$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: 9+XKGqIrI4YK5STrMlt1zEeTqLycBjoigkJNfUH8vVE= Subject key identifier: C4:2F:77:F8:67:18:D7:2A:DC:A8:D2:DF:D4:A4:7F:C5:4A:C4:86:4A Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 010C Signing time: Fri 25 Apr 2025 04:04:23 +0000 Manifest this update: Fri 25 Apr 2025 04:04:22 +0000 Manifest next update: Fri 02 May 2025 04:04:22 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: TpJ9Odr1LQsR0tLX/0Leqrv81KxjdufMAWPghjXurL4=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Apr 25 04:04:22 2025 GMT Not After : May 2 04:04:22 2025 GMT Subject: CN=680b09c6-2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:b9:99:cf:21:31:ae:93:8f:ca:2f:ff:a4: 40:f7:70:83:e7:4f:f3:61:8e:c3:bd:fb:7b:5e:a6: 1d:3e:15:8b:39:ad:44:e7:81:db:ba:76:a2:1c:68: 43:4f:31:ce:0b:0a:95:2a:f7:2c:ee:71:51:3a:b4: 1c:47:c5:69:cf:8e:66:1d:14:d8:4d:11:a0:fd:9e: ac:d2:35:20:24:48:99:b5:5f:24:48:68:75:05:6c: 83:67:65:3b:2c:82:44:c4:68:40:c1:df:a2:cf:b4: 4e:b9:d7:c5:10:77:6f:5d:b9:5a:0b:f2:fc:e9:72: ec:00:8c:78:b4:c1:7d:d0:5e:3d:ec:e1:ea:9a:12: 0f:d6:44:4c:b9:33:c2:0e:98:2c:57:be:46:4d:5e: 2d:20:43:37:23:de:eb:03:77:35:86:5d:54:cb:93: a5:a5:b5:ee:c9:85:ab:5f:5b:ec:37:2f:ce:40:7d: 59:7f:ad:4d:1a:f8:10:2d:f5:5f:27:dd:90:83:ea: 9d:4f:2c:c5:b3:89:4b:3d:80:1f:42:a4:34:67:ae: 51:d3:60:b1:34:b5:e1:67:05:6f:70:94:13:ff:a5: d3:96:67:e2:ec:36:25:7a:74:3b:7f:31:79:ce:37: cc:7c:9d:c9:91:80:0f:2e:63:c9:4d:41:21:08:8f: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:77:F8:67:18:D7:2A:DC:A8:D2:DF:D4:A4:7F:C5:4A:C4:86:4A X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:2b:d8:a5:c1:c9:0f:95:49:da:39:d4:66:4f:bb:fc:59: 84:5e:0a:60:54:7f:1b:49:28:39:5f:c9:52:6b:83:75:bb:f2: df:f6:93:6d:15:8e:77:f7:b5:4a:22:83:e7:5a:a9:ba:fc:72: 5a:f6:d6:d6:5e:35:5c:01:a4:8b:a8:34:3d:67:34:0c:cb:bf: 30:fb:d4:ed:b7:15:c9:ac:54:15:89:5b:2f:d5:fa:a5:da:2a: 61:79:41:cd:54:71:bf:1d:58:62:f8:85:28:d5:9c:17:83:87: 4d:62:24:a7:2c:bb:21:40:36:e4:9f:b8:f8:56:ad:87:d8:08: 66:35:a0:5e:78:73:8b:63:5d:d8:63:f1:bf:a1:d8:35:bc:5f: 8c:19:0f:11:e4:ce:7f:57:be:78:bf:7b:3d:9c:92:49:7d:a4: 2a:de:01:a9:7e:1e:6e:8d:d7:13:83:29:6d:d3:e5:0a:f0:7a: 9e:f8:4b:a7:23:c5:b2:1f:a0:83:fb:4b:8f:f7:17:8e:9d:29: 80:da:a1:b9:f5:4b:ba:0e:44:35:04:60:c8:3e:57:44:03:3e: b5:0d:01:e8:4a:f7:c1:f3:db:f8:8f:ec:60:15:a0:1e:c4:69: aa:a2:2f:f8:0b:89:8e:c0:08:d0:17:7b:a6:44:b6:94:98:0d: 8b:e5:5b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwNDI1MDQwNDIyWhcNMjUwNTAyMDQwNDIyWjAYMRYwFAYD VQQDEw02ODBiMDljNi0yNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCG5mc8hMa6Tj8ov/6RA93CD50/zYY7Dvft7XqYdPhWLOa1E54HbunaiHGhD TzHOCwqVKvcs7nFROrQcR8Vpz45mHRTYTRGg/Z6s0jUgJEiZtV8kSGh1BWyDZ2U7 LIJExGhAwd+iz7ROudfFEHdvXblaC/L86XLsAIx4tMF90F497OHqmhIP1kRMuTPC DpgsV75GTV4tIEM3I97rA3c1hl1Uy5OlpbXuyYWrX1vsNy/OQH1Zf61NGvgQLfVf J92Qg+qdTyzFs4lLPYAfQqQ0Z65R02CxNLXhZwVvcJQT/6XTlmfi7DYlenQ7fzF5 zjfMfJ3JkYAPLmPJTUEhCI+yRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQvd/hn GNcq3KjS39Skf8VKxIZKMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSyvYpcHJD5VJ2jnUZk+7/FmEXgpgVH8bSSg5X8lSa4N1u/Lf9pNt FY5397VKIoPnWqm6/HJa9tbWXjVcAaSLqDQ9ZzQMy78w+9TttxXJrFQViVsv1fql 2ipheUHNVHG/HVhi+IUo1ZwXg4dNYiSnLLshQDbkn7j4Vq2H2AhmNaBeeHOLY13Y Y/G/odg1vF+MGQ8R5M5/V754v3s9nJJJfaQq3gGpfh5ujdcTgylt0+UK8Hqe+Eun I8WyH6CD+0uP9xeOnSmA2qG59Uu6DkQ1BGDIPldEAz61DQHoSvfB89v4j+xgFaAe xGmqoi/4C4mOwAjQF3umRLaUmA2L5VtN -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:25 2025 by rpki-client