$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft File: yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json) Hash identifier: iiSmaOgTpuvRqnm5wWPuAoSmrKxfSnQ6L7b88L7xhKc= Subject key identifier: 0D:78:E1:60:43:7B:D3:79:E5:22:B3:41:7A:20:A0:D0:8A:DA:37:2F Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 Certificate issuer: /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Certificate serial: 0977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft Manifest number: 0970 Signing time: Thu 24 Apr 2025 20:02:31 +0000 Manifest this update: Thu 24 Apr 2025 20:02:31 +0000 Manifest next update: Thu 01 May 2025 20:02:31 +0000 Files and hashes: 1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: T9KOhwvCaSZ4bTO3No7sZNBHfORLLeAdV3S7XHC7SAE=) 2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: lg62QlYMqjfdPrlhdfFEapPKxJAEOZfWw6bA0op19ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Validity Not Before: Apr 24 20:02:31 2025 GMT Not After : May 1 20:02:31 2025 GMT Subject: CN=680a98d7-3893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:43:30:a7:bd:10:ec:2b:0d:0f:c2:20:18: 53:b7:b8:76:e0:f0:8a:2a:34:98:44:c2:8e:d0:76: 72:db:71:ae:d9:23:a6:5f:c8:28:a0:7c:aa:d2:c4: e1:5f:9c:ab:fa:c0:82:8e:e8:10:48:7b:02:f4:55: 0c:35:ca:2f:35:e9:14:64:72:56:60:9a:e2:a6:16: ba:c4:13:a0:3a:c4:22:f4:80:d9:e5:c5:72:09:5a: be:82:0b:fa:9a:44:e3:42:37:00:81:51:ef:87:fd: fb:2a:74:8c:c5:08:f1:e5:ad:67:44:4c:c3:6a:88: 09:91:ab:1d:2a:c4:cd:92:77:6a:1c:2b:21:f6:a4: 38:81:5f:7b:22:72:cd:1f:50:26:37:c8:53:34:1f: 28:05:d0:f8:53:73:01:23:9e:0e:26:0e:5a:05:92: 7d:6a:27:a2:f4:82:ba:9d:1b:bf:60:e7:e9:31:12: 70:1a:c4:c7:1d:c5:b3:6b:c3:84:b0:22:a7:4e:56: 43:e3:0c:02:70:fc:4a:44:68:a7:c5:b4:2a:c1:19: 1a:d4:86:77:12:b0:86:e5:73:0e:a7:88:45:a1:32: 3e:d0:6e:6f:b7:95:7f:9b:1b:12:fb:0d:c0:a4:6f: 15:63:f1:9b:5d:d4:00:1a:49:66:5f:94:02:e7:bc: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:E1:60:43:7B:D3:79:E5:22:B3:41:7A:20:A0:D0:8A:DA:37:2F X509v3 Authority Key Identifier: keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5f:6b:6d:9c:56:d4:d4:dd:a5:17:c5:8d:3d:61:33:51:a9: 25:b2:13:cf:b7:c1:56:56:79:19:a1:63:8c:1d:47:52:03:60: 7d:15:1f:e4:b1:cf:11:c3:1a:e1:4a:36:3a:62:82:75:cd:fa: c6:5a:2e:c8:62:6a:4d:b8:b1:9b:f6:bc:bf:f5:05:94:8d:35: f6:d6:5d:df:c6:a6:56:7e:33:a8:1d:ad:dc:7a:e9:bb:7a:83: ae:bc:db:7a:43:0a:60:7a:02:24:aa:42:13:53:9f:33:c5:3d: 62:62:30:ee:e1:8c:1a:40:83:3d:06:2d:da:95:f4:93:75:9a: a8:c7:4a:2b:43:24:b0:3c:d9:ba:21:d6:2a:88:55:03:c4:a1: 31:7d:71:e9:7d:ef:91:14:c8:13:85:4b:4d:56:1e:2d:45:bd: 63:2c:ac:13:97:18:55:79:4f:7c:01:f4:98:6e:37:3a:ba:13: 9f:da:32:e0:da:de:76:e2:14:59:11:6a:7d:ec:5b:38:5c:91: f1:ed:38:e0:57:4d:77:61:fd:e3:9a:45:cb:6f:28:8a:56:d5: c1:69:97:58:d0:03:06:2d:8c:b2:f5:d0:8e:d3:78:1a:7c:b3: c9:7a:9c:da:c6:e7:95:af:d5:d7:36:63:56:b6:eb:bd:77:14: dd:dd:13:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNDIxMTAvBgNVBAUTKENCMjRDRjMzMTJBMTYyNzE1OENDM0FEQTg4OEU1QkNC MEM2N0NFQTEwHhcNMjUwNDI0MjAwMjMxWhcNMjUwNTAxMjAwMjMxWjAYMRYwFAYD VQQDEw02ODBhOThkNy0zODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28FDMKe9EOwrDQ/CIBhTt7h24PCKKjSYRMKO0HZy23Gu2SOmX8gooHyq0sTh X5yr+sCCjugQSHsC9FUMNcovNekUZHJWYJripha6xBOgOsQi9IDZ5cVyCVq+ggv6 mkTjQjcAgVHvh/37KnSMxQjx5a1nREzDaogJkasdKsTNkndqHCsh9qQ4gV97InLN H1AmN8hTNB8oBdD4U3MBI54OJg5aBZJ9aiei9IK6nRu/YOfpMRJwGsTHHcWza8OE sCKnTlZD4wwCcPxKRGinxbQqwRka1IZ3ErCG5XMOp4hFoTI+0G5vt5V/mxsS+w3A pG8VY/GbXdQAGklmX5QC57wk5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA144WBD e9N55SKzQXogoNCK2jcvMB8GA1UdIwQYMBaAFMskzzMSoWJxWMw62oiOW8sMZ86h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM0Mi8wQjQxMDBDMDhF OEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFluRll6RHJhaUk1Ynl3eG56 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5VFBNeEtoWW5GWXpEcmFpSTVieXd4bnpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM0Mi8wQjQxMDBDMDhFOEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFlu Rll6RHJhaUk1Ynl3eG56cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNX2ttnFbU1N2lF8WNPWEzUaklshPPt8FWVnkZoWOMHUdSA2B9FR/k sc8RwxrhSjY6YoJ1zfrGWi7IYmpNuLGb9ry/9QWUjTX21l3fxqZWfjOoHa3ceum7 eoOuvNt6QwpgegIkqkITU58zxT1iYjDu4YwaQIM9Bi3alfSTdZqox0orQySwPNm6 IdYqiFUDxKExfXHpfe+RFMgThUtNVh4tRb1jLKwTlxhVeU98AfSYbjc6uhOf2jLg 2t524hRZEWp97Fs4XJHx7TjgV013Yf3jmkXLbyiKVtXBaZdY0AMGLYyy9dCO03ga fLPJepzaxueVr9XXNmNWtuu9dxTd3RN4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:48 2025 by rpki-client