$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft File: YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json) Hash identifier: ruq2quifU21aNLchRDyQ1uzqG6ruTkptnppyJW5sQfE= Subject key identifier: AB:F4:C1:A1:F9:64:02:1A:0B:B0:30:0E:C2:91:B3:05:57:83:62:05 Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD Certificate issuer: /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft Manifest number: 0137 Signing time: Sun 11 May 2025 03:19:40 +0000 Manifest this update: Sun 11 May 2025 03:19:40 +0000 Manifest next update: Sun 18 May 2025 03:19:40 +0000 Files and hashes: 1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: i3kjSnDe5EraNFZ/1H1SvaROwu65dSkZqaGJmGIGLjg=) 2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: JF98gdzocH1/AV+95pGblYdfL1FxgXSJftaTSJva7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Validity Not Before: May 11 03:19:40 2025 GMT Not After : May 18 03:19:40 2025 GMT Subject: CN=6820174c-13b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:67:06:a3:a5:31:c0:10:10:6e:cd:f7:eb: ca:54:48:8f:df:55:04:b2:34:ec:a1:21:26:1f:3b: e7:9a:1a:a8:61:94:d3:1f:da:1f:52:ca:1f:be:17: f1:f2:6c:a4:10:22:92:98:c4:81:c8:de:24:c3:a9: bb:b6:9c:46:85:ab:73:1e:b4:35:7d:7b:73:6b:35: 9b:21:5a:5e:c8:da:3f:48:c8:92:b9:7e:4e:8b:40: b5:b8:e0:fe:f7:4d:05:bb:aa:70:48:dd:6a:af:f0: cc:c0:cb:ac:59:e8:3d:e6:7c:49:dd:0c:3a:e0:b5: 35:64:5d:30:9c:af:1d:bf:87:8a:4d:71:9d:e5:f4: dd:2e:4e:a3:be:7a:df:b7:0b:6b:5b:dc:bf:71:d7: 55:90:ec:97:e4:95:b1:f6:5f:f1:b2:a0:6f:2c:69: 45:7d:d3:6a:ed:dc:5d:61:bc:9e:94:77:09:e3:f4: fe:92:23:24:64:e7:80:cd:db:5d:2b:8a:8d:ad:20: ae:89:1b:c5:9a:c6:70:e0:b2:98:57:1e:ad:a0:4b: a1:29:cb:92:a4:36:ed:8c:69:c3:47:b4:38:4e:a7: 69:db:62:94:fe:6b:85:7b:6e:b4:c9:fe:55:1b:80: 2f:37:a3:ca:05:23:5f:98:0b:2c:02:a5:9f:6e:f0: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F4:C1:A1:F9:64:02:1A:0B:B0:30:0E:C2:91:B3:05:57:83:62:05 X509v3 Authority Key Identifier: keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:7b:23:96:ec:b3:3e:93:2f:0b:56:1a:69:6d:2a:1c:1b: 13:8d:07:3a:cc:c9:a1:27:05:92:80:48:48:61:b9:59:d6:19: 15:a9:eb:79:5a:a9:f3:22:52:59:25:b4:cb:5d:7a:c2:a7:ba: 61:c2:fc:28:e4:eb:3d:e9:39:84:4c:1e:d6:01:84:1d:47:63: 92:30:1e:b2:e4:03:b2:6b:e0:26:a8:8e:47:82:ee:4e:e0:39: 23:cb:f2:89:df:b2:66:6c:eb:dc:45:cd:5b:84:08:de:08:03: c9:2c:94:f0:1f:4f:ae:4a:d5:21:0a:16:79:1f:6b:c7:58:20: 5c:60:23:a6:dd:ce:c8:8f:93:67:01:d1:9e:d0:46:47:32:10: c5:89:75:ff:7d:47:56:e2:20:0c:f3:a4:e7:2c:50:7a:c4:e4: 31:96:e8:ed:42:cb:a2:b1:34:45:5a:1c:46:06:ad:8d:75:20: f5:7c:f8:62:6b:24:99:3e:31:65:0f:92:ee:87:e2:4a:f9:d0: 86:f6:68:f5:46:e2:ac:a8:f8:ae:af:ba:5e:54:00:d1:26:40: e0:87:93:26:1a:e2:72:e0:2e:4a:64:96:51:ab:0d:c5:17:9b: ea:42:30:c2:c3:bb:da:97:26:3b:bb:42:2f:32:e3:a5:4f:13: f4:26:83:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5 RTFFMkY5Q0QwHhcNMjUwNTExMDMxOTQwWhcNMjUwNTE4MDMxOTQwWjAYMRYwFAYD VQQDEw02ODIwMTc0Yy0xM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhJnBqOlMcAQEG7N9+vKVEiP31UEsjTsoSEmHzvnmhqoYZTTH9ofUsofvhfx 8mykECKSmMSByN4kw6m7tpxGhatzHrQ1fXtzazWbIVpeyNo/SMiSuX5Oi0C1uOD+ 900Fu6pwSN1qr/DMwMusWeg95nxJ3Qw64LU1ZF0wnK8dv4eKTXGd5fTdLk6jvnrf twtrW9y/cddVkOyX5JWx9l/xsqBvLGlFfdNq7dxdYbyelHcJ4/T+kiMkZOeAzdtd K4qNrSCuiRvFmsZw4LKYVx6toEuhKcuSpDbtjGnDR7Q4Tqdp22KU/muFe260yf5V G4AvN6PKBSNfmAssAqWfbvBawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv0waH5 ZAIaC7AwDsKRswVXg2IFMB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho UVpBNFVyaGpJdy1lSGktYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALSHsjluyzPpMvC1YaaW0qHBsTjQc6zMmhJwWSgEhIYblZ1hkVqet5 WqnzIlJZJbTLXXrCp7phwvwo5Os96TmETB7WAYQdR2OSMB6y5AOya+AmqI5Hgu5O 4Dkjy/KJ37JmbOvcRc1bhAjeCAPJLJTwH0+uStUhChZ5H2vHWCBcYCOm3c7Ij5Nn AdGe0EZHMhDFiXX/fUdW4iAM86TnLFB6xOQxlujtQsuisTRFWhxGBq2NdSD1fPhi aySZPjFlD5Luh+JK+dCG9mj1RuKsqPiur7peVADRJkDgh5MmGuJy4C5KZJZRqw3F F5vqQjDCw7valyY7u0IvMuOlTxP0JoO8 -----END CERTIFICATE-----Generated at Tue May 13 03:46:51 2025 by rpki-client