$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: 5/dhSxRaJg7WAM8k4j9fumFzi0HowZD4R33y3fw+CNM= Subject key identifier: 7D:A6:89:A1:AB:84:08:51:47:F4:AA:CC:F1:43:A0:B6:A2:3F:6D:CA Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: 83 Signing time: Fri 25 Apr 2025 05:36:14 +0000 Manifest this update: Fri 25 Apr 2025 05:36:14 +0000 Manifest next update: Fri 02 May 2025 05:36:14 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: hIvxwib+xc26CTbxIqi8BOcdoFjrJCeE+1cGDeSIS9Y=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: HB8QMXYnImTcdy2zBeTOvUb91weeMYAQqjoTwrsvfrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Apr 25 05:36:14 2025 GMT Not After : May 2 05:36:14 2025 GMT Subject: CN=680b1f4e-de40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:19:3e:33:65:2e:2b:82:7e:cc:b7:42:bf: c7:86:89:52:ee:d2:fc:20:d0:65:63:33:91:1f:69: 35:a8:51:99:11:8c:d6:10:7b:a4:36:5d:f4:74:15: 72:ce:89:56:a2:7a:a8:3f:04:66:ba:25:eb:24:e4: 63:73:50:97:83:df:94:ca:02:59:d0:3d:db:85:39: 5f:08:73:df:85:af:64:d3:72:d7:e4:9c:1e:1b:1a: b1:62:60:f1:81:37:69:b7:55:bc:4d:2c:96:17:51: ef:0e:f2:03:14:d3:f6:f4:87:e9:05:5c:12:fb:d8: 28:d7:70:9b:96:e4:9f:49:ad:9f:ed:50:93:cb:26: 50:64:a8:9c:d0:f7:5b:89:6b:26:d3:3c:ef:a5:91: 41:06:65:a1:38:0d:ac:57:19:38:5b:5b:f2:4d:bc: bd:e9:7d:cf:e9:30:39:9d:54:c8:48:11:cf:90:a5: 9c:ec:a5:e8:dd:5b:5e:00:60:87:15:1b:4b:12:2e: 10:f7:5b:52:5c:8c:2f:da:ce:a5:02:a8:83:f3:a5: 82:36:a4:38:22:74:9c:8a:11:67:81:de:26:55:0d: 56:df:64:b5:db:49:12:18:95:f1:f0:b9:d5:2e:63: 8e:ba:8f:ad:df:f4:23:19:12:a4:54:98:3c:00:2d: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A6:89:A1:AB:84:08:51:47:F4:AA:CC:F1:43:A0:B6:A2:3F:6D:CA X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5c:af:2d:1b:ac:70:5f:fb:3a:0d:2c:7a:14:c8:ce:cc:72: f7:8d:b0:35:b7:85:a1:83:80:e4:f9:7e:94:e5:9f:b4:2f:a7: 32:bf:be:5b:75:2a:e3:68:0e:e0:22:d4:34:a8:9a:88:b8:3e: 8b:95:96:ef:73:4a:86:02:c0:97:aa:14:fe:7c:8f:ea:a6:c2: 97:0e:1b:a4:a9:4d:42:41:13:8a:a9:0f:b2:a2:33:e6:0d:1e: 8b:6c:79:de:2c:f4:9b:61:a4:c2:e0:71:02:26:3b:01:0b:e6: f4:cf:0a:f1:3b:33:35:43:39:e7:d4:65:83:46:bc:08:7e:3e: 19:6b:95:ac:24:57:9b:44:39:02:fd:46:3e:28:03:47:26:49: 88:31:ef:ce:17:37:f3:ac:13:96:b3:f6:08:00:ea:2a:bf:e8: d7:57:26:d9:5b:82:e3:97:49:0c:29:3f:01:e3:b1:00:64:18: 50:d5:fd:56:0b:53:86:24:da:d9:b4:01:d0:fe:a7:ab:d2:cc: e7:1c:3c:1e:d8:a8:5b:f3:4a:b9:fe:f7:19:fd:85:00:d7:29: cb:1f:42:11:60:69:47:38:a9:34:1d:b5:b1:1c:55:28:c9:34: 5a:fa:f0:90:cf:d6:3b:a5:0d:00:5e:99:5f:80:c6:6b:c2:8a: 44:60:14:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwNDI1MDUzNjE0WhcNMjUwNTAyMDUzNjE0WjAYMRYwFAYD VQQDEw02ODBiMWY0ZS1kZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwoZPjNlLiuCfsy3Qr/HholS7tL8INBlYzORH2k1qFGZEYzWEHukNl30dBVy zolWonqoPwRmuiXrJORjc1CXg9+UygJZ0D3bhTlfCHPfha9k03LX5JweGxqxYmDx gTdpt1W8TSyWF1HvDvIDFNP29IfpBVwS+9go13CbluSfSa2f7VCTyyZQZKic0Pdb iWsm0zzvpZFBBmWhOA2sVxk4W1vyTby96X3P6TA5nVTISBHPkKWc7KXo3VteAGCH FRtLEi4Q91tSXIwv2s6lAqiD86WCNqQ4InScihFngd4mVQ1W32S120kSGJXx8LnV LmOOuo+t3/QjGRKkVJg8AC3o8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2miaGr hAhRR/SqzPFDoLaiP23KMB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYXK8tG6xwX/s6DSx6FMjOzHL3jbA1t4Whg4Dk+X6U5Z+0L6cyv75b dSrjaA7gItQ0qJqIuD6LlZbvc0qGAsCXqhT+fI/qpsKXDhukqU1CQROKqQ+yojPm DR6LbHneLPSbYaTC4HECJjsBC+b0zwrxOzM1Qznn1GWDRrwIfj4Za5WsJFebRDkC /UY+KANHJkmIMe/OFzfzrBOWs/YIAOoqv+jXVybZW4Ljl0kMKT8B47EAZBhQ1f1W C1OGJNrZtAHQ/qer0sznHDwe2Khb80q5/vcZ/YUA1ynLH0IRYGlHOKk0HbWxHFUo yTRa+vCQz9Y7pQ0AXplfgMZrwopEYBQg -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:38 2025 by rpki-client