$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft File: yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json) Hash identifier: puRg6jFYisVj3VFS6g1ypRVsUqiVcprcepUEuTAnOlk= Subject key identifier: 4D:88:75:50:55:3A:0B:5F:82:01:9E:74:34:92:6A:35:F7:C6:BD:18 Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Certificate serial: 1080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft Manifest number: 1055 Signing time: Thu 24 Apr 2025 17:25:18 +0000 Manifest this update: Thu 24 Apr 2025 17:25:17 +0000 Manifest next update: Thu 01 May 2025 17:25:17 +0000 Files and hashes: 1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: j2v6D8yCXp8BKlPBVI/rDh38ovatesmLoVrPqxGR0Y8=) 2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=) 3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4224 (0x1080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Validity Not Before: Apr 24 17:25:17 2025 GMT Not After : May 1 17:25:17 2025 GMT Subject: CN=680a73fe-8da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:b4:7b:99:31:77:cd:56:8f:1f:e2:35:c2: a5:9d:66:93:dd:33:32:a7:17:ae:a0:20:c9:88:e4: 01:21:2a:5d:97:b4:f0:e7:6d:bd:95:37:dc:3a:8e: a6:9f:22:54:88:8e:8d:39:de:69:06:44:1f:e5:1a: f8:b4:10:89:2d:8c:17:66:f5:22:46:1e:89:66:7d: d7:01:e2:e8:e8:b0:83:8a:56:fd:65:76:50:aa:8b: 49:93:ab:75:f7:1d:2f:b9:10:66:d1:94:74:47:bb: f1:36:2a:a4:d5:00:03:af:f4:c2:ca:93:f2:ea:e7: 70:d0:a4:92:62:4d:bd:f2:c4:c7:3a:47:e3:28:90: 39:5a:3b:f8:2b:a2:11:53:46:f0:2d:14:f6:83:d5: 3b:c1:d3:0b:d5:a2:0a:00:b6:46:cf:79:d7:e3:55: db:40:5e:c9:3c:b6:a0:78:e2:0b:a5:be:e2:e4:69: fd:0a:bc:9c:d0:0d:a2:a8:3a:a1:8a:df:3e:00:dd: 29:62:ba:93:e7:6a:c0:2e:34:81:38:3d:8e:d8:52: 8a:34:03:53:ad:de:5f:76:9f:fb:21:e8:ec:3e:32: 97:27:1d:10:39:9f:40:7b:e6:f6:66:ac:fa:81:ef: 5d:8f:98:16:75:e3:de:a3:81:32:50:56:c7:d5:39: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:75:50:55:3A:0B:5F:82:01:9E:74:34:92:6A:35:F7:C6:BD:18 X509v3 Authority Key Identifier: keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:2b:a5:d5:a4:0e:79:15:b3:ea:59:dd:49:83:62:36:45:72: b9:52:cb:48:ab:f6:3d:be:fb:50:77:0b:4f:99:e5:91:e1:35: 0f:90:60:7c:a9:a1:5f:41:f6:8b:19:33:56:a0:79:f4:8a:99: 9e:4f:df:51:68:e8:33:14:53:e5:6d:1b:1a:1d:0f:e4:70:c4: 97:2c:0b:37:e9:bd:8f:90:3c:a0:d7:24:55:73:fe:5d:b5:c5: b9:a9:ed:37:5a:37:47:73:81:00:d0:95:28:6a:a4:c7:d3:56: 25:9e:a3:42:a6:cb:f6:f1:a2:5b:8e:59:cc:4d:ce:a9:00:a5: d0:19:b7:2d:34:a8:3b:51:2e:fa:82:10:de:20:3f:37:9b:9c: 1b:4a:e8:d7:cb:60:83:1f:05:25:47:1a:7e:60:69:12:26:86: a3:43:19:85:a7:8e:27:e8:92:7a:07:f4:c4:57:5f:01:89:dd: 45:55:77:9c:63:e5:3a:68:55:c3:4d:da:66:87:0c:22:20:98: 66:60:6e:dc:32:93:5a:fd:9d:ad:5f:7b:c5:1d:22:12:0d:30: e1:9c:a3:93:5b:53:7c:26:d1:b9:ce:f1:0d:d1:ec:6d:59:de: de:97:05:1a:0d:14:e1:33:ad:8c:3d:a9:0e:e5:48:34:11:a3: 56:be:be:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5 NDdERkQzQkMwHhcNMjUwNDI0MTcyNTE3WhcNMjUwNTAxMTcyNTE3WjAYMRYwFAYD VQQDEw02ODBhNzNmZS04ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5y0e5kxd81Wjx/iNcKlnWaT3TMypxeuoCDJiOQBISpdl7Tw5229lTfcOo6m nyJUiI6NOd5pBkQf5Rr4tBCJLYwXZvUiRh6JZn3XAeLo6LCDilb9ZXZQqotJk6t1 9x0vuRBm0ZR0R7vxNiqk1QADr/TCypPy6udw0KSSYk298sTHOkfjKJA5Wjv4K6IR U0bwLRT2g9U7wdML1aIKALZGz3nX41XbQF7JPLageOILpb7i5Gn9Cryc0A2iqDqh it8+AN0pYrqT52rALjSBOD2O2FKKNANTrd5fdp/7IejsPjKXJx0QOZ9Ae+b2Zqz6 ge9dj5gWdePeo4EyUFbH1TnwuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2IdVBV OgtfggGedDSSajX3xr0YMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJK6XVpA55FbPqWd1Jg2I2RXK5UstIq/Y9vvtQdwtPmeWR4TUPkGB8 qaFfQfaLGTNWoHn0ipmeT99RaOgzFFPlbRsaHQ/kcMSXLAs36b2PkDyg1yRVc/5d tcW5qe03WjdHc4EA0JUoaqTH01YlnqNCpsv28aJbjlnMTc6pAKXQGbctNKg7US76 ghDeID83m5wbSujXy2CDHwUlRxp+YGkSJoajQxmFp44n6JJ6B/TEV18Bid1FVXec Y+U6aFXDTdpmhwwiIJhmYG7cMpNa/Z2tX3vFHSISDTDhnKOTW1N8JtG5zvEN0ext Wd7elwUaDRThM62MPakO5Ug0EaNWvr7P -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:54 2025 by rpki-client