$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft File: Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json) Hash identifier: //tVgYGNx7jGPUkjWb6WidX+oR7NKOo8VDrXiv1Axag= Subject key identifier: 1B:EA:AC:7C:24:1D:6F:37:64:4B:EB:68:68:06:FC:D3:E9:39:41:84 Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2 Certificate issuer: /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft Manifest number: 076D Signing time: Thu 24 Apr 2025 21:20:20 +0000 Manifest this update: Thu 24 Apr 2025 21:20:20 +0000 Manifest next update: Thu 01 May 2025 21:20:20 +0000 Files and hashes: 1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: J9f4Em81UAkby70m9+SpC0iRN+F6BP9kUKFdw4rD4Cg=) 2: 2FEEF9460BA411F09C0DA13EC4F9AE02.roa (hash: nYQ3v1iu2XL5boe2h2z3J0bY4n0AsQbbrEjIQJNVO1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2 Validity Not Before: Apr 24 21:20:20 2025 GMT Not After : May 1 21:20:20 2025 GMT Subject: CN=680aab14-9eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:5b:73:85:58:20:70:54:41:c3:6b:8f:fa: 2f:34:75:50:6e:f5:d6:f2:14:13:aa:a5:09:f0:5c: df:bf:7a:38:45:cf:5c:e5:2e:95:7e:09:25:02:a7: 6f:dc:02:22:bf:0c:8f:45:e9:9d:f2:25:ed:42:8e: ea:f2:c9:54:e3:e9:71:d5:fe:45:2e:89:f1:f2:3b: 6c:e0:ed:5a:b0:60:35:61:08:d2:9e:16:07:50:8c: 67:1f:75:02:69:c9:01:ec:42:16:0e:9e:af:4a:74: f4:f0:fa:cd:a5:c9:2e:d5:1b:6c:92:5f:05:45:d7: 31:c1:a4:59:52:93:60:66:26:a8:cc:76:b0:e7:1f: a2:fa:73:25:5a:64:35:b2:bc:3c:a1:38:14:fe:be: c2:97:af:d3:44:a0:0a:19:0a:71:fa:e5:81:47:5d: 57:ea:ba:d3:c5:a7:c2:06:be:1e:ec:98:96:99:6c: 7b:f1:5e:65:26:d0:ee:5c:e7:30:4b:57:87:7d:c5: 20:0d:37:1d:b1:f9:ee:a8:03:64:44:b5:e2:fb:70: a9:b3:41:7b:c2:01:f9:6d:c2:55:ba:52:2c:a9:b5: 6e:26:ff:c9:fd:ff:98:61:03:81:74:a7:2d:a0:f0: 28:e1:51:5b:ea:01:e1:2f:5c:b9:b1:d5:4c:4e:10: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:AC:7C:24:1D:6F:37:64:4B:EB:68:68:06:FC:D3:E9:39:41:84 X509v3 Authority Key Identifier: keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f5:2e:4f:e2:7e:51:b6:3f:68:f5:5b:91:05:78:9a:a5:3b: c1:fe:dd:76:41:ae:7c:d4:1b:58:94:85:9c:56:3a:83:c0:92: 33:2d:14:3a:04:e7:42:a7:06:8f:d5:10:a9:3b:d5:28:21:36: 84:95:7b:cc:73:24:4b:70:88:ce:be:98:63:1e:18:a7:24:80: e5:13:d7:70:e5:e1:b3:51:aa:20:ed:23:4b:25:a3:f8:51:e9: 06:e6:0e:e5:e6:cf:7b:09:28:f5:5c:14:78:05:90:ed:65:26: 5d:17:04:59:87:cd:0f:01:82:1e:db:26:a5:5b:99:fb:f5:fb: 69:5d:54:23:5d:86:ec:09:15:8b:33:65:00:7b:89:9b:30:01: ba:fb:dc:b6:7c:4b:3b:6c:77:64:02:11:15:51:84:74:b5:d2: 9d:40:8a:1b:d1:ca:ad:55:66:66:26:7c:05:a6:2a:37:30:ab: 8c:f9:9a:11:b0:bb:8f:39:c0:9c:16:2b:ab:93:0e:c2:5f:0c: 51:fe:7d:00:0b:8c:88:3c:37:8f:fd:48:fa:a8:e2:7e:70:89: a1:55:46:c3:a0:da:9c:bf:ed:1b:44:7c:48:73:dc:ab:bc:58: 64:25:d8:af:4f:7d:73:cd:ea:49:1d:20:37:a0:a7:a8:c9:87: 89:42:84:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4OTkxMTAvBgNVBAUTKDYyNUVENERCREYyNzQ2MzIyRjU1OTM4NTcyOEU4RThF NUZGOEJBQzIwHhcNMjUwNDI0MjEyMDIwWhcNMjUwNTAxMjEyMDIwWjAYMRYwFAYD VQQDEw02ODBhYWIxNC05ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gVbc4VYIHBUQcNrj/ovNHVQbvXW8hQTqqUJ8Fzfv3o4Rc9c5S6VfgklAqdv 3AIivwyPRemd8iXtQo7q8slU4+lx1f5FLonx8jts4O1asGA1YQjSnhYHUIxnH3UC ackB7EIWDp6vSnT08PrNpcku1Rtskl8FRdcxwaRZUpNgZiaozHaw5x+i+nMlWmQ1 srw8oTgU/r7Cl6/TRKAKGQpx+uWBR11X6rrTxafCBr4e7JiWmWx78V5lJtDuXOcw S1eHfcUgDTcdsfnuqANkRLXi+3Cps0F7wgH5bcJVulIsqbVuJv/J/f+YYQOBdKct oPAo4VFb6gHhL1y5sdVMThCrGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvqrHwk HW83ZEvraGgG/NPpOUGEMB8GA1UdIwQYMBaAFGJe1NvfJ0YyL1WThXKOjo5f+LrC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg5OS9FRjIzMjZDNjE0 MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJqSXZWWk9GY282T2psXzR1 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lsN1UyOThuUmpJdlZaT0ZjbzZPamxfNHVzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg5OS9FRjIzMjZDNjE0MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJq SXZWWk9GY282T2psXzR1c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9S5P4n5Rtj9o9VuRBXiapTvB/t12Qa581BtYlIWcVjqDwJIzLRQ6 BOdCpwaP1RCpO9UoITaElXvMcyRLcIjOvphjHhinJIDlE9dw5eGzUaog7SNLJaP4 UekG5g7l5s97CSj1XBR4BZDtZSZdFwRZh80PAYIe2yalW5n79ftpXVQjXYbsCRWL M2UAe4mbMAG6+9y2fEs7bHdkAhEVUYR0tdKdQIob0cqtVWZmJnwFpio3MKuM+ZoR sLuPOcCcFiurkw7CXwxR/n0AC4yIPDeP/Uj6qOJ+cImhVUbDoNqcv+0bRHxIc9yr vFhkJdivT31zzepJHSA3oKeoyYeJQoRn -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:18 2025 by rpki-client