$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: tuVjfx4F6nkcalyWZ0PHvmCbrdCem61b/Ev5A2oBAUA= Subject key identifier: B9:E9:BF:35:AC:96:A6:A4:6C:72:1E:D7:22:57:85:2B:1A:9B:B6:D4 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 24E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 24C7 Signing time: Thu 24 Apr 2025 15:47:29 +0000 Manifest this update: Thu 24 Apr 2025 15:47:29 +0000 Manifest next update: Thu 01 May 2025 15:47:29 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: rYLYJbnxJ49o1ok+GhukNVzqoqN/a/pLiU7yavvtp3g=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9442 (0x24e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Apr 24 15:47:29 2025 GMT Not After : May 1 15:47:29 2025 GMT Subject: CN=680a5d11-9925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:40:01:66:41:1d:e6:89:c8:c4:56:2b:52: 73:f8:1b:b1:d3:b4:12:21:70:d7:92:be:5b:fc:0b: 8c:4f:9e:4b:27:e3:2e:b6:82:45:7c:d5:8b:09:97: 3c:0b:f3:e8:ff:2d:64:b9:f0:6c:80:50:e7:ef:b4: 65:50:53:06:5a:25:e7:be:9d:d5:60:e5:ef:f7:b1: 4b:51:26:46:f4:8d:37:9f:5a:6e:ef:eb:f5:5d:ca: 4b:b4:59:bf:37:be:7b:42:21:51:7b:e0:47:a4:6d: f5:c2:bb:c8:1c:66:e0:03:77:d5:8f:6b:dd:fe:7a: 2a:85:cf:ad:89:5f:8f:37:5a:23:1b:88:31:c0:82: 04:35:cc:de:4d:87:6f:2f:d5:ca:ba:5e:d9:c7:24: 06:9a:4c:1e:68:43:bb:95:a7:41:8c:4b:b0:da:61: 97:5d:9e:4f:72:f8:f7:95:81:64:ca:53:49:94:ae: 3d:17:c7:68:86:5f:2b:28:5a:d8:d0:2e:1c:52:2c: e4:d0:8b:fc:5b:ab:cd:8c:04:21:10:3f:09:95:ed: e4:83:dd:d7:0c:b6:3c:ad:e7:a7:31:c8:73:da:95: 90:4d:49:15:c0:bf:a4:0e:a5:e1:3f:82:f3:2b:63: 29:46:a4:1f:0e:ed:36:50:c9:40:c6:12:24:c4:7e: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:BF:35:AC:96:A6:A4:6C:72:1E:D7:22:57:85:2B:1A:9B:B6:D4 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a1:8d:9e:b7:c8:0b:f1:b8:10:a5:48:a9:da:4b:b1:78:fc: 55:5f:a4:4a:a0:16:64:4f:c3:35:3d:4b:da:06:53:21:f7:3a: ab:59:51:a9:a4:42:80:7c:a3:d1:77:c9:25:6e:3c:f5:5a:f8: 4c:ab:b4:ea:ac:fe:ee:c7:7c:4a:f1:94:bf:fd:54:6f:5a:48: e1:7a:47:d2:83:2d:27:ff:df:75:8e:08:94:17:1d:ee:7a:10: 6d:f2:08:6a:94:55:22:25:e6:ed:9b:dd:b3:22:d7:a1:0f:52: e5:92:65:1f:0f:a7:84:1e:75:2a:d3:a3:11:ee:91:c5:8b:74: 6b:1c:9f:8c:99:28:4e:4a:1d:b0:3b:75:1b:2d:fe:52:50:dd: ec:51:8d:73:7c:e6:b1:32:33:ef:7a:aa:d6:a1:65:84:0f:ca: e3:f4:2b:ca:81:0d:a2:53:b4:37:fc:3f:93:3c:e5:9d:27:51: 37:3f:d2:0c:3e:1f:e4:0d:c5:65:b8:93:33:f7:61:df:21:00: 33:20:c7:5e:03:ae:12:26:1c:b6:52:84:f5:a9:81:59:68:7c: 2b:1d:70:d2:7d:84:b8:6d:e4:9b:9b:c5:92:26:d3:f3:4e:ec: fa:fb:03:c4:1c:e9:08:2c:30:44:7f:c1:89:cd:e5:c4:a5:57: 6c:21:1a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwNDI0MTU0NzI5WhcNMjUwNTAxMTU0NzI5WjAYMRYwFAYD VQQDEw02ODBhNWQxMS05OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdtAAWZBHeaJyMRWK1Jz+Bux07QSIXDXkr5b/AuMT55LJ+MutoJFfNWLCZc8 C/Po/y1kufBsgFDn77RlUFMGWiXnvp3VYOXv97FLUSZG9I03n1pu7+v1XcpLtFm/ N757QiFRe+BHpG31wrvIHGbgA3fVj2vd/noqhc+tiV+PN1ojG4gxwIIENczeTYdv L9XKul7ZxyQGmkweaEO7ladBjEuw2mGXXZ5Pcvj3lYFkylNJlK49F8dohl8rKFrY 0C4cUizk0Iv8W6vNjAQhED8Jle3kg93XDLY8reenMchz2pWQTUkVwL+kDqXhP4Lz K2MpRqQfDu02UMlAxhIkxH7I4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnpvzWs lqakbHIe1yJXhSsam7bUMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2oY2et8gL8bgQpUip2kuxePxVX6RKoBZkT8M1PUvaBlMh9zqrWVGp pEKAfKPRd8klbjz1WvhMq7TqrP7ux3xK8ZS//VRvWkjhekfSgy0n/991jgiUFx3u ehBt8ghqlFUiJebtm92zItehD1LlkmUfD6eEHnUq06MR7pHFi3RrHJ+MmShOSh2w O3UbLf5SUN3sUY1zfOaxMjPveqrWoWWED8rj9CvKgQ2iU7Q3/D+TPOWdJ1E3P9IM Ph/kDcVluJMz92HfIQAzIMdeA64SJhy2UoT1qYFZaHwrHXDSfYS4beSbm8WSJtPz Tuz6+wPEHOkILDBEf8GJzeXEpVdsIRo8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:07:17 2025 by rpki-client