$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: w6R9bXgXpvZ/3E2M4CsaVY7dW1ScNyrFWhq+9oRp0gA= Subject key identifier: 68:53:00:D8:1D:05:77:4D:97:E8:0D:9B:E2:7A:97:21:85:A0:84:F5 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: FA Signing time: Sun 11 May 2025 03:58:42 +0000 Manifest this update: Sun 11 May 2025 03:58:42 +0000 Manifest next update: Sun 18 May 2025 03:58:42 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: Ktp20X/U5Pl5JqeyQSr5ZqqEnuerrBYQ1efdjXS16qU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: May 11 03:58:42 2025 GMT Not After : May 18 03:58:42 2025 GMT Subject: CN=68202072-a850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:85:cd:5b:cf:09:cb:5f:d3:2b:13:05:15: ad:40:6a:31:0e:6d:cc:e4:a9:76:d9:e9:cd:94:46: 9d:43:a6:a9:7a:cf:1b:5e:ed:52:91:07:c0:6f:6d: 65:c7:4f:41:b7:72:a4:21:87:4b:a0:de:db:50:d4: f5:44:05:e7:b2:d7:41:8a:2f:a4:47:69:5c:ae:12: 3f:a4:5a:99:f2:9d:25:55:31:1f:4c:17:41:09:f3: 12:63:d7:ee:2d:2d:82:b3:d2:b4:53:ce:51:fb:38: 25:30:14:81:42:91:ce:47:ab:72:fc:1f:b3:31:f5: 5b:9e:86:74:66:1e:08:09:eb:b1:66:c1:99:fd:7f: 51:ee:d4:f6:a0:4e:a3:de:6a:dc:bd:ef:44:75:29: 79:0f:36:5c:38:f8:61:37:16:2a:6a:24:fe:fe:7f: 66:fa:d8:5f:0f:f1:f5:29:2b:69:a5:86:43:0f:9b: 1b:91:19:93:44:e5:78:25:33:52:18:8b:cd:46:f1: f0:0e:84:6a:9a:44:ab:95:e3:e2:2c:36:16:b8:9d: c4:dd:51:44:18:dd:8f:e7:75:7d:13:7d:a9:ac:2e: 4c:c0:8d:a8:a1:44:de:1c:2d:9b:c4:59:3c:c1:84: b6:f4:67:c4:16:7e:99:00:16:7c:42:a2:bf:39:53: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:53:00:D8:1D:05:77:4D:97:E8:0D:9B:E2:7A:97:21:85:A0:84:F5 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:88:cc:ae:17:e8:46:2f:19:62:c2:ad:f9:9e:d6:54:53: 75:67:57:e9:cb:59:0a:3d:f0:5f:fc:36:07:48:3e:8f:5d:33: a5:77:4c:80:0e:dc:20:b7:d1:97:16:7e:96:34:3a:79:e8:f5: 80:a4:9d:4b:d0:44:1b:0b:43:20:6f:7b:4e:9f:5c:c4:9d:a2: dc:38:da:44:b9:04:ad:a7:6c:1f:fa:5c:bf:40:b2:e2:5c:36: 8a:f7:49:ce:a5:bd:4c:4c:6d:b4:00:72:35:87:47:b4:a3:8e: e6:d0:2c:2f:8a:b2:47:26:e7:cb:db:5c:d4:df:3b:db:14:c2: ed:d0:90:0b:14:48:c4:06:07:a1:49:19:21:51:b9:2f:d1:64: 73:9c:f9:73:2a:2f:cc:8f:a9:8b:f0:04:5f:d5:e6:3d:93:1a: f9:76:d7:b7:9a:38:fe:88:98:96:47:8b:e8:e3:ab:39:30:a6: d6:88:75:2f:f4:4d:b2:da:b3:03:9a:fb:f7:4b:86:49:15:3f: 84:d2:6b:74:20:d5:37:41:bb:d7:9f:9a:ec:26:07:98:ae:7e: bb:07:ba:72:e4:91:7a:9b:48:67:8c:40:dc:c4:bb:31:3b:f2: 12:a5:dc:ea:2c:54:f1:00:81:c8:bc:70:45:43:ac:28:41:0c: 84:f5:c2:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUwNTExMDM1ODQyWhcNMjUwNTE4MDM1ODQyWjAYMRYwFAYD VQQDEw02ODIwMjA3Mi1hODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2uFzVvPCctf0ysTBRWtQGoxDm3M5Kl22enNlEadQ6apes8bXu1SkQfAb21l x09Bt3KkIYdLoN7bUNT1RAXnstdBii+kR2lcrhI/pFqZ8p0lVTEfTBdBCfMSY9fu LS2Cs9K0U85R+zglMBSBQpHOR6ty/B+zMfVbnoZ0Zh4ICeuxZsGZ/X9R7tT2oE6j 3mrcve9EdSl5DzZcOPhhNxYqaiT+/n9m+thfD/H1KStppYZDD5sbkRmTROV4JTNS GIvNRvHwDoRqmkSrlePiLDYWuJ3E3VFEGN2P53V9E32prC5MwI2ooUTeHC2bxFk8 wYS29GfEFn6ZABZ8QqK/OVOJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhTANgd BXdNl+gNm+J6lyGFoIT1MB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVF4jMrhfoRi8ZYsKt+Z7WVFN1Z1fpy1kKPfBf/DYHSD6PXTOld0yA Dtwgt9GXFn6WNDp56PWApJ1L0EQbC0Mgb3tOn1zEnaLcONpEuQStp2wf+ly/QLLi XDaK90nOpb1MTG20AHI1h0e0o47m0CwvirJHJufL21zU3zvbFMLt0JALFEjEBgeh SRkhUbkv0WRznPlzKi/Mj6mL8ARf1eY9kxr5dte3mjj+iJiWR4vo46s5MKbWiHUv 9E2y2rMDmvv3S4ZJFT+E0mt0INU3QbvXn5rsJgeYrn67B7py5JF6m0hnjEDcxLsx O/ISpdzqLFTxAIHIvHBFQ6woQQyE9cLY -----END CERTIFICATE-----Generated at Tue May 13 05:42:27 2025 by rpki-client