$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft File: Y-N84NAMINhocKc_1uy8iZwbngs.mft (raw, json) Hash identifier: liIJ6KVmqBcLtYEh1pZ4psRMDQS2DHgzjWbkuDE0Azg= Subject key identifier: FF:22:49:8E:1D:CF:E2:4C:C6:B6:2A:D8:B6:EE:B0:42:2A:8C:32:B8 Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B Certificate issuer: /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft Manifest number: 06A1 Signing time: Thu 24 Apr 2025 22:00:58 +0000 Manifest this update: Thu 24 Apr 2025 22:00:58 +0000 Manifest next update: Thu 01 May 2025 22:00:58 +0000 Files and hashes: 1: Y-N84NAMINhocKc_1uy8iZwbngs.crl (hash: OEvlpkCt6pPEtrtLSX4oHe6GRLE4hv/009BvHez11LM=) 2: A642A4AC650A11EB83E0FE0FC4F9AE02.roa (hash: eQ2J/fmizWMOory711iqHEB6K5GkScUdEbc7vy/Au7w=) 3: 602D049AC1DE11EB98E1AD43C4F9AE02.roa (hash: tOvzYrsalWJNmj9WItm2EeNfbIzeiJCLx/kwvWJGmiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B Validity Not Before: Apr 24 22:00:58 2025 GMT Not After : May 1 22:00:58 2025 GMT Subject: CN=680ab49a-2e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:fa:64:22:2d:02:e8:e8:5f:0f:f1:09:04: 1c:f7:a0:fc:2e:ae:3f:ae:0c:95:77:b6:2d:78:3c: 9f:12:12:bd:20:d8:5d:34:4e:7d:9b:66:bd:dc:a2: 0e:8a:4d:35:c3:ce:61:81:62:eb:f9:b2:fd:4e:85: 0e:da:a8:4d:90:aa:27:df:9d:3d:8d:2f:f6:05:ed: b9:79:91:02:18:91:4e:22:a5:cc:3e:a4:f4:93:47: 0a:c0:fb:39:ec:bb:a7:6d:a6:69:7a:72:e1:59:b9: b6:e9:b5:d2:76:e0:c0:79:3a:c0:9c:c9:65:35:24: 14:32:60:05:1e:7d:f1:0c:16:e1:e2:48:0e:bf:2f: 3b:8c:11:5e:b5:fb:cf:03:f1:d8:66:70:9c:f2:02: 11:6e:41:1b:74:c5:e2:c2:03:e0:65:d9:cf:4f:bf: 17:28:62:e6:fe:56:d0:7a:91:79:79:95:a6:12:ef: 55:f3:3a:19:fd:6e:91:6b:c6:c3:b6:ad:83:61:47: 3e:6e:4f:a9:3a:89:5c:b9:c7:62:2c:11:22:69:90: 33:a1:ae:35:61:7d:85:5a:46:e2:22:b9:72:0c:7c: 09:a4:84:06:11:9b:b6:d2:17:04:fa:17:66:98:f7: 6c:f8:a5:de:d9:0f:b3:4c:d1:d0:31:f6:37:b2:15: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:22:49:8E:1D:CF:E2:4C:C6:B6:2A:D8:B6:EE:B0:42:2A:8C:32:B8 X509v3 Authority Key Identifier: keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:a5:69:6d:b1:5b:fe:98:3d:a4:73:33:4e:8c:11:f8:be: 0c:e1:e5:fa:7d:8d:87:ad:9c:d6:be:af:ea:0c:dd:c0:5c:01: 8e:4b:c8:e9:07:e2:7e:d2:71:d5:82:b3:fb:50:66:3b:24:91: 47:ff:52:12:75:cf:30:09:9c:46:5d:d1:ea:4c:37:ed:3d:15: 4a:ab:06:d9:42:c5:cb:82:96:29:9c:e6:b8:0e:bd:32:49:c4: 3d:fa:8b:b1:00:ca:35:db:6c:2c:49:b0:6d:79:ae:f3:ac:7d: a5:79:cb:dc:39:60:c9:75:74:33:84:b4:4a:25:2d:2c:e4:89: c8:9a:fa:8f:59:1d:00:a1:7b:48:ea:92:e2:25:36:28:27:36: fc:a7:d3:42:a6:4d:49:c2:3e:73:f1:9c:66:46:8a:a9:33:12: 20:cc:35:43:9e:68:ad:78:fe:3e:22:0f:72:63:bc:cc:fb:32: 92:ca:3b:58:b7:39:96:88:49:cb:43:f1:48:af:c9:c2:eb:ae: e0:5e:d5:75:17:0c:24:5a:9e:d8:03:4c:02:3f:ee:a9:b7:58: 55:75:9d:24:64:a9:56:0b:e5:6d:25:ab:27:b9:a4:78:84:7c: 0b:5f:24:c0:3e:68:01:01:43:c3:2d:1b:0a:90:05:02:86:c7: a7:c9:0b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NjUxMTAvBgNVBAUTKDYzRTM3Q0UwRDAwQzIwRDg2ODcwQTczRkQ2RUNCQzg5 OUMxQjlFMEIwHhcNMjUwNDI0MjIwMDU4WhcNMjUwNTAxMjIwMDU4WjAYMRYwFAYD VQQDEw02ODBhYjQ5YS0yZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGv6ZCItAujoXw/xCQQc96D8Lq4/rgyVd7YteDyfEhK9INhdNE59m2a93KIO ik01w85hgWLr+bL9ToUO2qhNkKon3509jS/2Be25eZECGJFOIqXMPqT0k0cKwPs5 7LunbaZpenLhWbm26bXSduDAeTrAnMllNSQUMmAFHn3xDBbh4kgOvy87jBFetfvP A/HYZnCc8gIRbkEbdMXiwgPgZdnPT78XKGLm/lbQepF5eZWmEu9V8zoZ/W6Ra8bD tq2DYUc+bk+pOolcucdiLBEiaZAzoa41YX2FWkbiIrlyDHwJpIQGEZu20hcE+hdm mPds+KXe2Q+zTNHQMfY3shXiMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8iSY4d z+JMxrYq2LbusEIqjDK4MB8GA1UdIwQYMBaAFGPjfODQDCDYaHCnP9bsvImcG54L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg2NS83NkI2QTBEMjY1 MDgxMUVCOEYyNjE1MERDNEY5QUUwMi9ZLU44NE5BTUlOaG9jS2NfMXV5OGlad2Ju Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktTjg0TkFNSU5ob2NLY18xdXk4aVp3Ym5ncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg2NS83NkI2QTBEMjY1MDgxMUVCOEYyNjE1MERDNEY5QUUwMi9ZLU44NE5BTUlO aG9jS2NfMXV5OGlad2JuZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/c6VpbbFb/pg9pHMzTowR+L4M4eX6fY2HrZzWvq/qDN3AXAGOS8jp B+J+0nHVgrP7UGY7JJFH/1ISdc8wCZxGXdHqTDftPRVKqwbZQsXLgpYpnOa4Dr0y ScQ9+ouxAMo122wsSbBtea7zrH2lecvcOWDJdXQzhLRKJS0s5InImvqPWR0AoXtI 6pLiJTYoJzb8p9NCpk1Jwj5z8ZxmRoqpMxIgzDVDnmiteP4+Ig9yY7zM+zKSyjtY tzmWiEnLQ/FIr8nC667gXtV1FwwkWp7YA0wCP+6pt1hVdZ0kZKlWC+VtJasnuaR4 hHwLXyTAPmgBAUPDLRsKkAUChsenyQvw -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:21 2025 by rpki-client