$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: wpBGg/0HpjyuM3qLINwbOwuQjneHn6yWM14lrUaOq5Q= Subject key identifier: 83:DF:6D:FE:EA:EB:6F:E4:15:A0:76:96:F3:10:89:46:20:A0:C2:41 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0152 Signing time: Fri 25 Apr 2025 03:19:42 +0000 Manifest this update: Fri 25 Apr 2025 03:19:42 +0000 Manifest next update: Fri 02 May 2025 03:19:42 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: 61U3p3FDMgWZeacjtn8xxodk6GY1WFaSvPRbpIMivFs=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: F0IorjVoRNdR/rnfERSJA3kDGcWRN5xMt/uZPHyNwMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Apr 25 03:19:42 2025 GMT Not After : May 2 03:19:42 2025 GMT Subject: CN=680aff4e-7230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:26:4e:82:16:1f:26:8f:15:bf:c6:6a:f3: 84:1a:f7:03:74:7a:21:2d:cf:0a:8e:3b:cb:aa:c6: fd:9b:80:79:ca:3f:a6:f0:87:1e:39:6c:c9:bd:b4: aa:2f:37:65:cd:fa:78:0e:62:81:4f:0f:0f:be:88: e8:68:e1:d1:5c:99:9e:df:16:47:9a:b6:4e:e2:56: 7b:32:6b:ff:fb:e5:2d:a8:bb:60:bd:66:35:bd:5f: 23:38:28:59:19:36:53:dd:03:3a:95:f0:06:6a:6e: 2f:17:14:bb:9c:e5:32:11:61:72:e7:23:c0:44:98: 4e:5b:22:10:b7:1a:76:07:0a:f7:89:3f:8c:5b:dc: 65:77:1e:a1:19:99:7c:83:88:9b:27:16:aa:31:cf: c2:06:e4:23:74:38:49:62:c5:d7:7b:af:c2:c6:f2: d5:70:da:1d:c8:67:7b:38:ea:18:b0:f8:5f:ad:09: 57:5f:e2:3b:8c:7e:d1:ef:90:41:34:b4:6e:66:5e: f0:86:42:c6:9f:dc:09:75:e1:5e:58:41:e0:02:d9: b7:a6:bf:93:59:36:c6:65:a1:c9:95:47:4b:09:d2: 40:52:3a:ff:79:d0:99:4b:93:8a:3a:81:7e:ac:74: 89:34:ab:18:35:6a:de:09:98:a7:89:3a:73:68:3f: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DF:6D:FE:EA:EB:6F:E4:15:A0:76:96:F3:10:89:46:20:A0:C2:41 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:57:a0:40:00:40:b0:bb:bd:65:c5:f4:5b:84:37:4a:84: 5e:49:74:f9:0c:40:c7:f5:21:17:a1:f0:0e:df:78:76:9a:87: 5f:b4:a4:c9:77:a5:5f:80:83:44:2f:40:f5:2f:7b:e7:52:e4: c2:6e:3b:23:52:b5:14:ad:5b:fe:79:b3:59:41:93:25:d0:58: c5:20:4b:90:97:41:bb:bb:9a:b7:20:72:fb:9c:b7:c9:97:ad: 48:e5:68:22:5c:9b:9d:52:9a:5d:b9:fd:d1:b1:47:12:cc:95: b2:b1:49:41:af:79:cd:6d:73:f0:f0:08:0b:ed:e4:03:6b:77: 85:f1:68:5b:7f:a0:92:7c:7c:9f:1b:70:f3:03:f8:fc:5c:dc: e5:e3:00:e9:43:8d:ef:4e:34:8e:25:81:bb:f7:92:fa:92:e7: 71:e7:07:ff:48:f2:66:1f:96:8c:64:92:c9:2b:15:36:36:e1: d4:18:f7:20:79:a3:be:4c:39:1b:4b:35:29:e1:c1:a9:f8:ac: 8f:65:81:f6:77:0e:f6:6b:be:61:d0:eb:a8:70:95:d3:a5:e6: 29:94:c9:ef:1c:f8:6f:b8:4e:56:75:70:ce:de:84:56:59:0f: 6a:49:69:06:8a:44:1a:c4:ca:18:9d:8f:b0:cd:d5:cb:1a:82: 16:35:84:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNDI1MDMxOTQyWhcNMjUwNTAyMDMxOTQyWjAYMRYwFAYD VQQDEw02ODBhZmY0ZS03MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7AmToIWHyaPFb/GavOEGvcDdHohLc8KjjvLqsb9m4B5yj+m8IceOWzJvbSq Lzdlzfp4DmKBTw8PvojoaOHRXJme3xZHmrZO4lZ7Mmv/++UtqLtgvWY1vV8jOChZ GTZT3QM6lfAGam4vFxS7nOUyEWFy5yPARJhOWyIQtxp2Bwr3iT+MW9xldx6hGZl8 g4ibJxaqMc/CBuQjdDhJYsXXe6/CxvLVcNodyGd7OOoYsPhfrQlXX+I7jH7R75BB NLRuZl7whkLGn9wJdeFeWEHgAtm3pr+TWTbGZaHJlUdLCdJAUjr/edCZS5OKOoF+ rHSJNKsYNWreCZiniTpzaD+pBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPfbf7q 62/kFaB2lvMQiUYgoMJBMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYulegQABAsLu9ZcX0W4Q3SoReSXT5DEDH9SEXofAO33h2modftKTJ d6VfgINEL0D1L3vnUuTCbjsjUrUUrVv+ebNZQZMl0FjFIEuQl0G7u5q3IHL7nLfJ l61I5WgiXJudUppduf3RsUcSzJWysUlBr3nNbXPw8AgL7eQDa3eF8Whbf6CSfHyf G3DzA/j8XNzl4wDpQ43vTjSOJYG795L6kudx5wf/SPJmH5aMZJLJKxU2NuHUGPcg eaO+TDkbSzUp4cGp+KyPZYH2dw72a75h0OuocJXTpeYplMnvHPhvuE5WdXDO3oRW WQ9qSWkGikQaxMoYnY+wzdXLGoIWNYR/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:08:00 2025 by rpki-client