$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: yxBSch2peZIABXBFybWPcfBTJHIk56hejJKOJtv/oUQ= Subject key identifier: 00:4D:6C:7D:CB:E2:F9:0E:60:93:97:D8:CC:9C:F5:64:F3:8C:45:F8 Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: 67 Signing time: Sun 11 May 2025 05:45:25 +0000 Manifest this update: Sun 11 May 2025 05:45:24 +0000 Manifest next update: Sun 18 May 2025 05:45:24 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: fPtBZXWvsaLSAcEQMcGuDhWbVVNgjOg0Xs1kz3vJJiM=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: May 11 05:45:24 2025 GMT Not After : May 18 05:45:24 2025 GMT Subject: CN=68203974-7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c3:ab:7e:bf:5e:ec:a0:63:ae:50:a2:cc:73: 42:63:f4:50:18:ab:ef:74:f2:55:75:5d:0c:f0:93: a8:86:17:ea:74:44:94:53:8f:58:c2:b7:f0:3d:b9: 12:63:7f:0c:37:30:a8:74:c2:40:a9:52:28:a6:77: 60:5a:cd:ff:a2:56:dc:b2:83:39:c5:a3:86:b8:c9: 45:56:d2:47:de:ad:6e:45:59:89:d2:62:7e:dc:42: ac:17:76:a8:15:ff:9e:06:39:11:04:59:c3:f0:52: 0f:a5:d2:7c:06:4c:d4:56:87:65:7d:12:82:15:44: 91:30:82:61:e2:23:51:dc:eb:aa:23:28:25:2c:bc: 39:bb:26:23:0b:3d:07:e6:cb:5d:1c:73:47:99:74: 03:e0:14:cb:6c:23:58:3e:88:46:3e:3d:fc:ae:79: cc:b7:4a:02:3d:ce:9d:71:1c:e4:da:a0:7b:24:32: cb:e7:24:eb:93:e4:cd:65:1a:15:7e:bd:76:6d:a8: 45:19:50:d2:06:ca:98:f3:b1:b2:54:7d:e6:38:c5: f7:a7:0e:e8:10:4a:32:d6:a1:01:80:fb:d0:56:52: d8:0b:72:11:59:e6:f1:d8:68:ba:cb:04:8f:92:76: 91:25:47:f9:0a:cb:dc:44:24:fb:a0:a8:c2:1b:55: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:6C:7D:CB:E2:F9:0E:60:93:97:D8:CC:9C:F5:64:F3:8C:45:F8 X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:40:6c:a3:d2:80:a2:9f:e8:f4:c5:d4:47:0a:ff:cb:0e:86: 08:00:4c:fc:64:c2:2d:2a:76:ae:fa:20:c7:60:b9:b2:25:ae: 6c:9b:45:2a:33:be:8c:91:26:8f:24:ec:ef:e4:1e:31:60:92: 69:71:dd:e7:3c:33:ce:54:9b:ab:4a:cf:c7:03:77:55:5a:3b: ed:33:c2:75:f8:2a:0e:0e:10:5f:5d:84:1b:f3:9c:9f:64:14: 8e:cf:42:42:0e:3d:13:d2:91:31:9b:b7:44:15:4a:8b:ef:fb: 61:b0:15:df:45:8f:92:43:8b:db:93:e1:0e:a0:db:fa:5a:23: eb:df:e0:48:f6:29:4c:7f:1f:af:16:52:35:3a:75:9d:ca:ab: 42:44:cb:35:3c:c4:39:02:79:18:a9:29:4b:6b:4b:56:90:a6: e0:7e:24:8c:78:02:c5:e8:bc:6e:6f:aa:83:a2:c8:b8:04:89: ce:86:02:aa:2a:26:77:89:26:29:d1:91:fe:41:e2:f1:29:e5: b1:1a:14:3b:c0:9c:b6:bf:37:a4:7d:13:f7:21:d8:30:bb:88: 43:90:93:3d:6c:9b:df:8a:60:63:1f:a6:95:82:c0:18:ef:29: 6b:79:e3:aa:a0:b2:7d:50:52:44:7f:69:78:ff:15:c0:bf:ea: 52:24:1a:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNTA1MTEwNTQ1MjRaFw0yNTA1MTgwNTQ1MjRaMBgxFjAUBgNV BAMTDTY4MjAzOTc0LTc2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhw6t+v17soGOuUKLMc0Jj9FAYq+908lV1XQzwk6iGF+p0RJRTj1jCt/A9uRJj fww3MKh0wkCpUiimd2Bazf+iVtyygznFo4a4yUVW0kferW5FWYnSYn7cQqwXdqgV /54GOREEWcPwUg+l0nwGTNRWh2V9EoIVRJEwgmHiI1Hc66ojKCUsvDm7JiMLPQfm y10cc0eZdAPgFMtsI1g+iEY+Pfyuecy3SgI9zp1xHOTaoHskMsvnJOuT5M1lGhV+ vXZtqEUZUNIGypjzsbJUfeY4xfenDugQSjLWoQGA+9BWUtgLchFZ5vHYaLrLBI+S dpElR/kKy9xEJPugqMIbVZ8LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAE1sfcvi +Q5gk5fYzJz1ZPOMRfgwHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Nzk0LzczREI3N0QwOTVCRTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJE SjVlbGhGUFpYemxpVnNmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVAbKPSgKKf6PTF1EcK/8sOhggATPxkwi0qdq76IMdgubIlrmybRSoz voyRJo8k7O/kHjFgkmlx3ec8M85Um6tKz8cDd1VaO+0zwnX4Kg4OEF9dhBvznJ9k FI7PQkIOPRPSkTGbt0QVSovv+2GwFd9Fj5JDi9uT4Q6g2/paI+vf4Ej2KUx/H68W UjU6dZ3Kq0JEyzU8xDkCeRipKUtrS1aQpuB+JIx4AsXovG5vqoOiyLgEic6GAqoq JneJJinRkf5B4vEp5bEaFDvAnLa/N6R9E/ch2DC7iEOQkz1sm9+KYGMfppWCwBjv KWt546qgsn1QUkR/aXj/FcC/6lIkGkg= -----END CERTIFICATE-----Generated at Sun May 11 09:06:32 2025 by rpki-client