$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: J29l0r6dMR/GRQlWWeFcGG8O14DYuhGZR4pj1dIPoCo= Subject key identifier: 3B:86:E3:DE:96:74:B0:A7:38:9F:7D:5E:BF:67:FA:72:4E:29:13:8E Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 57 Signing time: Sun 11 May 2025 05:55:42 +0000 Manifest this update: Sun 11 May 2025 05:55:42 +0000 Manifest next update: Sun 18 May 2025 05:55:42 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: PKnWp9E0MEsCD1h2CdaCsJHVZUC/RtviRqUhNs1sW04=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: May 11 05:55:42 2025 GMT Not After : May 18 05:55:42 2025 GMT Subject: CN=68203bde-a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:0d:e8:13:47:9b:77:31:f9:fe:7f:22:fe: 5f:0f:4e:97:b5:d1:cf:cd:c1:9b:9b:c0:e7:d4:3c: 08:2d:13:38:49:84:30:d1:92:b4:1d:01:81:24:31: 13:72:4a:bd:06:a3:04:98:af:05:16:17:82:10:b7: 55:7b:ec:43:4a:9e:2e:90:b0:d9:1a:5b:df:01:18: e8:98:12:ac:7d:6d:d4:b8:c0:b0:82:8c:fc:c9:03: 79:35:d9:ef:8f:74:2f:f2:9d:46:24:d7:8b:70:e0: 68:3f:b6:03:d8:78:1d:dc:41:0a:d7:ed:69:c9:7a: f7:94:70:81:44:4b:24:ba:3b:93:17:65:46:3c:52: 7c:6d:2c:bd:19:92:4b:f9:48:d3:4b:bd:10:72:b9: c9:6d:b3:71:d9:77:fe:dc:13:31:03:80:c0:3c:48: 50:ed:b8:05:f4:b3:a2:fa:8f:00:34:9e:b6:50:a7: dd:eb:a0:71:cd:cc:63:14:7c:44:3c:cf:7c:40:78: 5e:52:7d:e6:3d:dd:89:29:7e:fe:26:8f:42:0f:a9: 75:3a:c7:9c:67:b0:72:b3:99:4a:db:e8:c3:1a:41: 2d:21:42:cf:ce:45:e2:7b:19:c3:a3:bc:df:64:b6: 8f:17:f9:df:57:7f:4b:4b:a4:bd:93:f1:fd:4e:19: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:86:E3:DE:96:74:B0:A7:38:9F:7D:5E:BF:67:FA:72:4E:29:13:8E X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e7:36:ae:be:ed:90:3a:37:9a:ed:1a:11:e1:a7:9a:87:7e: 58:52:16:9e:18:85:f5:c9:37:b2:8f:de:14:7e:9c:06:80:6a: 8e:be:15:0b:32:cc:ab:47:6a:31:0f:e8:18:2f:84:87:84:38: 44:1e:5b:57:61:59:cb:e7:58:a1:e3:6b:39:64:e1:85:b2:bb: 07:ab:ff:d0:38:68:fe:d8:42:87:09:06:be:1d:81:c8:c0:a5: 72:49:25:58:0f:c2:2a:21:8c:12:60:bd:70:be:e5:21:d6:f3: 73:88:c8:63:aa:d5:79:61:ae:2b:17:04:25:a6:51:b5:cd:9e: 97:61:d1:8a:26:88:89:88:96:e4:57:af:14:22:ab:8b:82:ee: d4:2b:b1:3e:bd:36:a3:6f:56:a5:4d:35:64:ba:de:7c:53:a9: 0a:51:6b:47:c7:3a:98:74:22:eb:53:0a:52:09:f6:51:76:6a: 92:ad:8f:65:f7:ff:fa:67:b4:0f:1e:a1:59:21:4c:ab:24:cc: 2d:39:6e:b7:2d:2e:07:a8:49:95:07:91:f9:75:af:88:39:07: 60:23:c4:48:ad:5b:73:9a:90:b3:2e:16:97:0c:d2:08:96:d1: c3:80:cb:66:8c:99:74:cc:8d:05:6f:2d:7e:72:ad:27:48:eb: 4b:4d:b0:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkZDNTExMC8GA1UEBRMoRkQ4OERFRjlBNkJEREJFQTU5Mzg5RURDNjE3MUFBRENB MTA2QjUwOTAeFw0yNTA1MTEwNTU1NDJaFw0yNTA1MTgwNTU1NDJaMBgxFjAUBgNV BAMTDTY4MjAzYmRlLWEwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCghQ3oE0ebdzH5/n8i/l8PTpe10c/NwZubwOfUPAgtEzhJhDDRkrQdAYEkMRNy Sr0GowSYrwUWF4IQt1V77ENKni6QsNkaW98BGOiYEqx9bdS4wLCCjPzJA3k12e+P dC/ynUYk14tw4Gg/tgPYeB3cQQrX7WnJeveUcIFESyS6O5MXZUY8UnxtLL0Zkkv5 SNNLvRByuclts3HZd/7cEzEDgMA8SFDtuAX0s6L6jwA0nrZQp93roHHNzGMUfEQ8 z3xAeF5SfeY93Ykpfv4mj0IPqXU6x5xnsHKzmUrb6MMaQS0hQs/OReJ7GcOjvN9k to8X+d9Xf0tLpL2T8f1OGQOFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO4bj3pZ0 sKc4n31ev2f6ck4pE44wHwYDVR0jBBgwFoAU/Yje+aa92+pZOJ7cYXGq3KEGtQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyRkM1L0VEQUJEMjMwQUIz RjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1lqZS1hYTkyLXBaT0o3Y1lYR3EzS0VHdFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy RkM1L0VEQUJEMjMwQUIzRjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1w Wk9KN2NZWEdxM0tFR3RRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPnNq6+7ZA6N5rtGhHhp5qHflhSFp4YhfXJN7KP3hR+nAaAao6+FQsy zKtHajEP6BgvhIeEOEQeW1dhWcvnWKHjazlk4YWyuwer/9A4aP7YQocJBr4dgcjA pXJJJVgPwiohjBJgvXC+5SHW83OIyGOq1XlhrisXBCWmUbXNnpdh0YomiImIluRX rxQiq4uC7tQrsT69NqNvVqVNNWS63nxTqQpRa0fHOph0IutTClIJ9lF2apKtj2X3 //pntA8eoVkhTKskzC05brctLgeoSZUHkfl1r4g5B2AjxEitW3OakLMuFpcM0giW 0cOAy2aMmXTMjQVvLX5yrSdI60tNsGU= -----END CERTIFICATE-----Generated at Sun May 11 22:42:45 2025 by rpki-client