$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json) Hash identifier: tYeFnNzxVfoh+P5OYA+VKd1X5wPHTSjLSxa3c1pQczA= Subject key identifier: 04:4B:DB:03:EB:39:4C:02:F9:31:8A:72:04:42:FA:2A:9B:1B:BD:68 Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft Manifest number: 01CC Signing time: Fri 25 Apr 2025 02:02:06 +0000 Manifest this update: Fri 25 Apr 2025 02:02:06 +0000 Manifest next update: Fri 02 May 2025 02:02:06 +0000 Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: pR/X391c2p/VFsqgZyfwqqu/SPMDh7HFPixeoA6GqJY=) 2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0vJe1gSTz/9AM6rZDUcFgOuxx2MDx3AZXLchT0AzEH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Validity Not Before: Apr 25 02:02:06 2025 GMT Not After : May 2 02:02:06 2025 GMT Subject: CN=680aed1e-d4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:1f:a5:39:b3:b8:9d:b7:f8:ea:3e:48:9b: e8:e5:88:45:3b:ef:ce:e2:54:f7:0e:1e:c7:16:d8: e5:fb:78:1e:97:12:27:2c:a9:ac:51:e8:18:6f:84: b3:5c:3d:e7:2d:f6:cd:3f:7b:df:a7:19:02:d9:d6: 41:c3:1c:01:70:db:dd:21:0f:7d:d7:e6:b4:2d:88: 2e:7c:d2:f1:c6:ba:ea:4b:ac:a3:22:4d:a9:1c:5f: 23:2d:3c:9b:f9:bd:24:75:3c:23:f2:ef:4b:4f:d7: 7c:cd:a2:01:c5:ce:80:3e:04:a9:e0:ab:90:76:71: 36:c8:90:29:8e:29:f9:e9:b5:4b:42:ce:84:2e:d4: 3b:5f:24:f6:4e:21:e7:84:8c:0c:e6:1a:5c:8f:9d: 6e:eb:6e:29:12:c6:92:6e:5f:38:2f:29:d4:fa:3e: 63:25:6d:f9:28:10:0c:fa:6b:83:76:42:14:92:67: 84:23:3f:5d:ce:36:99:25:2c:08:bd:30:ea:c6:5a: 49:7d:41:b5:15:7f:6c:0f:a9:4c:ad:ef:47:0f:93: fc:47:f6:ef:28:d4:fe:f1:58:de:28:43:08:89:49: a7:f5:e3:16:24:cf:76:c4:1e:18:e2:4c:f8:a0:4c: 15:19:8b:13:95:e1:01:c6:2d:8d:ea:36:b6:0d:cc: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4B:DB:03:EB:39:4C:02:F9:31:8A:72:04:42:FA:2A:9B:1B:BD:68 X509v3 Authority Key Identifier: keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:60:9c:75:38:4e:25:a1:47:a5:f5:e4:b8:3f:36:24:01:4c: e0:3d:4f:64:ae:f1:d1:85:35:13:7e:89:69:ef:03:c2:61:0c: e8:f3:50:83:75:fd:00:f2:5d:8e:9a:25:f7:77:7d:07:d3:8f: cf:92:b1:f1:12:bd:84:a6:4a:20:ff:21:5a:cc:a0:b7:4b:26: 89:76:38:1a:c2:cc:45:39:7c:29:f0:d8:94:95:36:86:91:2d: 7c:95:4c:f4:7b:32:34:39:74:2c:81:b5:48:bd:50:1c:cf:69: 8a:8e:10:a2:a2:a8:c9:a3:98:e2:ba:92:0e:c5:db:ff:8e:be: 25:a2:50:8f:32:7a:b8:db:6d:ac:6d:4f:fa:ac:81:2e:49:64: 31:d7:ae:f9:21:c6:07:95:ea:21:af:cd:2d:98:30:10:0b:a6: 03:0b:7f:3f:d9:b1:03:76:47:16:e0:08:d6:30:3e:29:ee:68: e0:97:c3:27:e0:10:02:6a:ff:9a:a2:bb:cb:fc:cf:92:67:a2: 7c:5a:49:3e:eb:c0:c3:e1:e4:d5:5d:0f:7a:79:c7:87:90:66: 07:fa:89:b0:63:37:5b:0f:4b:a1:87:fb:8f:df:d9:5a:7f:87: 3c:6b:a0:29:5c:e0:c0:8d:1a:55:74:3b:e2:3e:f3:77:b3:c2: 94:f2:a2:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5 NUI2NTkxQjEwHhcNMjUwNDI1MDIwMjA2WhcNMjUwNTAyMDIwMjA2WjAYMRYwFAYD VQQDEw02ODBhZWQxZS1kNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNkfpTmzuJ23+Oo+SJvo5YhFO+/O4lT3Dh7HFtjl+3gelxInLKmsUegYb4Sz XD3nLfbNP3vfpxkC2dZBwxwBcNvdIQ991+a0LYgufNLxxrrqS6yjIk2pHF8jLTyb +b0kdTwj8u9LT9d8zaIBxc6APgSp4KuQdnE2yJApjin56bVLQs6ELtQ7XyT2TiHn hIwM5hpcj51u624pEsaSbl84LynU+j5jJW35KBAM+muDdkIUkmeEIz9dzjaZJSwI vTDqxlpJfUG1FX9sD6lMre9HD5P8R/bvKNT+8VjeKEMIiUmn9eMWJM92xB4Y4kz4 oEwVGYsTleEBxi2N6ja2Dcw7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARL2wPr OUwC+TGKcgRC+iqbG71oMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK QnNBSGw2T2g2YzJWdGxrYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMYJx1OE4loUel9eS4PzYkAUzgPU9krvHRhTUTfolp7wPCYQzo81CD df0A8l2OmiX3d30H04/PkrHxEr2Epkog/yFazKC3SyaJdjgawsxFOXwp8NiUlTaG kS18lUz0ezI0OXQsgbVIvVAcz2mKjhCioqjJo5jiupIOxdv/jr4lolCPMnq4222s bU/6rIEuSWQx1675IcYHleohr80tmDAQC6YDC38/2bEDdkcW4AjWMD4p7mjgl8Mn 4BACav+aorvL/M+SZ6J8Wkk+68DD4eTVXQ96eceHkGYH+omwYzdbD0uhh/uP39la f4c8a6ApXODAjRpVdDviPvN3s8KU8qIQ -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:18 2025 by rpki-client