$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: ThSFqY6UO2Y63Csq2C8jsdRT8IaUvwYTwy7ybaDog48= Subject key identifier: 60:51:D6:E4:5A:D2:A4:73:0E:AE:8B:A0:7A:A3:93:AA:B1:13:47:EA Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 103A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 103A Signing time: Thu 24 Apr 2025 17:24:26 +0000 Manifest this update: Thu 24 Apr 2025 17:24:25 +0000 Manifest next update: Thu 01 May 2025 17:24:25 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: IlQojHOZLJA/uQKehSUMFUgcHMaAHVWkGNhOtbz2o6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4154 (0x103a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Apr 24 17:24:25 2025 GMT Not After : May 1 17:24:25 2025 GMT Subject: CN=680a73ca-a81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:a2:d1:87:33:d2:a5:7f:c4:a8:1b:c3:db: 11:0c:fe:6b:b6:fa:25:5c:b9:92:ed:d4:c7:32:89: 62:97:36:ee:e5:da:92:24:9e:60:f7:54:93:49:75: a6:98:df:ce:b7:61:a8:3e:ea:73:0e:ba:16:99:81: 45:61:8d:e5:85:22:3b:e6:b2:c3:05:0c:3c:bd:bd: 32:93:f6:30:90:bf:4a:15:42:e5:b2:44:a4:df:4e: b1:00:9d:1b:21:38:b9:c2:76:9c:51:8c:b3:4e:2f: ac:be:0f:32:09:18:11:b6:5f:b2:5b:4d:1c:b7:59: f5:5d:5c:b8:5d:ef:ca:05:bb:65:65:ef:73:b0:ca: 36:01:f5:35:4f:d9:8a:17:b5:f4:e9:d3:c3:96:64: 06:c3:5e:4c:30:4b:e2:67:d6:06:05:23:1d:b2:8b: 32:78:ca:28:7e:21:96:57:b5:51:05:6e:89:a6:eb: 80:68:24:c1:98:6f:97:6c:1e:07:4f:a8:58:80:f2: 82:ca:1e:05:ab:2e:49:96:51:e9:fc:4e:89:45:26: a4:b8:8b:01:aa:5d:1c:e5:d1:81:c5:1d:dd:55:a7: 36:21:ba:0f:6e:94:54:dc:09:5f:29:1b:73:71:aa: 27:09:1c:15:8d:25:87:b3:9d:6e:b9:a0:ea:0e:89: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:51:D6:E4:5A:D2:A4:73:0E:AE:8B:A0:7A:A3:93:AA:B1:13:47:EA X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:26:43:d6:9a:8b:7f:5a:dd:2e:2d:2d:80:2f:84:46:ea:e9: 7f:07:31:47:a8:73:d5:0d:b5:76:e6:98:b9:83:71:5b:95:30: d1:be:64:16:eb:0b:f7:c5:08:60:f6:41:b1:b6:0d:be:71:23: 6e:36:9f:76:2c:f9:f8:a8:9d:71:28:9e:9d:13:17:5b:26:ec: 4b:5f:26:b6:22:e6:e7:15:f0:8b:2e:e5:84:a5:db:6f:13:37: b3:38:13:60:9a:e1:92:d0:02:bd:ea:ac:62:9c:3b:e6:f7:eb: fe:4f:2c:61:8d:a8:47:1a:85:7c:0c:3a:fe:4f:97:c5:f2:dc: cc:cc:3e:c9:b2:81:49:3d:ba:e4:7e:81:6b:8d:36:43:34:c3: 3e:06:89:2d:e0:ad:b5:8c:21:7a:6f:ec:d8:58:ee:25:f2:d3: fd:13:e8:6b:8a:5e:34:bf:f4:40:ff:17:07:6f:c7:b0:29:07: 85:f8:f4:b8:bd:c0:ac:77:28:57:7f:b3:5c:9d:5c:d2:de:89: b6:e1:38:29:86:14:dc:10:9d:0b:0d:af:af:f4:32:b7:5c:72: 0e:3e:a3:af:d6:3e:a3:9c:53:cf:77:f5:6b:4f:84:50:3a:a4: 61:19:20:91:9d:d0:69:d2:ff:84:3a:71:f5:32:84:22:ca:93: 93:2e:ba:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwNDI0MTcyNDI1WhcNMjUwNTAxMTcyNDI1WjAYMRYwFAYD VQQDEw02ODBhNzNjYS1hODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq+i0Ycz0qV/xKgbw9sRDP5rtvolXLmS7dTHMolilzbu5dqSJJ5g91STSXWm mN/Ot2GoPupzDroWmYFFYY3lhSI75rLDBQw8vb0yk/YwkL9KFULlskSk306xAJ0b ITi5wnacUYyzTi+svg8yCRgRtl+yW00ct1n1XVy4Xe/KBbtlZe9zsMo2AfU1T9mK F7X06dPDlmQGw15MMEviZ9YGBSMdsosyeMoofiGWV7VRBW6JpuuAaCTBmG+XbB4H T6hYgPKCyh4Fqy5JllHp/E6JRSakuIsBql0c5dGBxR3dVac2IboPbpRU3AlfKRtz caonCRwVjSWHs51uuaDqDonogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBR1uRa 0qRzDq6LoHqjk6qxE0fqMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJkPWmot/Wt0uLS2AL4RG6ul/BzFHqHPVDbV25pi5g3FblTDRvmQW 6wv3xQhg9kGxtg2+cSNuNp92LPn4qJ1xKJ6dExdbJuxLXya2IubnFfCLLuWEpdtv EzezOBNgmuGS0AK96qxinDvm9+v+TyxhjahHGoV8DDr+T5fF8tzMzD7JsoFJPbrk foFrjTZDNMM+Bokt4K21jCF6b+zYWO4l8tP9E+hril40v/RA/xcHb8ewKQeF+PS4 vcCsdyhXf7NcnVzS3om24TgphhTcEJ0LDa+v9DK3XHIOPqOv1j6jnFPPd/VrT4RQ OqRhGSCRndBp0v+EOnH1MoQiypOTLrpb -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:40 2025 by rpki-client