$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: NpQ685k1gUABP2fy9TbVft3uIrfXN5ugWUTpfJIpfuk= Subject key identifier: BC:F3:2B:E0:3B:F8:A5:D2:FD:95:D6:63:33:18:25:4C:A5:E5:B5:9B Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 01C2 Signing time: Fri 25 Apr 2025 02:14:35 +0000 Manifest this update: Fri 25 Apr 2025 02:14:35 +0000 Manifest next update: Fri 02 May 2025 02:14:35 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: 1CPZJ/ABktU6Iw4Z3rWG96Eot0t82BEi99xBrsBM8Is=) 2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: Apr 25 02:14:35 2025 GMT Not After : May 2 02:14:35 2025 GMT Subject: CN=680af00b-78aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:75:68:4f:50:3a:79:f2:d7:38:ca:e9:e0: 50:a6:42:83:2e:a0:fd:37:dc:f2:34:dd:de:57:c6: c3:6d:f0:a5:bf:8b:80:e6:d5:17:ab:90:28:e5:d3: dc:79:5f:59:dc:54:f4:b8:a0:dc:7a:35:06:07:f2: b8:7a:2d:4f:fe:2e:44:15:ff:e1:3c:c6:bb:1d:0f: 89:e7:a3:75:83:54:03:5d:32:68:e6:16:fa:30:a2: ff:cb:4d:fa:a6:95:41:1e:e6:b1:25:54:cf:5d:2c: a5:7f:0d:9e:51:fc:5a:ba:10:e8:7d:a3:4e:34:9f: ff:36:20:a4:da:b8:b5:d3:ef:38:10:20:ee:86:60: 7b:fe:47:e6:7a:0a:96:bf:a8:e0:4c:02:54:54:fa: 68:75:79:aa:ea:93:60:3b:68:05:ed:b2:5e:6b:87: 23:d7:09:51:be:d9:fd:67:34:78:b5:86:b4:eb:02: 19:8b:f7:60:37:f5:e7:cb:12:ce:42:f3:4e:c8:af: 95:9b:ea:4c:e3:64:7b:8c:7c:6a:40:66:08:0f:77: 06:c8:37:88:eb:8a:ce:a4:0b:a7:55:04:d0:13:e0: b9:45:98:2d:d0:2f:ad:c2:43:11:47:99:f3:c4:de: 4e:db:17:7d:50:14:04:01:ec:fc:02:cc:f8:b1:2a: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:2B:E0:3B:F8:A5:D2:FD:95:D6:63:33:18:25:4C:A5:E5:B5:9B X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:4b:c3:b8:3d:0c:14:28:6a:b4:ef:7a:a4:07:55:83:3f: 3b:35:85:89:2b:68:ef:e2:8c:dc:b3:f0:dd:b6:27:6b:15:9f: b9:87:93:25:45:4b:59:6a:7e:75:72:f8:b4:db:12:1a:fb:74: c2:4d:7d:f1:1a:3b:c6:e1:6e:eb:4a:3e:3b:62:c8:04:b2:2f: 66:8a:93:d0:f7:8d:62:0d:cc:98:1e:ea:35:d9:88:d0:38:97: 94:5a:be:d5:30:b6:28:08:9b:a6:ec:03:15:b4:fe:39:a9:80: 9a:1d:d5:51:06:a5:a1:9a:d6:ef:4c:b2:e1:df:b1:47:ac:0e: 6d:74:72:a6:21:81:50:3b:d5:36:c8:42:17:25:b2:5d:63:45: 59:12:0e:1d:c6:fd:63:4a:1f:49:f2:db:ad:1b:a9:8e:eb:e3: 50:52:1b:a0:92:22:c0:91:1d:b2:71:80:76:e3:8d:e7:95:67: 77:38:ab:21:ea:61:f7:3c:c1:95:08:90:58:81:fb:0c:7c:ba: ad:7b:fa:23:01:e6:7a:9d:91:c5:82:59:67:5a:66:3f:1b:6a: a8:90:89:2e:9c:52:49:3e:23:43:5b:62:88:1b:bf:ed:85:fc: 0d:85:fb:f3:3a:c5:96:be:2d:65:2e:43:c3:6e:ca:8d:99:fe: bd:45:5b:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjUwNDI1MDIxNDM1WhcNMjUwNTAyMDIxNDM1WjAYMRYwFAYD VQQDEw02ODBhZjAwYi03OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBN1aE9QOnny1zjK6eBQpkKDLqD9N9zyNN3eV8bDbfClv4uA5tUXq5Ao5dPc eV9Z3FT0uKDcejUGB/K4ei1P/i5EFf/hPMa7HQ+J56N1g1QDXTJo5hb6MKL/y036 ppVBHuaxJVTPXSylfw2eUfxauhDofaNONJ//NiCk2ri10+84ECDuhmB7/kfmegqW v6jgTAJUVPpodXmq6pNgO2gF7bJea4cj1wlRvtn9ZzR4tYa06wIZi/dgN/XnyxLO QvNOyK+Vm+pM42R7jHxqQGYID3cGyDeI64rOpAunVQTQE+C5RZgt0C+twkMRR5nz xN5O2xd9UBQEAez8Asz4sSr3swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzzK+A7 +KXS/ZXWYzMYJUyl5bWbMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKw0vDuD0MFChqtO96pAdVgz87NYWJK2jv4ozcs/DdtidrFZ+5h5Ml RUtZan51cvi02xIa+3TCTX3xGjvG4W7rSj47YsgEsi9mipPQ941iDcyYHuo12YjQ OJeUWr7VMLYoCJum7AMVtP45qYCaHdVRBqWhmtbvTLLh37FHrA5tdHKmIYFQO9U2 yEIXJbJdY0VZEg4dxv1jSh9J8tutG6mO6+NQUhugkiLAkR2ycYB2443nlWd3OKsh 6mH3PMGVCJBYgfsMfLqte/ojAeZ6nZHFgllnWmY/G2qokIkunFJJPiNDW2KIG7/t hfwNhfvzOsWWvi1lLkPDbsqNmf69RVve -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:23 2025 by rpki-client