$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: SB00dvMDjgVhFITnHoKJaX4CgfEcXFwqduZvYBZdkpU= Subject key identifier: DE:61:FF:BD:C1:86:82:94:1F:0C:16:56:C3:96:36:8E:46:40:45:F5 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 181B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 180E Signing time: Sat 10 May 2025 16:26:49 +0000 Manifest this update: Sat 10 May 2025 16:26:48 +0000 Manifest next update: Sat 17 May 2025 16:26:48 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: Zq+4ZHVcRtXkSMgyU7O0OC+gO7uewLAzzWw5Akuk6AY=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: YxR/IEAXYjhKk4qyNbFNVRXx2+Bty0U++VTURHi/7GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6171 (0x181b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: May 10 16:26:48 2025 GMT Not After : May 17 16:26:48 2025 GMT Subject: CN=681f7e49-efd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:5a:c7:6c:03:7c:f6:d3:cf:f9:ff:ff:c7: 4e:7d:6c:ea:8b:37:bc:56:74:6f:48:48:b1:10:14: 31:2e:74:c2:12:b6:b3:86:bd:64:f4:80:1e:b2:e1: 96:9f:26:17:a5:de:19:ff:41:e9:61:01:22:89:dc: 6f:c7:b3:f9:46:b9:b8:15:d7:fb:81:5a:b0:71:38: 50:5c:d6:c6:91:e4:60:e1:71:c7:2a:21:cf:f9:3d: 3a:1c:d2:41:56:70:76:7c:5b:cf:9a:ec:1b:fd:c2: dd:a0:f8:57:eb:2c:23:a0:6c:e4:5b:24:33:45:b8: 55:a3:ce:a2:49:5f:76:8f:d9:42:5e:0e:d9:8d:ec: 3f:e4:08:3d:c5:55:c2:66:82:a6:71:8d:58:91:7e: b8:6b:83:72:52:6c:59:90:16:e9:bc:a1:91:de:e8: 10:91:ca:9b:d1:e1:51:85:68:f3:f6:89:11:a6:d1: aa:5e:ef:18:4a:a2:5c:2f:d2:26:f7:30:66:72:b6: 69:1a:0b:93:13:a2:55:dd:e6:76:09:76:9c:87:39: 4b:89:bb:60:67:2d:19:1b:f9:d9:fb:b3:60:f0:e9: e2:b6:8d:83:1a:c2:bc:03:18:b7:bb:1d:8b:6a:f4: 9a:f6:1d:a6:86:04:cb:f7:b2:7c:81:fd:ba:4f:47: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:FF:BD:C1:86:82:94:1F:0C:16:56:C3:96:36:8E:46:40:45:F5 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:42:c5:fc:49:9f:66:10:56:8e:d1:f5:77:d5:9f:65:43:a1: 2b:4d:f9:5d:be:cd:94:78:c2:29:b4:0a:16:82:9e:ea:1a:50: b7:c6:d4:11:95:31:d4:e5:57:cf:75:16:f1:50:8c:0f:c4:51: c1:55:66:35:80:e3:80:2d:fa:29:6b:0e:fa:46:29:70:89:80: 8b:43:aa:5d:56:15:f6:b7:e0:7a:c3:4a:67:3d:ef:5b:e7:15: 71:f8:76:2c:d1:bc:17:ef:7d:2d:53:f7:66:e2:cd:11:f3:bb: bb:a4:cc:9b:11:a6:ee:04:58:4f:7b:ab:f9:45:57:67:da:80: 67:16:73:ea:e8:2a:fe:dd:e6:b2:47:29:d0:8a:57:8e:3d:56: 48:1f:43:a3:1d:54:66:73:84:71:47:19:eb:ed:13:b4:54:3b: 9b:f5:c9:2e:d3:48:e7:31:ae:f7:d0:6f:6d:01:72:14:46:d0: db:70:6b:ef:d5:c0:9b:14:d6:88:0d:39:0a:44:17:92:37:a9: 8b:b9:b7:f0:73:67:99:88:59:27:4e:0b:ea:69:c3:3c:f2:e5: 24:80:07:06:54:0a:80:e7:db:1e:49:16:e9:9e:88:b2:cc:b3: 8c:02:63:4f:15:a8:41:ac:65:59:2a:a6:15:07:77:e4:44:4c: 11:d1:7c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwNTEwMTYyNjQ4WhcNMjUwNTE3MTYyNjQ4WjAYMRYwFAYD VQQDEw02ODFmN2U0OS1lZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndtax2wDfPbTz/n//8dOfWzqize8VnRvSEixEBQxLnTCErazhr1k9IAesuGW nyYXpd4Z/0HpYQEiidxvx7P5Rrm4Fdf7gVqwcThQXNbGkeRg4XHHKiHP+T06HNJB VnB2fFvPmuwb/cLdoPhX6ywjoGzkWyQzRbhVo86iSV92j9lCXg7Zjew/5Ag9xVXC ZoKmcY1YkX64a4NyUmxZkBbpvKGR3ugQkcqb0eFRhWjz9okRptGqXu8YSqJcL9Im 9zBmcrZpGguTE6JV3eZ2CXachzlLibtgZy0ZG/nZ+7Ng8Onito2DGsK8Axi3ux2L avSa9h2mhgTL97J8gf26T0c5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5h/73B hoKUHwwWVsOWNo5GQEX1MB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfQsX8SZ9mEFaO0fV31Z9lQ6ErTfldvs2UeMIptAoWgp7qGlC3xtQR lTHU5VfPdRbxUIwPxFHBVWY1gOOALfopaw76RilwiYCLQ6pdVhX2t+B6w0pnPe9b 5xVx+HYs0bwX730tU/dm4s0R87u7pMybEabuBFhPe6v5RVdn2oBnFnPq6Cr+3eay RynQileOPVZIH0OjHVRmc4RxRxnr7RO0VDub9cku00jnMa730G9tAXIURtDbcGvv 1cCbFNaIDTkKRBeSN6mLubfwc2eZiFknTgvqacM88uUkgAcGVAqA59seSRbpnoiy zLOMAmNPFahBrGVZKqYVB3fkREwR0XyF -----END CERTIFICATE-----Generated at Sun May 11 13:24:20 2025 by rpki-client