$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: cjD5kyEJa+EpaLv392xmBzEKRss8CsOZxTd+wedyXYU= Subject key identifier: BC:64:4C:6D:0F:27:B1:FE:81:3D:50:91:57:73:86:75:36:BC:43:20 Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 046D Signing time: Thu 15 May 2025 00:10:07 +0000 Manifest this update: Thu 15 May 2025 00:10:06 +0000 Manifest next update: Thu 22 May 2025 00:10:06 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: giIT3wuP3ADUbsckrFkL7h8MHNu6SDnsWLd0ts4O9k8=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: May 15 00:10:06 2025 GMT Not After : May 22 00:10:06 2025 GMT Subject: CN=682530df-108c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:50:f6:c7:4e:b6:fb:12:8a:8e:59:f0:46: 9e:9c:e9:fa:9c:24:ca:2b:4f:f1:7e:55:24:0e:28: 0e:d0:24:eb:9a:f7:11:b4:f9:93:80:d4:9c:f6:9c: 3f:d8:f1:1b:2f:c5:fc:7a:41:8b:d1:25:ec:bc:64: 10:dc:7f:4a:22:75:96:49:d5:e0:03:09:57:46:aa: ce:46:75:20:5a:e9:db:68:fd:29:7d:97:46:47:cb: 02:53:9d:71:c6:ab:55:9b:b4:d2:ac:7a:5d:e0:f9: 8e:a0:7f:50:a6:0f:27:fe:c9:d9:70:49:8a:cf:90: 9f:b8:67:92:5c:ee:9c:de:f9:0a:6f:13:6c:37:f0: ab:91:32:be:75:5c:09:ab:50:5a:18:4d:9f:f3:eb: fa:7d:8b:06:a2:5c:84:fa:00:bd:90:e5:3d:bc:39: 4f:12:76:76:40:34:2f:85:04:c1:05:d7:84:2d:f4: 91:d3:f4:a0:b2:84:0d:b3:d9:e6:5f:85:57:b7:8a: 67:84:d1:25:07:c5:05:0a:95:8f:56:e2:13:f8:c0: bd:b0:8c:41:d9:a2:25:be:3c:85:ea:16:fc:0d:e2: de:25:f4:2e:db:99:ca:c7:28:c1:1e:c3:0e:a1:77: bf:07:58:8f:7b:1f:2f:a0:ea:b2:10:d8:21:ec:ff: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:64:4C:6D:0F:27:B1:FE:81:3D:50:91:57:73:86:75:36:BC:43:20 X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e2:c8:9e:e5:58:a7:6b:f0:3b:a7:12:49:d6:d8:22:ac:e4: 6f:24:04:77:7f:41:83:76:b5:f1:de:cb:41:18:5b:6d:50:1e: b9:94:15:19:35:0f:ce:07:e7:d9:89:51:22:2d:ca:d9:bf:30: f8:fc:39:89:2c:cc:b0:07:0b:71:d4:62:af:6c:6e:42:b5:f9: d1:8f:93:38:07:d4:0d:40:7d:ea:35:e9:1e:5a:c0:f1:36:13: 9d:2d:08:45:05:24:51:1c:8c:7f:94:09:c0:a3:3d:47:bb:f2: 7c:9d:9b:fe:88:42:f7:49:e9:b2:6b:19:30:89:18:9b:2b:67: f5:81:ce:65:50:f3:7e:be:fe:c6:23:17:a7:0c:15:16:c0:30: 93:09:9c:65:1f:9d:6f:0b:ea:8c:5e:6e:d0:ff:e4:ad:fc:8f: ee:a1:58:1c:b8:96:30:bf:41:0d:c5:75:6e:d8:17:04:66:0f: de:db:00:7d:58:a8:b2:ab:0c:1c:3f:c7:ba:a9:59:20:2e:60: 6e:05:52:ec:1b:64:26:ff:1d:0a:78:17:d5:d5:25:b8:08:d4: df:a4:2f:b7:f9:38:59:3f:23:57:29:c9:d2:ce:44:7b:64:6a: a4:5e:2d:ef:7b:9a:c6:96:c2:30:3c:42:57:e1:e5:96:36:c4: 9e:78:ea:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUwNTE1MDAxMDA2WhcNMjUwNTIyMDAxMDA2WjAYMRYwFAYD VQQDEw02ODI1MzBkZi0xMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO1Q9sdOtvsSio5Z8EaenOn6nCTKK0/xflUkDigO0CTrmvcRtPmTgNSc9pw/ 2PEbL8X8ekGL0SXsvGQQ3H9KInWWSdXgAwlXRqrORnUgWunbaP0pfZdGR8sCU51x xqtVm7TSrHpd4PmOoH9Qpg8n/snZcEmKz5CfuGeSXO6c3vkKbxNsN/CrkTK+dVwJ q1BaGE2f8+v6fYsGolyE+gC9kOU9vDlPEnZ2QDQvhQTBBdeELfSR0/SgsoQNs9nm X4VXt4pnhNElB8UFCpWPVuIT+MC9sIxB2aIlvjyF6hb8DeLeJfQu25nKxyjBHsMO oXe/B1iPex8voOqyENgh7P8/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxkTG0P J7H+gT1QkVdzhnU2vEMgMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm4sie5Vina/A7pxJJ1tgirORvJAR3f0GDdrXx3stBGFttUB65lBUZ NQ/OB+fZiVEiLcrZvzD4/DmJLMywBwtx1GKvbG5CtfnRj5M4B9QNQH3qNekeWsDx NhOdLQhFBSRRHIx/lAnAoz1Hu/J8nZv+iEL3SemyaxkwiRibK2f1gc5lUPN+vv7G IxenDBUWwDCTCZxlH51vC+qMXm7Q/+St/I/uoVgcuJYwv0ENxXVu2BcEZg/e2wB9 WKiyqwwcP8e6qVkgLmBuBVLsG2Qm/x0KeBfV1SW4CNTfpC+3+ThZPyNXKcnSzkR7 ZGqkXi3ve5rGlsIwPEJX4eWWNsSeeOru -----END CERTIFICATE-----Generated at Fri May 16 19:30:22 2025 by rpki-client