$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft File: YYQdHtq_n_D2AYxhEBevcZYnok0.mft (raw, json) Hash identifier: yQzcXxSV+c1GZxORlIjkQzY3u2tYKHZ4VBlxn92v6VM= Subject key identifier: 38:24:F4:98:5E:BB:65:50:97:C1:FF:AE:86:B1:90:49:00:06:8F:FA Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft Manifest number: 04EE Signing time: Thu 24 Apr 2025 23:38:43 +0000 Manifest this update: Thu 24 Apr 2025 23:38:42 +0000 Manifest next update: Thu 01 May 2025 23:38:42 +0000 Files and hashes: 1: YYQdHtq_n_D2AYxhEBevcZYnok0.crl (hash: MXz1sgiGi+vEdNjpIqognI4caCA4ciHs9TPJO93FFDk=) 2: E6F081CAB4D111EFB518113FC4F9AE02.roa (hash: gmtg83b40Tkb+D3gBbZ+Di+lUHrNe5TxNxrJ6h+P2/o=) 3: CBCD14C8471B11EEABCACF68C4F9AE02.roa (hash: UQXQ0zih1R4yEWTzxa6D1G/eVXXNcEV+g1pp2duHg7A=) 4: CF9E64BED65711EE8623B920C4F9AE02.roa (hash: KFSR8nqG2sOGDYAgAFeqv4yoVxNtWdp8vNs36B/HOmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117373, serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Validity Not Before: Apr 24 23:38:42 2025 GMT Not After : May 1 23:38:42 2025 GMT Subject: CN=680acb82-99ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:f9:c6:7c:5a:60:ce:d2:cd:97:d5:6f:f7: 49:db:90:cd:d1:d0:4e:90:75:c2:35:60:e6:f0:f3: a7:5f:dc:70:4b:8f:30:e6:be:1c:f3:2c:12:95:5b: 19:5e:64:d9:93:2c:27:43:d6:9f:29:9b:ed:32:8b: a1:26:e1:8d:b7:e2:63:dc:ea:06:69:54:24:a3:7f: 72:f5:84:36:7a:f0:7a:0c:c4:c4:6c:db:f3:e2:38: 7b:53:6f:7b:db:88:0a:a9:1b:aa:92:c2:e8:b9:f6: 35:34:4b:e1:36:77:2f:66:cc:1c:dc:c3:e5:01:89: 17:06:34:91:47:27:2c:c2:75:42:f0:7c:a9:d5:c1: a2:ac:96:ea:c7:6c:df:bb:83:c0:8e:82:c5:b0:fd: f5:18:b5:3f:f1:dc:06:16:e4:05:31:b5:e9:ac:50: 04:30:84:c3:22:49:a8:ea:2b:c6:8c:65:32:b7:ad: 16:c0:b1:51:b4:1a:d3:c2:1e:ab:42:1b:9d:19:1c: 55:3f:1b:1b:d0:fd:ad:b5:78:96:0f:53:7b:f9:22: 6d:49:f4:7c:44:60:bd:dd:76:6d:ab:b1:83:93:de: a6:7e:65:c5:fd:bf:98:74:0e:9b:15:4a:fe:7f:21: dc:38:70:bb:d7:1e:2c:bf:1f:46:c1:e3:64:2a:5d: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:F4:98:5E:BB:65:50:97:C1:FF:AE:86:B1:90:49:00:06:8F:FA X509v3 Authority Key Identifier: keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6a:da:70:5e:89:00:8d:6d:da:26:36:a0:9a:10:14:73:66: 23:9c:c9:1b:5c:e2:18:64:6f:5e:ec:2c:28:6b:48:2f:ec:2e: 48:03:6c:08:3a:4b:ad:82:21:6e:c6:e5:e1:95:7c:35:65:fc: 2a:af:a4:a8:57:9c:7b:79:8e:06:84:3b:76:6a:09:d3:3a:51: 15:f8:86:2b:e9:a4:49:51:a8:71:31:b5:4f:ce:09:e4:a1:75: 43:ba:27:3c:6a:f1:5e:2e:1e:38:a5:34:7e:a2:a9:21:dc:a2: f5:7d:07:13:90:e1:27:3d:ce:ed:57:21:1d:c8:78:14:34:0a: dc:6b:2e:6b:b1:df:6c:67:b1:85:c7:43:f0:98:b6:43:3d:87: 86:6c:63:ba:cb:44:6f:0c:28:8c:73:4f:64:02:f5:de:87:3a: 7a:a8:5c:b2:22:dd:7e:78:bd:30:04:fc:d0:99:ae:a5:3b:56: ce:14:ef:b6:f2:2e:97:b5:df:66:09:96:a7:39:06:bc:09:d1: 6f:08:0d:09:d4:7b:26:ea:5b:3a:ad:41:a7:70:2c:48:ba:2e: bc:1a:c0:1d:d9:78:cc:94:c5:d9:c9:f0:6c:11:71:04:f0:cf: c2:fc:5d:f4:d4:8e:01:d6:dc:c7:c0:0d:97:8a:c9:e1:04:b4: 27:f4:3d:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2MTEwMTdBRjcx OTYyN0EyNEQwHhcNMjUwNDI0MjMzODQyWhcNMjUwNTAxMjMzODQyWjAYMRYwFAYD VQQDEw02ODBhY2I4Mi05OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzL5xnxaYM7SzZfVb/dJ25DN0dBOkHXCNWDm8POnX9xwS48w5r4c8ywSlVsZ XmTZkywnQ9afKZvtMouhJuGNt+Jj3OoGaVQko39y9YQ2evB6DMTEbNvz4jh7U297 24gKqRuqksLoufY1NEvhNncvZswc3MPlAYkXBjSRRycswnVC8Hyp1cGirJbqx2zf u4PAjoLFsP31GLU/8dwGFuQFMbXprFAEMITDIkmo6ivGjGUyt60WwLFRtBrTwh6r QhudGRxVPxsb0P2ttXiWD1N7+SJtSfR8RGC93XZtq7GDk96mfmXF/b+YdA6bFUr+ fyHcOHC71x4svx9GweNkKl2y/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgk9Jhe u2VQl8H/roaxkEkABo/6MB8GA1UdIwQYMBaAFGGEHR7av5/w9gGMYRAXr3GWJ6JN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM3My9CRkE5QzM2MjIz QUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25fRDJBWXhoRUJldmNaWW5v azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lZUWRIdHFfbl9EMkFZeGhFQmV2Y1pZbm9rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM3My9CRkE5QzM2MjIzQUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25f RDJBWXhoRUJldmNaWW5vazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5atpwXokAjW3aJjagmhAUc2YjnMkbXOIYZG9e7Cwoa0gv7C5IA2wI OkutgiFuxuXhlXw1Zfwqr6SoV5x7eY4GhDt2agnTOlEV+IYr6aRJUahxMbVPzgnk oXVDuic8avFeLh44pTR+oqkh3KL1fQcTkOEnPc7tVyEdyHgUNArcay5rsd9sZ7GF x0PwmLZDPYeGbGO6y0RvDCiMc09kAvXehzp6qFyyIt1+eL0wBPzQma6lO1bOFO+2 8i6Xtd9mCZanOQa8CdFvCA0J1Hsm6ls6rUGncCxIui68GsAd2XjMlMXZyfBsEXEE 8M/C/F301I4B1tzHwA2XisnhBLQn9D2C -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:11 2025 by rpki-client