$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: 2iIPKranz1JrcYkJvN607UOh78Vl6QEUxu/zAf4AmjQ= Subject key identifier: 11:3D:11:A7:A0:C4:6A:B1:E5:BB:3F:05:C1:25:9F:5E:57:05:2A:5E Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 3474 Signing time: Thu 24 Apr 2025 14:56:39 +0000 Manifest this update: Thu 24 Apr 2025 14:56:38 +0000 Manifest next update: Thu 01 May 2025 14:56:38 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: 8DwHgEvgKnqTdIUSxAuCSs4ew4/6rsfw/Miy9LZ7r3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Apr 24 14:56:38 2025 GMT Not After : May 1 14:56:38 2025 GMT Subject: CN=680a5126-70f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:27:5f:7b:e3:95:1c:b9:37:ac:53:de:d7: 71:c1:6a:a1:ab:a8:21:c5:e9:6d:fa:5e:9d:18:1d: 11:e9:f3:68:2c:8f:c3:dc:7e:b7:15:3a:8e:a6:a2: d7:ef:3e:d1:20:47:ac:63:db:3b:59:75:ce:2b:3e: 4e:d1:f8:bf:bc:94:ad:c5:4d:5e:c7:38:19:d1:9a: b7:7d:74:1a:83:28:55:02:eb:e8:28:fe:06:fc:8b: 30:28:2d:4c:58:6e:7c:7f:ac:b3:88:53:c3:80:18: 41:75:43:a2:ac:2a:f9:0d:a4:7a:6e:0b:e8:29:79: b7:e7:8f:50:57:2f:3b:47:dd:71:70:08:1c:c1:87: 46:70:75:5c:30:f9:bc:0a:3d:1c:b5:00:70:50:de: f4:a1:b1:fb:30:fb:f4:d9:12:d1:49:89:b7:89:6c: 84:0f:1f:ac:ab:a2:74:a7:d7:10:00:76:66:e6:5f: f0:95:9e:b0:92:48:6b:db:17:d9:f1:d8:32:9c:c7: b3:24:58:9c:1a:38:73:a2:6a:c0:09:09:43:e6:94: 5a:fa:4f:02:01:ac:8b:a0:b2:8c:78:32:5e:4e:7e: 45:28:b7:84:0b:f4:3c:41:15:bb:1b:0d:90:40:d3: 9d:39:41:52:47:d5:00:4f:56:1d:a3:66:c8:01:c7: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3D:11:A7:A0:C4:6A:B1:E5:BB:3F:05:C1:25:9F:5E:57:05:2A:5E X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:cd:36:32:fc:35:3d:33:07:92:13:73:f1:7f:b6:92:cf: 28:24:b4:84:58:00:22:d2:8e:e1:9d:bb:79:37:9d:b6:c9:78: c4:fe:dd:40:85:c5:7b:95:9d:af:c2:2d:b0:33:c6:ab:5b:14: a4:82:63:2a:f9:46:55:fc:42:64:1f:4e:fb:cd:2b:4c:07:15: cb:9c:20:9e:5b:1d:02:80:e9:18:ea:30:f7:05:a2:b0:a2:71: 7e:d5:82:95:22:84:55:8d:40:fa:c8:08:8c:e7:f1:3d:10:c1: a0:3d:d0:62:9a:75:04:d1:5f:1d:f6:b6:80:b8:8e:6f:ad:7d: 10:4f:61:53:d7:d5:87:83:97:14:a3:77:7e:c4:4f:51:56:27: 1f:11:20:9e:4f:a5:ee:52:c8:cd:f7:1c:c6:66:a5:1d:62:42: 2f:0f:b3:d7:a1:31:e7:d3:4b:ca:bf:ac:33:13:f9:c9:47:e6: b2:b7:18:18:cc:85:d9:9f:d3:c8:c3:28:44:e2:7e:cc:6c:e4: 5f:ae:09:52:3b:56:d3:0b:77:30:65:30:89:59:d6:5a:0e:c6: e4:4e:d7:a2:87:2c:83:05:fc:67:56:14:85:bb:8f:a7:7a:e1: 49:0a:3f:6a:37:a7:04:4e:a6:05:ec:15:22:a0:54:06:0a:da: c4:20:4b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjUwNDI0MTQ1NjM4WhcNMjUwNTAxMTQ1NjM4WjAYMRYwFAYD VQQDEw02ODBhNTEyNi03MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlAnX3vjlRy5N6xT3tdxwWqhq6ghxelt+l6dGB0R6fNoLI/D3H63FTqOpqLX 7z7RIEesY9s7WXXOKz5O0fi/vJStxU1exzgZ0Zq3fXQagyhVAuvoKP4G/IswKC1M WG58f6yziFPDgBhBdUOirCr5DaR6bgvoKXm3549QVy87R91xcAgcwYdGcHVcMPm8 Cj0ctQBwUN70obH7MPv02RLRSYm3iWyEDx+sq6J0p9cQAHZm5l/wlZ6wkkhr2xfZ 8dgynMezJFicGjhzomrACQlD5pRa+k8CAayLoLKMeDJeTn5FKLeEC/Q8QRW7Gw2Q QNOdOUFSR9UAT1Ydo2bIAcePCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE9Eaeg xGqx5bs/BcEln15XBSpeMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7q802Mvw1PTMHkhNz8X+2ks8oJLSEWAAi0o7hnbt5N522yXjE/t1A hcV7lZ2vwi2wM8arWxSkgmMq+UZV/EJkH077zStMBxXLnCCeWx0CgOkY6jD3BaKw onF+1YKVIoRVjUD6yAiM5/E9EMGgPdBimnUE0V8d9raAuI5vrX0QT2FT19WHg5cU o3d+xE9RVicfESCeT6XuUsjN9xzGZqUdYkIvD7PXoTHn00vKv6wzE/nJR+aytxgY zIXZn9PIwyhE4n7MbORfrglSO1bTC3cwZTCJWdZaDsbkTteihyyDBfxnVhSFu4+n euFJCj9qN6cETqYF7BUioFQGCtrEIEvp -----END CERTIFICATE-----Generated at Sat Apr 26 16:58:01 2025 by rpki-client