$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json) Hash identifier: rx9XCAtzKOWJn7ey/NTq9yKpqpfkUrm8mITwVw7iL7A= Subject key identifier: 42:24:63:B7:4B:CC:6C:DA:B1:B2:65:77:1F:11:55:C5:62:AB:56:C5 Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft Manifest number: 08AB Signing time: Fri 02 May 2025 20:43:10 +0000 Manifest this update: Fri 02 May 2025 20:43:09 +0000 Manifest next update: Fri 09 May 2025 20:43:09 +0000 Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: JtswiD8r2a8+raF9RPc0NNBeDifHc0wYOy2IdbIXHvk=) 2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: ejgjifoiJDZJ+gWsoAobC1JoVa6W0Im+MVj8NKJ7EYw=) 3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: 5yaZ6S1Dp8sDk+BVEX55LZpSEffc1QPyVJT4ZIYCENM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Validity Not Before: May 2 20:43:09 2025 GMT Not After : May 9 20:43:09 2025 GMT Subject: CN=68152e5d-adbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:68:f6:eb:b3:21:a0:58:89:74:c6:e9:d5: 7e:30:9b:31:87:32:cb:3b:48:7a:4c:a6:cd:2b:98: f4:ef:32:44:47:df:a8:e1:53:ee:7f:ef:56:f3:64: 0f:5c:00:70:0f:bd:97:4e:97:57:fe:68:ae:81:de: 93:b5:cb:71:6d:74:84:b5:de:d0:cc:9d:37:07:63: f4:04:7b:23:08:2b:18:27:4f:6c:1e:bc:7f:b9:ce: 80:f9:5a:42:a0:3c:6a:ea:e3:db:30:48:32:98:e1: c0:b8:4e:e1:87:ec:ca:6a:03:1c:ba:e6:27:94:96: b9:88:bb:0b:4a:a7:4b:07:70:58:8b:b5:15:aa:74: 4f:90:af:68:71:40:7c:19:ae:6e:91:4d:82:86:03: e8:bd:53:9c:d5:ef:e0:78:83:25:13:52:58:3f:c3: c1:f0:95:52:e4:f3:52:05:2b:07:86:74:53:0f:bd: 78:e0:f8:e5:b4:09:e2:12:6a:66:75:15:84:8f:6e: fa:2c:08:68:cc:a5:c6:5c:00:48:72:ac:65:3f:a2: 58:47:93:94:6b:e0:90:2d:da:db:d2:2b:97:07:e8: c8:b1:4a:ed:0f:82:28:f0:32:30:98:b6:dd:3b:dd: 5c:95:89:ba:f9:43:7b:44:e3:bb:67:4d:81:1b:6e: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:63:B7:4B:CC:6C:DA:B1:B2:65:77:1F:11:55:C5:62:AB:56:C5 X509v3 Authority Key Identifier: keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8c:48:75:09:8a:cc:9b:7e:13:27:13:aa:20:7d:16:8c:b6: ae:f4:3c:ff:ac:e9:a3:89:23:53:5f:4c:93:b0:8b:d1:38:32: df:73:af:d4:b5:fe:b4:53:5d:95:9b:3d:b6:98:0d:c2:c1:48: 26:ab:90:1d:0d:d2:32:1a:07:19:c1:c2:0e:3f:0f:2e:37:a0: 18:99:bf:b6:f0:e3:40:b7:77:3d:b2:3c:6d:e8:3f:ab:e7:a4: 3b:3f:e8:e3:b8:d5:4e:12:7a:50:db:60:76:f7:e7:10:3a:0f: 0e:7c:36:dd:38:31:59:ea:4b:90:fd:61:87:75:57:09:f6:35: 5b:a5:8f:99:af:0b:02:be:85:bf:0d:54:6b:64:07:b2:3c:8c: 87:52:09:24:14:07:fc:42:6a:a4:2f:e4:2f:4e:9c:11:7b:31: c3:35:c0:22:f2:81:f1:10:74:44:e9:ff:bf:94:d1:26:d0:ce: bc:83:ea:03:98:16:ff:25:a7:aa:7b:26:7f:f6:68:d3:c1:10: 80:9f:d1:30:85:03:14:ef:a1:9c:b6:89:b7:e8:1b:2e:83:b3: 76:ff:15:0b:cf:b9:1e:2e:a8:07:1d:1e:70:c2:71:1e:67:09: 4b:53:06:66:c8:15:01:1d:7b:e6:33:1d:d3:1b:c4:9e:55:65: b1:33:59:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG MzRDNUM3RDgwHhcNMjUwNTAyMjA0MzA5WhcNMjUwNTA5MjA0MzA5WjAYMRYwFAYD VQQDEw02ODE1MmU1ZC1hZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFVo9uuzIaBYiXTG6dV+MJsxhzLLO0h6TKbNK5j07zJER9+o4VPuf+9W82QP XABwD72XTpdX/miugd6TtctxbXSEtd7QzJ03B2P0BHsjCCsYJ09sHrx/uc6A+VpC oDxq6uPbMEgymOHAuE7hh+zKagMcuuYnlJa5iLsLSqdLB3BYi7UVqnRPkK9ocUB8 Ga5ukU2ChgPovVOc1e/geIMlE1JYP8PB8JVS5PNSBSsHhnRTD7144PjltAniEmpm dRWEj276LAhozKXGXABIcqxlP6JYR5OUa+CQLdrb0iuXB+jIsUrtD4Io8DIwmLbd O91clYm6+UN7ROO7Z02BG27IOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIkY7dL zGzasbJldx8RVcViq1bFMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3 OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY4My8zRjBCMzU2MkI3OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFV VUQ3Vjdtd0stU2p6VEZ4OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5jEh1CYrMm34TJxOqIH0WjLau9Dz/rOmjiSNTX0yTsIvRODLfc6/U tf60U12Vmz22mA3CwUgmq5AdDdIyGgcZwcIOPw8uN6AYmb+28ONAt3c9sjxt6D+r 56Q7P+jjuNVOEnpQ22B29+cQOg8OfDbdODFZ6kuQ/WGHdVcJ9jVbpY+ZrwsCvoW/ DVRrZAeyPIyHUgkkFAf8QmqkL+QvTpwRezHDNcAi8oHxEHRE6f+/lNEm0M68g+oD mBb/JaeqeyZ/9mjTwRCAn9EwhQMU76Gctom36Bsug7N2/xULz7keLqgHHR5wwnEe ZwlLUwZmyBUBHXvmMx3TG8SeVWWxM1nJ -----END CERTIFICATE-----Generated at Sat May 3 16:35:51 2025 by rpki-client