$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: HNwjsUd31Nczf70RurlCMgkM4F1hehrSz43E96C1euE= Subject key identifier: 65:2D:12:95:FA:9A:34:80:ED:52:D9:4C:CB:22:73:B5:AA:2A:1A:6C Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 03C3 Signing time: Wed 07 May 2025 00:29:51 +0000 Manifest this update: Wed 07 May 2025 00:29:51 +0000 Manifest next update: Wed 14 May 2025 00:29:51 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: BHj5cjVi2NiYbIYjmoubUtLnI3wagzmdNFvmjyaMRh4=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: May 7 00:29:51 2025 GMT Not After : May 14 00:29:51 2025 GMT Subject: CN=681aa97f-6039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:51:4d:c9:42:ee:90:4c:dc:0d:72:cf:59: 94:8e:46:de:e9:1b:3f:78:22:21:e3:b5:d4:9a:ae: 82:40:aa:78:83:57:11:9b:c1:7f:3e:50:d1:8b:1c: 11:8d:d2:0c:8c:e2:56:53:cf:02:59:3e:5d:35:5d: d3:87:2a:5a:d7:5d:67:f3:02:0a:fb:ba:67:ad:22: a5:75:dd:b4:22:e8:a4:17:fc:c6:c6:67:b3:df:f0: 1a:8f:e3:04:57:5d:2c:1c:b8:3f:b0:9e:46:78:51: 1a:cc:95:ec:18:d5:62:a2:67:1c:9a:ac:cd:1f:40: 01:94:f5:a5:cf:6e:8c:07:e9:22:ec:97:aa:7c:a8: ed:5c:30:4a:cc:5b:7f:d7:c5:f5:68:b2:54:b7:8b: 1c:1b:2c:ab:dd:51:35:97:82:b7:07:79:5f:4a:b4: 18:db:74:eb:fc:1f:02:2e:65:e4:a4:b9:6e:78:c4: 08:c2:f1:05:2c:33:0b:29:40:5c:73:77:58:fb:3c: 46:5e:11:98:4c:54:64:50:2f:ea:4e:bb:3d:09:26: 1f:46:22:e3:08:16:ca:fd:d1:3c:05:f9:d7:1b:ed: fb:89:59:27:b2:bc:da:b9:bb:f3:97:f8:c6:74:9b: fb:52:16:c6:ba:a9:ad:5d:9e:41:1e:ea:d1:27:a5: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:12:95:FA:9A:34:80:ED:52:D9:4C:CB:22:73:B5:AA:2A:1A:6C X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3a:eb:91:0a:7e:8a:16:7c:76:ab:d3:b4:32:69:f6:31:89: 4a:e8:8a:6f:1a:70:79:ec:06:2c:c7:85:55:2a:a5:c9:c6:81: ce:aa:c0:a8:26:71:8b:d7:8a:16:da:09:8a:6d:c9:84:fb:22: e2:5e:33:c8:82:13:97:6b:9b:23:dd:93:a2:16:cc:11:5b:c7: 89:74:bc:15:b0:84:ac:b0:90:da:f9:5e:b0:f4:79:a7:d6:57: 7b:d0:d5:f1:14:4d:60:c6:92:d5:cc:60:99:b8:75:a5:02:e2: 90:85:09:a1:06:e7:6d:cf:32:b8:2f:e9:dd:ff:6b:0e:76:63: ba:3f:ba:4b:92:36:ab:a8:78:44:6b:55:0d:2f:57:c2:36:a2: e3:a8:a2:23:d0:91:e8:57:ef:c6:56:fc:e0:21:41:8e:da:03: f3:7e:04:3d:fd:63:cd:06:8a:54:1e:cb:eb:50:f4:82:64:dc: 8d:ed:dc:06:6c:87:4e:c6:a6:7a:18:7d:eb:0a:64:00:3a:a3: 6e:82:2b:b0:f5:f1:d3:fe:38:34:bb:03:ff:b6:d6:a8:31:8b: ab:5b:f5:34:3d:c5:5b:4c:a3:b3:42:9c:b6:30:db:be:d3:f8: 30:a5:e1:b0:8a:a7:85:ce:0d:e2:37:b8:96:01:36:10:9c:d1: 2c:3c:73:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUwNTA3MDAyOTUxWhcNMjUwNTE0MDAyOTUxWjAYMRYwFAYD VQQDEw02ODFhYTk3Zi02MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhhRTclC7pBM3A1yz1mUjkbe6Rs/eCIh47XUmq6CQKp4g1cRm8F/PlDRixwR jdIMjOJWU88CWT5dNV3Thypa111n8wIK+7pnrSKldd20IuikF/zGxmez3/Aaj+ME V10sHLg/sJ5GeFEazJXsGNViomccmqzNH0ABlPWlz26MB+ki7JeqfKjtXDBKzFt/ 18X1aLJUt4scGyyr3VE1l4K3B3lfSrQY23Tr/B8CLmXkpLlueMQIwvEFLDMLKUBc c3dY+zxGXhGYTFRkUC/qTrs9CSYfRiLjCBbK/dE8BfnXG+37iVknsrzaubvzl/jG dJv7UhbGuqmtXZ5BHurRJ6UKYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUtEpX6 mjSA7VLZTMsic7WqKhpsMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfOuuRCn6KFnx2q9O0Mmn2MYlK6IpvGnB57AYsx4VVKqXJxoHOqsCo JnGL14oW2gmKbcmE+yLiXjPIghOXa5sj3ZOiFswRW8eJdLwVsISssJDa+V6w9Hmn 1ld70NXxFE1gxpLVzGCZuHWlAuKQhQmhBudtzzK4L+nd/2sOdmO6P7pLkjarqHhE a1UNL1fCNqLjqKIj0JHoV+/GVvzgIUGO2gPzfgQ9/WPNBopUHsvrUPSCZNyN7dwG bIdOxqZ6GH3rCmQAOqNugiuw9fHT/jg0uwP/ttaoMYurW/U0PcVbTKOzQpy2MNu+ 0/gwpeGwiqeFzg3iN7iWATYQnNEsPHPq -----END CERTIFICATE-----Generated at Wed May 7 13:27:21 2025 by rpki-client