$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: 8vTydNwktjtAlvlPogG5/sjDgr6z7EuGZi5EbghQ+w4= Subject key identifier: BD:A1:BA:51:07:91:0D:EA:E5:19:56:F9:A2:8C:63:46:26:C6:90:7D Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 016D Signing time: Sat 17 May 2025 03:32:13 +0000 Manifest this update: Sat 17 May 2025 03:32:12 +0000 Manifest next update: Sat 24 May 2025 03:32:12 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: Kp1RcynLnvhhMtJSqaVd2+C2hl4lDEWzVlGUFBWBdmY=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: May 17 03:32:12 2025 GMT Not After : May 24 03:32:12 2025 GMT Subject: CN=6828033d-6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:e6:35:11:10:8a:2e:df:d9:2a:13:62:98: d2:fe:f6:d8:d4:a1:23:d0:8f:c1:9d:07:a5:05:55: 18:ac:8e:9d:50:1d:26:2e:ea:6a:1d:e4:59:3c:64: f7:31:eb:e7:3e:30:5c:75:e8:3b:0f:1c:88:cc:73: f9:4a:b1:77:1d:21:77:21:a3:96:c8:20:3c:5f:a8: b0:7b:5d:84:15:80:2a:93:17:9b:76:5f:79:ae:21: 82:fc:ae:83:e0:43:06:dc:47:30:d2:d0:3b:0d:38: ae:37:1f:2d:71:2e:19:f6:0f:f5:7c:de:88:cc:2b: 5b:62:99:f2:5e:c3:93:60:8e:40:cb:5e:5c:3f:ae: f9:da:7e:61:36:a8:6f:ba:a4:fc:ca:12:ca:8b:e2: cd:92:a4:df:be:83:b3:32:b8:94:b2:00:c9:b8:cf: 25:0f:a3:41:e2:0c:77:34:e4:6c:44:24:2b:10:38: 2d:12:27:e4:61:a1:64:71:d9:38:d3:ae:e4:34:30: 6b:4d:91:b3:18:f7:b0:ff:e8:1f:64:27:da:4d:8a: ae:e6:17:5a:f1:c7:e2:f3:24:66:7a:90:44:df:1a: 8e:2a:88:18:49:69:85:11:fc:77:38:9d:16:62:ca: 49:b6:10:2e:2b:76:41:98:f3:88:b9:f4:68:b5:41: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A1:BA:51:07:91:0D:EA:E5:19:56:F9:A2:8C:63:46:26:C6:90:7D X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f3:c4:ac:39:3a:e8:d5:2f:be:84:8a:16:a0:e5:84:d8:00: db:f3:41:26:d6:1f:f6:08:03:3a:4a:b1:92:5a:e6:1a:1c:0e: f7:02:33:19:87:ed:69:13:f8:0c:0b:19:8e:d4:89:50:ce:eb: 90:04:9b:15:7d:db:42:35:17:2f:3e:47:8f:3e:53:34:16:0e: a1:3c:2a:21:4c:8b:5a:88:b5:5b:04:f4:bc:83:13:d3:d2:ed: 32:1f:75:f6:f7:8f:68:53:51:90:d5:a3:39:2c:5f:96:c9:ae: e5:f5:30:12:31:c6:df:bd:fb:8d:13:31:e1:c9:8c:b5:79:e9: 16:e8:9c:b8:1d:83:3f:77:64:d6:fe:d1:e7:35:cc:25:f0:08: b7:80:98:17:ec:d3:37:19:95:1b:57:e5:59:9d:5f:a3:2c:23: 13:3c:7c:8d:70:19:1f:85:5f:66:f5:11:23:a8:11:89:6b:47: 73:7d:69:02:31:de:ed:5e:18:14:7a:88:2a:fd:c3:bd:01:82: e7:7e:63:2d:66:1a:86:da:b5:75:68:53:37:a8:33:74:ed:1d: 73:cf:c8:a4:84:77:cb:08:e0:da:38:a6:92:93:31:bc:4f:3f: e4:22:2c:df:19:82:87:f9:b4:36:c3:1d:5e:2d:06:87:da:1f: 03:74:9b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwNTE3MDMzMjEyWhcNMjUwNTI0MDMzMjEyWjAYMRYwFAYD VQQDEw02ODI4MDMzZC02ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KfmNREQii7f2SoTYpjS/vbY1KEj0I/BnQelBVUYrI6dUB0mLupqHeRZPGT3 MevnPjBcdeg7DxyIzHP5SrF3HSF3IaOWyCA8X6iwe12EFYAqkxebdl95riGC/K6D 4EMG3Ecw0tA7DTiuNx8tcS4Z9g/1fN6IzCtbYpnyXsOTYI5Ay15cP6752n5hNqhv uqT8yhLKi+LNkqTfvoOzMriUsgDJuM8lD6NB4gx3NORsRCQrEDgtEifkYaFkcdk4 067kNDBrTZGzGPew/+gfZCfaTYqu5hda8cfi8yRmepBE3xqOKogYSWmFEfx3OJ0W YspJthAuK3ZBmPOIufRotUHsRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2hulEH kQ3q5RlW+aKMY0YmxpB9MB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB588SsOTro1S++hIoWoOWE2ADb80Em1h/2CAM6SrGSWuYaHA73AjMZ h+1pE/gMCxmO1IlQzuuQBJsVfdtCNRcvPkePPlM0Fg6hPCohTItaiLVbBPS8gxPT 0u0yH3X2949oU1GQ1aM5LF+Wya7l9TASMcbfvfuNEzHhyYy1eekW6Jy4HYM/d2TW /tHnNcwl8Ai3gJgX7NM3GZUbV+VZnV+jLCMTPHyNcBkfhV9m9REjqBGJa0dzfWkC Md7tXhgUeogq/cO9AYLnfmMtZhqG2rV1aFM3qDN07R1zz8ikhHfLCODaOKaSkzG8 Tz/kIizfGYKH+bQ2wx1eLQaH2h8DdJta -----END CERTIFICATE-----Generated at Sun May 18 07:33:07 2025 by rpki-client