$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: Tn7/fhF9B1hkpXkkRzY9/sGogHB4Srb0RlhUWp92q64= Subject key identifier: 3E:51:32:40:F7:75:5A:DF:70:9C:1F:FC:15:40:29:5F:CC:54:57:CB Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0119 Signing time: Fri 25 Apr 2025 03:53:53 +0000 Manifest this update: Fri 25 Apr 2025 03:53:52 +0000 Manifest next update: Fri 02 May 2025 03:53:52 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: B4kLnHRm92AR7uOWSnMm291G4pDl4st4HX6JloA5amA=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Apr 25 03:53:52 2025 GMT Not After : May 2 03:53:52 2025 GMT Subject: CN=680b0750-0657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:2d:de:40:27:1f:55:22:2f:38:ac:05:55: 17:99:61:79:9c:49:ac:ac:9f:6d:69:99:a1:ee:23: f5:6f:66:2d:44:ec:1f:e8:55:3e:38:19:2f:a4:f7: 40:74:ed:2d:d0:89:de:48:a8:83:df:5b:c3:93:bf: 6c:15:3a:ef:5c:3e:4b:10:e4:9d:b1:c5:fc:c3:ff: 10:28:85:f3:9c:2a:39:03:d4:e7:e3:98:88:bc:e3: b1:9b:73:7e:a6:5c:8d:c4:62:24:9e:92:bd:92:fd: b6:25:c3:55:0c:4c:81:ba:bb:be:6a:eb:5f:a1:6f: 55:c3:8f:9a:49:f8:0d:ac:de:d4:5c:c5:35:81:3b: 30:d4:bc:88:55:9b:26:1b:34:7b:3f:cb:5e:01:67: 8b:41:e3:63:7b:c4:78:c5:80:d8:e3:2e:fd:73:10: f1:c8:96:c0:56:6e:2b:ea:9c:6e:e1:64:4e:af:b9: 94:ba:5c:ed:5d:49:56:e8:b2:0c:5f:b4:9e:6d:17: 96:ac:87:a6:53:34:6a:1e:0a:5a:2e:6f:e1:a7:0d: 5e:71:89:1e:89:c1:7a:e5:5f:31:e9:dc:84:80:4e: 23:15:8b:b6:77:f7:35:16:cd:24:9f:0a:1b:ad:3b: f4:21:88:49:a9:0f:15:07:51:28:d1:3c:44:18:a1: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:51:32:40:F7:75:5A:DF:70:9C:1F:FC:15:40:29:5F:CC:54:57:CB X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f9:ef:59:f9:26:66:03:00:7d:9d:e4:11:87:ef:0e:2e:12: 2f:62:33:a6:93:1b:75:22:f4:a5:e4:66:34:6c:e0:8f:a5:c5: 52:df:0a:01:a3:0b:bd:cc:47:d3:47:37:bc:19:2f:62:9d:94: 37:9c:29:03:a9:1d:84:66:01:74:37:6d:c1:7a:e5:d8:16:cc: 74:c3:de:e0:50:99:19:13:8b:7f:21:1f:19:5a:0b:b9:b8:51: ac:58:47:5d:bf:61:6c:76:df:2d:32:5d:67:ac:b3:eb:49:d5: b1:ac:1b:ef:bc:f0:97:b3:94:51:65:c2:5b:2e:99:95:af:56: 95:b5:56:a6:a5:ce:fe:d7:9b:17:c8:2f:e5:66:52:ac:25:9e: 6e:8b:b3:34:7b:d6:54:e2:4b:81:6f:67:ff:bb:8b:d8:ef:12: 69:cf:99:54:dd:d4:b4:b4:ad:f1:07:85:bf:7e:96:60:21:4e: 56:b2:1c:41:b9:00:d0:b5:b2:6b:55:1a:a5:e0:15:75:2a:61: d4:93:86:21:aa:27:b0:47:1f:aa:9e:27:f5:82:b5:27:fe:b2: 96:94:77:12:2d:f9:1b:8f:0d:aa:36:b7:47:01:b0:16:da:d4: 1b:c4:c1:77:87:c1:fb:31:33:68:7a:94:bf:d4:f9:b7:69:9b: 84:9f:0e:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwNDI1MDM1MzUyWhcNMjUwNTAyMDM1MzUyWjAYMRYwFAYD VQQDEw02ODBiMDc1MC0wNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpct3kAnH1UiLzisBVUXmWF5nEmsrJ9taZmh7iP1b2YtROwf6FU+OBkvpPdA dO0t0IneSKiD31vDk79sFTrvXD5LEOSdscX8w/8QKIXznCo5A9Tn45iIvOOxm3N+ plyNxGIknpK9kv22JcNVDEyBuru+autfoW9Vw4+aSfgNrN7UXMU1gTsw1LyIVZsm GzR7P8teAWeLQeNje8R4xYDY4y79cxDxyJbAVm4r6pxu4WROr7mUulztXUlW6LIM X7SebReWrIemUzRqHgpaLm/hpw1ecYkeicF65V8x6dyEgE4jFYu2d/c1Fs0knwob rTv0IYhJqQ8VB1Eo0TxEGKEEvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5RMkD3 dVrfcJwf/BVAKV/MVFfLMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl+e9Z+SZmAwB9neQRh+8OLhIvYjOmkxt1IvSl5GY0bOCPpcVS3woB owu9zEfTRze8GS9inZQ3nCkDqR2EZgF0N23BeuXYFsx0w97gUJkZE4t/IR8ZWgu5 uFGsWEddv2Fsdt8tMl1nrLPrSdWxrBvvvPCXs5RRZcJbLpmVr1aVtVampc7+15sX yC/lZlKsJZ5ui7M0e9ZU4kuBb2f/u4vY7xJpz5lU3dS0tK3xB4W/fpZgIU5WshxB uQDQtbJrVRql4BV1KmHUk4YhqiewRx+qnif1grUn/rKWlHcSLfkbjw2qNrdHAbAW 2tQbxMF3h8H7MTNoepS/1Pm3aZuEnw5f -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:34 2025 by rpki-client