$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: YxmzUnGZX3tvVZ6rLYSJy21ET0qIL4iG/Z4GX9Ang6Y= Subject key identifier: 41:30:BB:D4:31:03:74:BD:BE:F7:D9:6E:65:FB:CB:08:03:7B:EB:EA Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 06F4 Signing time: Sat 26 Apr 2025 21:38:41 +0000 Manifest this update: Sat 26 Apr 2025 21:38:40 +0000 Manifest next update: Sat 03 May 2025 21:38:40 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: 71qkZbuy5O1U33dEHNLfHuPT8KegtPKPvyyPMjMvqrQ=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: Apr 26 21:38:40 2025 GMT Not After : May 3 21:38:40 2025 GMT Subject: CN=680d5260-46e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:7a:61:e4:76:18:a9:ec:bb:46:fe:f2:8d: d8:02:3f:28:24:66:53:ea:08:9f:a3:d7:48:ab:02: c3:5a:1a:ad:43:90:63:3f:4b:b4:b9:b3:38:7b:a7: a9:8e:6b:0c:32:b6:15:1f:fe:30:82:1b:36:e9:65: 54:4f:80:b3:0f:d9:bd:84:bd:eb:83:2c:d6:e4:34: 54:52:09:57:a1:e2:a9:02:65:13:a3:54:2c:f8:f6: c0:7e:15:66:a1:b5:3a:89:1c:c0:d3:d1:f0:0d:39: 67:c9:1c:0a:ce:53:4c:64:3c:8a:4f:ee:15:60:fb: 75:9b:70:09:27:dd:66:18:77:5c:01:c8:cc:54:cb: cd:37:fc:77:0d:78:9b:d5:3e:20:a4:ec:8e:6e:f6: e9:1e:80:88:87:52:70:6c:88:7a:56:92:1b:1b:d7: 79:86:07:54:f5:29:f5:bf:4a:83:ed:cc:ae:7e:a6: c3:ea:5b:47:03:52:4f:c5:44:93:c2:12:bc:78:39: c3:90:ab:ee:ad:d6:ba:6a:22:6f:d2:a9:7a:f0:10: 4c:61:c8:b2:83:a6:46:cd:1f:f1:fa:43:8c:a5:02: d7:c4:b6:7a:f0:24:d5:70:22:7c:da:e9:c4:fb:35: 3b:eb:b9:56:e8:bb:85:b0:ed:aa:96:6a:b2:0b:04: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:30:BB:D4:31:03:74:BD:BE:F7:D9:6E:65:FB:CB:08:03:7B:EB:EA X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d2:80:2b:c0:05:12:38:13:84:19:dd:29:1c:12:65:41:c6: 9f:9b:ff:63:73:84:8a:8c:b1:91:11:d1:e1:d3:6f:56:47:f2: 14:71:98:d5:39:39:24:9c:af:09:92:d8:0c:53:c1:18:10:c7: d5:7a:f6:85:62:4f:a2:2e:03:f5:b5:87:f1:d6:50:5d:05:01: 57:21:d7:5e:5c:d8:5c:f5:21:71:0f:1d:03:b5:b1:bc:01:59: e3:28:0a:3f:16:04:3d:c2:e5:59:8f:64:12:29:89:e5:ee:58: 65:4b:75:ce:e8:6b:76:61:79:81:70:36:3c:a6:8a:0f:16:41: 9b:81:5b:96:73:9a:17:89:82:15:d8:b3:4d:ca:66:9e:a8:88: 75:3b:98:fd:a1:ce:c0:1e:7a:fa:30:31:41:e6:06:82:0e:e0: 9c:f6:5c:8c:29:99:b0:02:79:8f:c0:8d:4f:dd:7e:7d:90:bd: be:26:a0:28:55:41:9d:af:ea:6b:71:5c:5a:90:8b:e2:d7:a3: 65:b2:5d:b4:ff:d3:da:11:82:db:53:9a:5a:cb:39:a9:56:06: 73:8f:89:57:d9:8f:bf:ce:e7:07:92:ff:fe:36:3e:94:43:76: dc:52:fa:15:26:2f:7d:dd:1c:3c:c7:e5:43:ec:15:68:1d:ea: e0:94:50:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjUwNDI2MjEzODQwWhcNMjUwNTAzMjEzODQwWjAYMRYwFAYD VQQDEw02ODBkNTI2MC00NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiB6YeR2GKnsu0b+8o3YAj8oJGZT6gifo9dIqwLDWhqtQ5BjP0u0ubM4e6ep jmsMMrYVH/4wghs26WVUT4CzD9m9hL3rgyzW5DRUUglXoeKpAmUTo1Qs+PbAfhVm obU6iRzA09HwDTlnyRwKzlNMZDyKT+4VYPt1m3AJJ91mGHdcAcjMVMvNN/x3DXib 1T4gpOyObvbpHoCIh1JwbIh6VpIbG9d5hgdU9Sn1v0qD7cyufqbD6ltHA1JPxUST whK8eDnDkKvurda6aiJv0ql68BBMYciyg6ZGzR/x+kOMpQLXxLZ68CTVcCJ82unE +zU767lW6LuFsO2qlmqyCwSGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEwu9Qx A3S9vvfZbmX7ywgDe+vqMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB70oArwAUSOBOEGd0pHBJlQcafm/9jc4SKjLGREdHh029WR/IUcZjV OTkknK8JktgMU8EYEMfVevaFYk+iLgP1tYfx1lBdBQFXIddeXNhc9SFxDx0DtbG8 AVnjKAo/FgQ9wuVZj2QSKYnl7lhlS3XO6Gt2YXmBcDY8pooPFkGbgVuWc5oXiYIV 2LNNymaeqIh1O5j9oc7AHnr6MDFB5gaCDuCc9lyMKZmwAnmPwI1P3X59kL2+JqAo VUGdr+prcVxakIvi16Nlsl20/9PaEYLbU5payzmpVgZzj4lX2Y+/zucHkv/+Nj6U Q3bcUvoVJi993Rw8x+VD7BVoHerglFBE -----END CERTIFICATE-----Generated at Mon Apr 28 22:10:43 2025 by rpki-client