$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: DfSQfDu6sNErdlO1Pe/c2dVzxKg83YI/Eqrb15D5/YY= Subject key identifier: BB:79:08:16:CE:76:9F:0F:8E:8B:07:8A:41:6B:CE:32:5B:ED:E9:2B Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0B52 Signing time: Thu 24 Apr 2025 19:03:06 +0000 Manifest this update: Thu 24 Apr 2025 19:03:05 +0000 Manifest next update: Thu 01 May 2025 19:03:05 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: Do5+LH1hwnbfwVTmmKaysLUV41Y0skhhuGBc6vheNrs=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Apr 24 19:03:05 2025 GMT Not After : May 1 19:03:05 2025 GMT Subject: CN=680a8ae9-892b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:ae:d6:d7:86:7f:0a:82:af:76:1d:99:6e: 0e:92:0e:7e:47:7d:3c:03:ce:56:34:6e:1e:a9:45: 0e:ed:c5:da:fa:48:61:89:4e:26:7b:7c:d4:fd:d4: 8d:52:58:76:b5:cc:19:b1:f7:02:97:b0:3e:b5:cd: 2a:ab:cd:6f:13:61:ee:1d:54:11:24:77:1e:92:58: 8d:bb:64:ae:f1:26:28:0b:61:da:e3:38:0a:3e:04: 38:e1:b6:54:f3:18:03:e4:84:62:a0:a8:40:4f:f6: d2:70:f1:00:28:a8:53:dc:52:af:0a:15:1a:95:76: 57:45:ed:07:10:15:8b:f5:c8:fd:5a:f1:fe:bd:13: 45:c3:26:41:23:77:f0:a2:97:05:28:4f:ee:63:54: 79:93:32:6c:0c:88:b6:e7:36:45:4a:bd:df:7b:a5: a2:73:d5:2c:28:d7:b0:5e:e4:cf:59:4b:a1:b5:6e: 14:68:03:25:f7:57:7a:ec:a0:55:45:6b:21:93:a2: 45:49:81:dd:a1:6a:e0:88:b1:16:09:ee:08:2a:ea: 87:6c:02:cd:cb:f3:da:c8:f0:65:75:a6:11:4c:2b: 61:1e:57:4e:ff:35:f9:83:b1:85:80:de:42:17:90: 87:37:da:cc:48:8a:9e:46:9d:1d:d9:c6:05:30:63: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:08:16:CE:76:9F:0F:8E:8B:07:8A:41:6B:CE:32:5B:ED:E9:2B X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a9:99:6c:c1:29:d1:38:c6:2e:16:83:cc:c2:30:7f:24:d6: 13:eb:7a:12:9d:b5:60:4b:e2:d1:7e:ca:f8:de:0e:e5:86:e3: 0e:58:54:ca:a2:32:e2:ae:21:a1:80:54:e1:7e:48:cf:63:3a: ea:dd:ad:18:1c:8e:69:14:a1:78:ba:96:2e:b6:e1:a4:1e:cd: 0e:a5:cc:b3:3c:47:fa:62:2b:f3:fe:bb:1f:f1:2e:d4:b7:cd: 08:7e:e6:e9:71:92:33:e6:15:12:b8:d7:cb:33:57:cf:44:ad: 01:12:1c:f6:b0:3e:f4:f2:86:b5:d9:cb:5e:b7:dc:fe:dc:49: 95:d6:53:a3:86:41:8f:9a:d8:69:56:da:09:c1:a0:cb:ae:78: ef:07:aa:d3:c0:d0:1a:3b:17:b1:d4:30:27:9f:5e:96:4a:d4: f2:d9:ac:38:cd:43:1a:16:4b:5c:fa:40:77:80:89:e3:7c:64: 7f:4d:70:c8:78:5f:be:ac:cb:73:8f:07:3e:a6:03:3a:bd:1d: cd:6f:24:ad:46:8e:48:31:e7:e5:20:4a:de:af:92:12:1b:73: 0c:5f:4a:29:e9:5b:79:22:6c:fc:4b:41:e3:05:60:95:8b:2d: d8:ab:5f:1c:21:56:7e:89:4d:de:54:2a:9d:52:5b:47:04:eb: 57:07:86:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUwNDI0MTkwMzA1WhcNMjUwNTAxMTkwMzA1WjAYMRYwFAYD VQQDEw02ODBhOGFlOS04OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzmu1teGfwqCr3YdmW4Okg5+R308A85WNG4eqUUO7cXa+khhiU4me3zU/dSN Ulh2tcwZsfcCl7A+tc0qq81vE2HuHVQRJHcekliNu2Su8SYoC2Ha4zgKPgQ44bZU 8xgD5IRioKhAT/bScPEAKKhT3FKvChUalXZXRe0HEBWL9cj9WvH+vRNFwyZBI3fw opcFKE/uY1R5kzJsDIi25zZFSr3fe6Wic9UsKNewXuTPWUuhtW4UaAMl91d67KBV RWshk6JFSYHdoWrgiLEWCe4IKuqHbALNy/PayPBldaYRTCthHldO/zX5g7GFgN5C F5CHN9rMSIqeRp0d2cYFMGMBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt5CBbO dp8PjosHikFrzjJb7ekrMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARqZlswSnROMYuFoPMwjB/JNYT63oSnbVgS+LRfsr43g7lhuMOWFTK ojLiriGhgFThfkjPYzrq3a0YHI5pFKF4upYutuGkHs0OpcyzPEf6Yivz/rsf8S7U t80IfubpcZIz5hUSuNfLM1fPRK0BEhz2sD708oa12ctet9z+3EmV1lOjhkGPmthp VtoJwaDLrnjvB6rTwNAaOxex1DAnn16WStTy2aw4zUMaFktc+kB3gInjfGR/TXDI eF++rMtzjwc+pgM6vR3NbyStRo5IMeflIErer5ISG3MMX0op6Vt5Imz8S0HjBWCV iy3Yq18cIVZ+iU3eVCqdUltHBOtXB4Zu -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:59 2025 by rpki-client