49:c2:46:78:f1:0a:fe:18:29:ca:cf:1d:33:8e:9f:41:ab:da: d0:4c:6e:f5:48:4e:50:f5:3d:2c:01:b5:1a:8e:4a:ae:05:95: aa:7d:d8:5c:3f:3b:39:68:87:73:2c:1e:bf:43:8e:6e:5b:d3: f9:f4:b0:10:f1:89:53:45:b4:ec:c2:cb:f0:e1:b8:48:70:06: 77:a8:e7:52:20:a8:f4:5a:ff:02:6d:ea:e3:d5:22:d3:37:d0: 1c:47:d6:5d:38:d4:d8:83:7b:00:5b:c4:61:78:90:7e:b9:c9: 99:d2:d1:a6:3a:56:fa:01:f8:3c:e7:c4:43:a4:10:10:f1:eb: 45:da:97:bd:d3:93:8c:ab:16:9f:ab:bd:64:46:8e:22:11:ca: d5:7d:7f:fb:a9:e7:e0:cf:4b:ab:6d:a7:d6:a8:ed:16:96:9e: 9b:38:23:f1:61:3e:64:a8:5e:f5:f0:f0:61:50:b3:5f:30:58: 5c:46:42:a6:05:9c:b3:65:01:4c:b6:8f:ea:ce:cf:81:f3:e3: 5c:d2:76:87:cb:e2:0a:56:93:34:8f:91:0b:76:29:43:8f:17: 5f:6f:38:94:7a:30:76:97:51:f1:fa:db:d1:8e:65:ce:4b:1e: b6:2a:6b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUwNTA0MTUxNzIwWhcNMjUwNTExMTUxNzIwWjAYMRYwFAYD VQQDEw02ODE3ODUwMC01OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Pn7megd3PuRGit6U4nAtssOyrlaKJGIrm7RHrE/c0vugBuaAjpQGVcbapKW PSwoWUNRRGLFyY1Ii/jb/B3pBTxQTs+ZNHY13HJfOu6gMLMOSIaT9RF3ndysjN/q V2huwYBr+SM8vSSxx4+wah3HY8E3OroTSharkf+7hrh+K3gaTX5tXa7tr7JUv84t KBnBm/SUJYBhut6U8Y3m0LuDAkLr/rJtwVyOEXpL8L8+f+QFSYWqN0zZ+ZVa3smG Xr2z9XQNPEpQvq9DQLByfHXsVrnskGvHwx2X+XJJgdmShxWGlcj7Wcg8Ua/qPHMU S69fXykRkEXQjxBA4WeQUsFXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0hpv8M Fk43KDLNNHubLoVz7UQiMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOBeBL6MTofxiV32RtRtDEefZJwkZ48Qr+GCnKzx0zjp9Bq9rQTG71 SE5Q9T0sAbUajkquBZWqfdhcPzs5aIdzLB6/Q45uW9P59LAQ8YlTRbTswsvw4bhI cAZ3qOdSIKj0Wv8Cberj1SLTN9AcR9ZdONTYg3sAW8RheJB+ucmZ0tGmOlb6Afg8 58RDpBAQ8etF2pe905OMqxafq71kRo4iEcrVfX/7qefgz0urbafWqO0Wlp6bOCPx YT5kqF718PBhULNfMFhcRkKmBZyzZQFMto/qzs+B8+Nc0naHy+IKVpM0j5ELdilD jxdfbziUejB2l1Hx+tvRjmXOSx62Kmss -----END CERTIFICATE-----Generated at Mon May 5 03:26:54 2025 by rpki-client