$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft File: YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json) Hash identifier: gobjQ5zxTtc1qpYH+Pf3VU3x6jpEyC28inwzk1VFIkE= Subject key identifier: 42:75:33:40:8E:76:53:7B:3F:5F:C8:FD:DE:DB:A9:4C:E5:7B:4D:83 Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F Certificate issuer: /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F Certificate serial: 0E9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft Manifest number: 0E7F Signing time: Sat 26 Apr 2025 17:36:36 +0000 Manifest this update: Sat 26 Apr 2025 17:36:36 +0000 Manifest next update: Sat 03 May 2025 17:36:36 +0000 Files and hashes: 1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: t4QgLXsVF/irtny9Wq+8dvMzp537tF9Hq03Ucf/Imh0=) 2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=) 3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=) 4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=) 5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3738 (0xe9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F Validity Not Before: Apr 26 17:36:36 2025 GMT Not After : May 3 17:36:36 2025 GMT Subject: CN=680d19a4-cb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:5a:b5:bc:14:6e:79:64:e5:5a:2e:9d:30: 48:9c:c4:56:ff:19:e2:1c:ce:c7:9d:0e:4c:50:2b: 99:ef:f3:f7:e4:19:ec:84:d2:8a:54:f1:c9:9b:07: 62:66:95:2e:6f:c8:41:58:d8:ae:44:78:c2:3d:d1: e6:0f:e6:1b:97:3b:b5:12:44:95:3a:f6:39:bb:54: 2b:b1:15:02:05:f7:cb:aa:b1:fd:7c:0b:38:3e:db: 38:9a:69:6f:fc:31:09:36:17:99:28:72:43:8a:8d: a7:c7:61:77:ee:1c:e5:7f:bb:5d:0a:14:c6:e7:fd: e2:61:dc:98:c2:e2:dc:69:db:61:21:b6:23:09:bf: 4e:2c:3a:57:d0:fa:51:ba:d7:59:8f:6e:80:eb:8f: 4a:9a:5f:1b:08:3c:9e:dc:ec:07:ca:74:67:5a:bb: 84:d3:02:68:3c:ea:25:a0:36:74:e2:1d:de:88:ac: a3:59:ce:a4:09:aa:ac:95:3a:a1:ad:a8:7c:a1:3a: 43:8e:df:14:ad:b3:8e:62:10:03:fd:8e:fe:bc:42: 40:8f:62:39:42:03:13:45:cd:23:bc:4b:6b:90:db: c1:25:23:42:1d:14:05:51:0e:23:1e:65:64:4f:a2: 85:4c:ec:5c:a0:1c:65:6e:02:67:a3:a2:0f:5c:aa: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:33:40:8E:76:53:7B:3F:5F:C8:FD:DE:DB:A9:4C:E5:7B:4D:83 X509v3 Authority Key Identifier: keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:fd:40:90:4a:d4:42:0c:fb:ee:f9:2e:04:8a:01:ca:0c: 68:40:d0:19:a0:22:49:10:0d:f2:c2:90:7c:b4:a6:a6:46:96: 4f:8e:7b:80:a0:fd:07:32:1e:46:25:cd:db:75:9b:50:c8:89: 36:46:fb:b8:6b:7d:c6:3e:0d:3c:34:c6:4c:38:4c:c1:29:e1: 90:8b:9d:d4:5f:21:7b:0f:03:64:e6:99:cd:4e:a3:70:34:36: 07:6e:15:98:8c:9e:07:77:7c:2c:23:08:03:0b:a0:f0:7c:1b: 2d:35:19:85:b1:f6:1b:f3:37:fc:31:aa:52:f0:f1:ea:fc:38: c0:b2:c4:dc:62:b7:4c:99:0d:75:1e:9d:df:3e:1b:8a:fc:ec: db:20:f4:df:5c:21:26:0f:cc:85:53:45:3c:71:6c:ed:95:77: 7a:8a:c6:c8:21:95:b3:50:d8:42:f6:b6:da:92:b2:6e:40:2b: 7e:f1:40:76:68:d7:07:19:20:e2:fa:9d:e2:05:a9:0e:de:e9: ce:30:69:9a:e7:75:13:3a:c7:d7:0f:54:f8:7b:48:54:3c:2a: 18:10:70:3d:7e:bc:d8:2a:17:b4:4d:b8:46:6f:0d:de:0c:9a: 0e:16:56:99:2d:cc:56:d9:49:7f:61:30:cb:70:c6:6a:48:62: eb:af:a4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB RDRGNkNDM0YwHhcNMjUwNDI2MTczNjM2WhcNMjUwNTAzMTczNjM2WjAYMRYwFAYD VQQDEw02ODBkMTlhNC1jYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTBatbwUbnlk5VounTBInMRW/xniHM7HnQ5MUCuZ7/P35BnshNKKVPHJmwdi ZpUub8hBWNiuRHjCPdHmD+Yblzu1EkSVOvY5u1QrsRUCBffLqrH9fAs4Pts4mmlv /DEJNheZKHJDio2nx2F37hzlf7tdChTG5/3iYdyYwuLcadthIbYjCb9OLDpX0PpR utdZj26A649Kml8bCDye3OwHynRnWruE0wJoPOoloDZ04h3eiKyjWc6kCaqslTqh rah8oTpDjt8UrbOOYhAD/Y7+vEJAj2I5QgMTRc0jvEtrkNvBJSNCHRQFUQ4jHmVk T6KFTOxcoBxlbgJno6IPXKo4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ1M0CO dlN7P1/I/d7bqUzle02DMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc1RS80REY3REIwNDkxMTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91 aV9UUzZ4VDdFcHl0VDJ6RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKaf1AkErUQgz77vkuBIoBygxoQNAZoCJJEA3ywpB8tKamRpZPjnuA oP0HMh5GJc3bdZtQyIk2Rvu4a33GPg08NMZMOEzBKeGQi53UXyF7DwNk5pnNTqNw NDYHbhWYjJ4Hd3wsIwgDC6DwfBstNRmFsfYb8zf8MapS8PHq/DjAssTcYrdMmQ11 Hp3fPhuK/OzbIPTfXCEmD8yFU0U8cWztlXd6isbIIZWzUNhC9rbakrJuQCt+8UB2 aNcHGSDi+p3iBakO3unOMGma53UTOsfXD1T4e0hUPCoYEHA9frzYKhe0TbhGbw3e DJoOFlaZLcxW2Ul/YTDLcMZqSGLrr6SO -----END CERTIFICATE-----Generated at Sun Apr 27 05:10:49 2025 by rpki-client