$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: h3k5PfOayEya85CW0FT4mJfKZoIHH6W9hyKdVZkp6Rw= Subject key identifier: 9F:4B:90:0F:99:FE:D8:27:F9:31:BE:76:17:2C:C1:33:B4:87:BE:CC Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 078A Signing time: Sun 04 May 2025 21:04:37 +0000 Manifest this update: Sun 04 May 2025 21:04:37 +0000 Manifest next update: Sun 11 May 2025 21:04:37 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: uwQrlmKM8+7YA6p8s/1Q+Zf69ojFA6V8J7ltU/qF0M4=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: May 4 21:04:37 2025 GMT Not After : May 11 21:04:37 2025 GMT Subject: CN=6817d665-1e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:11:94:c4:da:eb:1a:57:c3:cc:f6:1c:23: aa:1a:c7:ea:94:4d:f4:00:db:60:77:61:66:55:1a: 7f:a4:aa:02:ed:80:67:75:df:19:55:57:f7:26:36: 36:f1:5e:4c:75:20:11:ab:5b:73:4b:61:2a:bc:84: d8:b9:cc:b5:31:4a:52:2b:95:6c:45:1e:04:33:6a: 9c:c6:18:02:99:2c:75:0d:8f:d0:78:fa:56:2a:87: c4:a5:ed:fe:11:d1:b1:bc:c2:cd:f6:e0:32:36:32: e4:c4:da:26:cb:b2:15:07:48:36:ad:8f:49:80:f7: 56:ac:96:15:5b:70:c5:32:4c:f0:3f:b5:ee:57:25: 26:19:6f:0f:e0:7a:1b:81:4a:54:da:e2:b8:d4:3f: 9e:88:1a:97:e1:00:2c:43:58:c7:ed:bd:02:0a:fd: c4:19:84:55:01:77:9d:b8:60:1d:5b:c9:f2:b0:fd: 94:fb:58:b7:dc:10:2d:99:bb:26:fd:95:40:a5:b7: a3:ae:9e:2d:a4:84:fe:4d:37:5c:48:d4:8f:d5:78: 60:fd:5a:e7:83:e5:8c:e6:83:c9:12:26:98:00:19: d0:ba:9d:3d:c3:ff:6b:fb:70:ba:b5:da:d8:64:d1: 1c:a0:07:2e:f7:ba:e3:4d:3a:f0:fe:11:65:6b:ac: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:90:0F:99:FE:D8:27:F9:31:BE:76:17:2C:C1:33:B4:87:BE:CC X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3e:3c:a5:01:d1:e0:95:70:68:96:eb:43:2d:5a:be:ea:e5: 5a:aa:c5:af:bd:c4:75:af:c5:c3:88:87:1e:6d:9f:00:0d:37: 85:64:24:fb:14:8a:99:e2:06:02:72:6e:04:22:06:e2:e1:25: 2f:fe:63:0d:52:fd:d9:a6:6e:1c:b5:0e:04:b9:99:72:d0:74: 3d:9a:8e:73:85:71:24:3b:10:c6:62:66:e7:9f:d5:39:65:79: 6b:df:24:2d:e3:94:30:b9:14:46:a5:e3:c5:30:1f:96:c7:ba: 80:40:ad:8f:04:93:e6:1a:a6:7e:1e:27:a5:b9:3b:68:6a:42: be:44:4c:8d:eb:32:f2:54:83:64:f5:a2:40:ea:73:90:4c:19: 2a:ea:8f:1c:13:d2:7c:81:d8:ca:c3:b5:10:a6:63:0c:3e:2b: 3c:0d:b3:a7:6b:c0:d3:85:4c:8d:79:02:f7:a9:b7:67:97:f1: 58:55:4a:b3:0c:5a:d9:94:63:d9:93:0a:37:b1:fc:75:dc:6e: eb:69:e0:38:89:4b:51:bb:7f:c6:90:dd:3a:70:a8:77:77:93: b8:44:1b:4d:f4:6f:01:ef:98:aa:77:8d:e5:25:cb:d7:3b:a4: 1f:fc:d3:4b:fc:c1:26:98:80:f2:c9:6d:dc:f6:d2:6e:24:02: 42:62:b2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjUwNTA0MjEwNDM3WhcNMjUwNTExMjEwNDM3WjAYMRYwFAYD VQQDEw02ODE3ZDY2NS0xZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AsRlMTa6xpXw8z2HCOqGsfqlE30ANtgd2FmVRp/pKoC7YBndd8ZVVf3JjY2 8V5MdSARq1tzS2EqvITYucy1MUpSK5VsRR4EM2qcxhgCmSx1DY/QePpWKofEpe3+ EdGxvMLN9uAyNjLkxNomy7IVB0g2rY9JgPdWrJYVW3DFMkzwP7XuVyUmGW8P4Hob gUpU2uK41D+eiBqX4QAsQ1jH7b0CCv3EGYRVAXeduGAdW8nysP2U+1i33BAtmbsm /ZVApbejrp4tpIT+TTdcSNSP1Xhg/Vrng+WM5oPJEiaYABnQup09w/9r+3C6tdrY ZNEcoAcu97rjTTrw/hFla6zlYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9LkA+Z /tgn+TG+dhcswTO0h77MMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+PjylAdHglXBolutDLVq+6uVaqsWvvcR1r8XDiIcebZ8ADTeFZCT7 FIqZ4gYCcm4EIgbi4SUv/mMNUv3Zpm4ctQ4EuZly0HQ9mo5zhXEkOxDGYmbnn9U5 ZXlr3yQt45QwuRRGpePFMB+Wx7qAQK2PBJPmGqZ+HieluTtoakK+REyN6zLyVINk 9aJA6nOQTBkq6o8cE9J8gdjKw7UQpmMMPis8DbOna8DThUyNeQL3qbdnl/FYVUqz DFrZlGPZkwo3sfx13G7raeA4iUtRu3/GkN06cKh3d5O4RBtN9G8B75iqd43lJcvX O6Qf/NNL/MEmmIDyyW3c9tJuJAJCYrLJ -----END CERTIFICATE-----Generated at Mon May 5 11:24:22 2025 by rpki-client