$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json) Hash identifier: Z7MnCQ1HhppZxS2w9Be2zVrBJ0eT1oKbpmHF0OKC4tE= Subject key identifier: D5:2A:A1:FC:18:5C:36:46:DB:74:97:CD:A7:CC:89:EF:9F:03:17:35 Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft Manifest number: 019C Signing time: Tue 13 May 2025 02:37:28 +0000 Manifest this update: Tue 13 May 2025 02:37:28 +0000 Manifest next update: Tue 20 May 2025 02:37:27 +0000 Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: iJyM2nRwSIYtEBldpQ4vll7a/3tF++zlQ95o72sdJUo=) 2: CCA801A2B97F11ED98ED3A74C4F9AE02.roa (hash: 70nEfW6y679vz54r1rMiwd9UT2VLDF6LzETjWTqp0aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Validity Not Before: May 13 02:37:28 2025 GMT Not After : May 20 02:37:27 2025 GMT Subject: CN=6822b068-1adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:76:fe:1e:f5:68:f0:03:16:be:3c:37:dc: a8:a2:48:bb:99:a1:6a:29:8c:9c:ef:fa:43:6d:5f: 3a:04:14:8f:c7:da:1d:66:74:47:01:90:c9:36:41: 2e:8c:4b:c3:cf:6e:78:0e:3e:ea:f0:37:64:29:e9: 75:15:b4:61:e5:99:37:38:00:c4:42:78:4e:c7:62: f7:0c:1d:a6:7b:17:29:b7:ad:64:b5:77:65:52:0a: 10:06:c7:79:ab:d8:38:cc:f7:df:bc:f7:d7:89:c7: 8b:3d:4b:48:51:90:74:fc:70:92:93:0d:c3:96:f8: a1:39:0c:1a:55:36:24:56:72:6c:82:39:21:ae:24: 75:4a:68:fc:84:a6:83:32:12:f5:6f:5b:6d:a3:38: cb:ce:1a:de:d2:7c:4d:e0:cf:9b:0e:53:d8:ae:04: 2c:37:5b:ae:68:11:d8:4b:62:3b:81:3c:b3:09:14: 76:e5:32:38:7f:9b:bf:8e:63:40:f3:d8:25:1b:10: 59:b2:2d:7c:6f:11:f2:ec:55:e6:85:ba:52:73:6f: ef:b1:d9:40:f1:3d:1f:1d:52:29:c5:06:41:0f:b0: 3d:05:29:35:cd:61:5c:42:9c:32:fb:a3:6f:61:10: dc:48:b7:9c:f8:d2:84:51:40:16:ab:4c:f4:8d:31: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:A1:FC:18:5C:36:46:DB:74:97:CD:A7:CC:89:EF:9F:03:17:35 X509v3 Authority Key Identifier: keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4e:18:1a:a2:bd:fb:4b:75:a1:ef:ec:2e:15:3f:1f:48:43: ba:a2:89:ed:44:85:b1:74:0c:21:95:cd:08:04:e1:d6:51:4f: ba:83:04:f2:ae:bd:f0:57:aa:45:e6:e3:01:a6:f8:0b:b3:e2: 26:e7:b6:e4:2b:2b:0a:7a:6a:03:ad:44:4e:c6:e0:9c:2d:de: 75:f3:f8:12:81:08:00:22:1d:0d:76:7a:70:60:61:95:9b:a8: 8b:61:31:df:92:d0:68:8e:d9:9d:f7:ff:fe:04:02:85:67:52: 07:e3:59:c9:2d:2b:c2:a3:f8:13:29:2a:9d:31:16:28:66:76: 28:40:a1:52:62:9a:7a:d6:64:89:2e:10:2d:dc:73:ac:af:12: 18:b0:03:85:6e:a8:ee:b0:ed:34:56:18:00:be:7d:35:ca:69: 84:81:2f:3e:05:49:09:b6:a2:15:12:d8:b3:91:e0:f0:64:d1: 2c:7c:ea:a7:3a:e7:43:2b:44:e6:4f:61:2d:80:27:d6:7d:8f: 86:e4:ae:91:70:0e:0e:7c:83:2a:b9:f1:6b:a8:80:06:80:1b: 5d:8d:42:25:31:d3:37:eb:92:9e:3e:9e:4a:e4:da:70:71:56: e8:62:d7:0a:d4:9b:b1:49:95:ae:52:b1:24:2c:af:c4:e8:a4: a7:d8:8d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEyODUxMTAvBgNVBAUTKDYyMjhBQjY4QTI0NjBCREM1NjY4OEI2RTU1ODkxNzkw REQ4MDRCMTAwHhcNMjUwNTEzMDIzNzI4WhcNMjUwNTIwMDIzNzI3WjAYMRYwFAYD VQQDEw02ODIyYjA2OC0xYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocp2/h71aPADFr48N9yooki7maFqKYyc7/pDbV86BBSPx9odZnRHAZDJNkEu jEvDz254Dj7q8DdkKel1FbRh5Zk3OADEQnhOx2L3DB2mexcpt61ktXdlUgoQBsd5 q9g4zPffvPfXiceLPUtIUZB0/HCSkw3DlvihOQwaVTYkVnJsgjkhriR1Smj8hKaD MhL1b1ttozjLzhre0nxN4M+bDlPYrgQsN1uuaBHYS2I7gTyzCRR25TI4f5u/jmNA 89glGxBZsi18bxHy7FXmhbpSc2/vsdlA8T0fHVIpxQZBD7A9BSk1zWFcQpwy+6Nv YRDcSLec+NKEUUAWq0z0jTHCPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUqofwY XDZG23SXzafMie+fAxc1MB8GA1UdIwQYMBaAFGIoq2iiRgvcVmiLblWJF5DdgEsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTI4NS9FODE5MjAzOEI5 N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5eFdhSXR1VllrWGtOMkFT eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpaXJhS0pHQzl4V2FJdHVWWWtYa04yQVN4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTI4NS9FODE5MjAzOEI5N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5 eFdhSXR1VllrWGtOMkFTeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRThgaor37S3Wh7+wuFT8fSEO6oontRIWxdAwhlc0IBOHWUU+6gwTy rr3wV6pF5uMBpvgLs+Im57bkKysKemoDrUROxuCcLd518/gSgQgAIh0NdnpwYGGV m6iLYTHfktBojtmd9//+BAKFZ1IH41nJLSvCo/gTKSqdMRYoZnYoQKFSYpp61mSJ LhAt3HOsrxIYsAOFbqjusO00VhgAvn01ymmEgS8+BUkJtqIVEtizkeDwZNEsfOqn OudDK0TmT2EtgCfWfY+G5K6RcA4OfIMqufFrqIAGgBtdjUIlMdM365KePp5K5Npw cVboYtcK1JuxSZWuUrEkLK/E6KSn2I1w -----END CERTIFICATE-----Generated at Wed May 14 18:20:17 2025 by rpki-client