$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: qkbgrylr/vIj1nq6E7s8mrO3c1zIQRlXUDCKGBmcp7s= Subject key identifier: 0B:A6:51:4D:A8:2E:FF:AE:28:6A:E2:5E:51:36:E8:56:6A:DD:03:E0 Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 07C4 Signing time: Mon 12 May 2025 20:54:55 +0000 Manifest this update: Mon 12 May 2025 20:54:54 +0000 Manifest next update: Mon 19 May 2025 20:54:54 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: IhpE98aEf+Ys4riUSPSZIiQlATpS2ROsTp3y5TmWGJU=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: May 12 20:54:54 2025 GMT Not After : May 19 20:54:54 2025 GMT Subject: CN=6822601e-5ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:1d:41:aa:7d:ab:f1:25:03:a2:89:2c:68: 82:e9:74:fd:c6:5e:3e:46:80:05:68:f0:db:ec:79: 2e:48:fb:d6:9c:32:29:0b:54:65:5a:7d:5c:db:be: cf:67:10:30:79:9c:c8:ea:67:6b:e6:a7:27:04:c5: 81:e3:7e:8a:33:18:59:31:90:d7:e7:ac:d9:cb:56: 75:b5:bd:48:d0:e8:04:d8:2e:1f:03:c6:79:cc:7f: 3c:41:73:34:85:fa:73:a4:99:a0:da:38:60:7b:1c: ad:22:23:65:fb:90:80:96:11:0d:d1:45:ea:f2:42: 63:16:46:3d:15:c2:f1:32:00:cd:a6:34:1b:e8:70: fa:ee:4d:1d:c4:f0:a1:c5:2f:30:a3:2a:2d:75:cd: 34:2d:af:1c:84:a3:b0:66:47:e5:12:ef:89:1f:6f: 1f:30:ad:ab:2b:8d:57:54:8d:07:65:5b:72:72:68: e9:7e:a4:d3:42:7b:8b:ae:7a:44:bc:e9:e3:ff:74: ee:e8:d6:eb:27:85:ed:42:c0:42:e9:56:f8:df:31: 7a:3c:3e:58:dd:27:8f:eb:87:5b:a5:30:63:94:5d: 2f:5c:02:8c:2e:cf:11:e3:5f:e8:f3:b9:03:7b:ee: cd:48:da:ee:42:41:3f:b2:2f:5c:72:df:45:a8:56: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A6:51:4D:A8:2E:FF:AE:28:6A:E2:5E:51:36:E8:56:6A:DD:03:E0 X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:c3:36:d1:cc:30:e5:2e:45:45:3b:b9:4d:5e:42:f5:33: 0b:13:d2:c4:84:91:25:5f:cb:85:fa:44:dc:04:56:67:04:d5: 93:11:d6:ae:09:26:44:1d:e6:84:ae:54:b8:93:e1:11:f4:be: 49:18:d1:c7:38:73:fa:82:da:af:ab:ce:d0:89:55:69:79:94: 8c:35:5e:7c:bf:a5:bb:41:1c:41:3f:96:ae:13:8b:7b:b8:68: f1:15:91:83:7e:18:62:29:53:a4:01:28:62:ac:1b:3e:8b:98: 10:d1:c1:a5:b6:0f:a9:f9:60:89:e3:4b:42:85:d4:8f:2c:2e: 8e:ae:0d:a2:e0:80:7f:d9:aa:ab:70:53:fd:15:89:69:13:ca: db:a0:6e:96:a4:2d:78:58:ca:48:2a:37:f9:6e:a0:ac:36:f7: a3:fc:b4:5e:b6:e4:ab:6d:27:80:c9:1f:b4:a3:13:46:7d:93: 53:23:cb:88:60:f3:45:93:17:16:f9:a4:6d:4e:36:b0:c8:2a: 37:4a:d4:56:83:1d:cb:07:55:18:fb:a2:6e:b9:a8:af:07:22: e4:2b:2f:59:39:44:2a:6b:fc:98:f0:88:5f:b8:6d:b6:ff:71: 69:fc:66:12:5b:0f:f5:a2:69:f9:92:df:72:78:2e:86:f5:97: c7:d5:67:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjUwNTEyMjA1NDU0WhcNMjUwNTE5MjA1NDU0WjAYMRYwFAYD VQQDEw02ODIyNjAxZS01ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAQdQap9q/ElA6KJLGiC6XT9xl4+RoAFaPDb7HkuSPvWnDIpC1RlWn1c277P ZxAweZzI6mdr5qcnBMWB436KMxhZMZDX56zZy1Z1tb1I0OgE2C4fA8Z5zH88QXM0 hfpzpJmg2jhgexytIiNl+5CAlhEN0UXq8kJjFkY9FcLxMgDNpjQb6HD67k0dxPCh xS8woyotdc00La8chKOwZkflEu+JH28fMK2rK41XVI0HZVtycmjpfqTTQnuLrnpE vOnj/3Tu6NbrJ4XtQsBC6Vb43zF6PD5Y3SeP64dbpTBjlF0vXAKMLs8R41/o87kD e+7NSNruQkE/si9cct9FqFYtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAumUU2o Lv+uKGriXlE26FZq3QPgMB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC1MM20cww5S5FRTu5TV5C9TMLE9LEhJElX8uF+kTcBFZnBNWTEdau CSZEHeaErlS4k+ER9L5JGNHHOHP6gtqvq87QiVVpeZSMNV58v6W7QRxBP5auE4t7 uGjxFZGDfhhiKVOkAShirBs+i5gQ0cGltg+p+WCJ40tChdSPLC6Org2i4IB/2aqr cFP9FYlpE8rboG6WpC14WMpIKjf5bqCsNvej/LRetuSrbSeAyR+0oxNGfZNTI8uI YPNFkxcW+aRtTjawyCo3StRWgx3LB1UY+6JuuaivByLkKy9ZOUQqa/yY8IhfuG22 /3Fp/GYSWw/1omn5kt9yeC6G9ZfH1WeH -----END CERTIFICATE-----Generated at Tue May 13 18:12:40 2025 by rpki-client