$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: 54RXIgLhop4zCbOMxc9+l6Zp04zA4fRxgGll41DHZLw= Subject key identifier: 11:89:5C:D9:D9:D9:25:F9:DA:E0:7D:59:E7:06:30:05:F3:FE:99:C1 Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 08BC Signing time: Thu 24 Apr 2025 20:22:21 +0000 Manifest this update: Thu 24 Apr 2025 20:22:20 +0000 Manifest next update: Thu 01 May 2025 20:22:20 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: ED0yn0YfJpXYmo/zl4/+vo2nCX3zqwwvyg8Vd+PHg9I=) 2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=) 3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455, serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: Apr 24 20:22:20 2025 GMT Not After : May 1 20:22:20 2025 GMT Subject: CN=680a9d7d-d06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:63:d9:62:b2:e5:9c:8b:16:45:6d:d1:da: 5e:5b:81:81:cd:e2:ed:1a:fb:3d:8a:7a:2a:20:3c: bb:be:15:eb:61:d9:65:75:0d:df:5f:f8:51:dc:25: 6a:05:dd:af:b1:0f:51:73:d0:3f:78:12:24:54:5f: 23:38:76:7c:80:82:59:ca:ef:41:12:81:80:81:ed: 93:4d:e5:63:a9:2f:90:ee:fa:a7:01:8e:3b:86:34: 78:12:c4:d2:7f:ed:21:a4:a3:03:bb:b6:8b:bf:1f: 23:24:8d:32:37:a8:65:98:3f:df:07:8b:6f:c4:48: 59:3a:26:83:9c:60:c9:48:a2:c9:56:95:99:ea:e3: 7a:40:08:c7:18:be:65:01:05:95:dd:19:7f:eb:e5: e3:e2:b9:e9:a1:ea:36:5b:a5:e9:16:71:3d:59:79: db:bb:19:e1:ec:23:b3:44:e2:69:b8:d5:35:6c:d9: 76:f0:7d:9d:76:ed:8e:86:3c:2e:20:61:24:a1:f8: 3e:82:8a:bd:07:24:cb:8b:b7:7c:31:ca:37:b5:ea: c2:27:18:17:af:c7:98:39:8a:8a:fe:b8:89:0b:28: 73:f1:98:3b:02:3c:ab:cf:c4:56:94:c5:e1:e0:c2: da:ca:ca:b8:64:f8:b0:7c:86:7f:29:df:8c:ef:63: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:89:5C:D9:D9:D9:25:F9:DA:E0:7D:59:E7:06:30:05:F3:FE:99:C1 X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a4:48:ec:9a:df:f9:bc:bb:be:8b:6c:62:d7:e5:22:2b:ac: f4:db:f1:25:3d:7c:7f:8b:44:b1:22:1a:b0:49:e3:6f:9b:64: 47:82:a2:2e:db:27:59:dc:4d:62:25:cd:06:41:1c:78:98:95: 93:c5:10:6c:95:3a:c0:03:6b:5e:c1:b7:fd:19:46:28:4e:43: 93:22:9f:28:2a:66:4d:49:e0:02:84:5d:87:ca:e0:1a:44:fc: 0a:f7:21:52:c8:f5:91:95:3f:33:9d:74:36:ee:ca:5f:b4:36: a1:e1:14:6c:3a:08:9d:8e:2d:81:71:cf:49:89:94:21:24:a1: 24:2a:eb:10:67:0d:5f:3c:79:87:f7:db:35:00:76:2e:8e:e7: 48:14:30:ad:34:17:68:90:1a:bc:9e:3e:60:39:5c:ad:65:db: bc:da:88:29:5b:15:19:b0:8e:4f:45:f5:26:0a:e5:20:c6:e2: e5:c4:b8:76:56:0e:2a:fd:87:82:87:b7:22:d0:2e:cd:c6:aa: 82:52:dd:79:8c:e5:30:ca:e5:93:93:68:d3:0d:d3:49:40:25: bb:29:8c:c3:7d:cb:1c:43:c6:42:b2:38:b4:43:13:63:9e:17: 00:86:88:4a:18:3f:8e:e3:8a:1d:02:a7:58:c7:94:ae:79:6e: 7f:90:d4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjUwNDI0MjAyMjIwWhcNMjUwNTAxMjAyMjIwWjAYMRYwFAYD VQQDEw02ODBhOWQ3ZC1kMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdZj2WKy5ZyLFkVt0dpeW4GBzeLtGvs9inoqIDy7vhXrYdlldQ3fX/hR3CVq Bd2vsQ9Rc9A/eBIkVF8jOHZ8gIJZyu9BEoGAge2TTeVjqS+Q7vqnAY47hjR4EsTS f+0hpKMDu7aLvx8jJI0yN6hlmD/fB4tvxEhZOiaDnGDJSKLJVpWZ6uN6QAjHGL5l AQWV3Rl/6+Xj4rnpoeo2W6XpFnE9WXnbuxnh7COzROJpuNU1bNl28H2ddu2Ohjwu IGEkofg+goq9ByTLi7d8Mco3terCJxgXr8eYOYqK/riJCyhz8Zg7Ajyrz8RWlMXh 4MLaysq4ZPiwfIZ/Kd+M72M56wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGJXNnZ 2SX52uB9WecGMAXz/pnBMB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlpEjsmt/5vLu+i2xi1+UiK6z02/ElPXx/i0SxIhqwSeNvm2RHgqIu 2ydZ3E1iJc0GQRx4mJWTxRBslTrAA2tewbf9GUYoTkOTIp8oKmZNSeAChF2HyuAa RPwK9yFSyPWRlT8znXQ27spftDah4RRsOgidji2Bcc9JiZQhJKEkKusQZw1fPHmH 99s1AHYujudIFDCtNBdokBq8nj5gOVytZdu82ogpWxUZsI5PRfUmCuUgxuLlxLh2 Vg4q/YeCh7ci0C7NxqqCUt15jOUwyuWTk2jTDdNJQCW7KYzDfcscQ8ZCsji0QxNj nhcAhohKGD+O44odAqdYx5SueW5/kNQN -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:10 2025 by rpki-client