$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: ygr1TekztatcYHvEvnqYu/+F+0S719WawsLAgcfFBgM= Subject key identifier: C4:A2:8D:55:81:70:D8:16:B1:AB:03:7C:AE:C2:BB:A3:60:39:3E:A2 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3477 Signing time: Thu 24 Apr 2025 14:56:52 +0000 Manifest this update: Thu 24 Apr 2025 14:56:51 +0000 Manifest next update: Thu 01 May 2025 14:56:51 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: HgPU5xLdEUti3eHws6B44E8nxorIVxDWPCLh0MumJCs=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Apr 24 14:56:51 2025 GMT Not After : May 1 14:56:51 2025 GMT Subject: CN=680a5133-de3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:7c:96:f6:94:6b:68:0d:fa:85:85:d4:bd: df:c8:df:d3:27:13:7b:03:20:77:7c:e5:c3:55:3f: c4:b2:bc:b4:18:74:7d:9c:55:37:ea:ce:62:bc:65: 2a:2f:5d:3a:fd:30:f0:8d:2c:84:42:f4:44:1a:99: 04:05:2e:f1:98:17:c5:99:9c:b9:80:89:22:4c:50: 25:5a:e9:0f:c1:f6:ed:2a:4a:81:5a:0e:d7:f7:f9: d0:ca:c9:35:9d:b5:00:83:49:bd:93:8e:54:99:1a: df:27:cb:7d:d2:84:20:29:48:d6:55:09:24:57:94: 13:86:7c:cd:21:15:cd:54:46:da:50:48:58:ca:a3: 3e:e1:51:77:8d:76:75:ad:23:95:ea:8e:aa:6f:df: d6:aa:73:6e:48:38:93:9d:7c:2f:bc:d0:07:9e:a1: 05:bb:a8:db:51:64:84:44:07:61:bf:7f:93:30:36: d1:8c:b9:3f:26:98:26:0a:f6:6c:ed:3c:ae:50:c0: a4:e6:1c:94:bb:dc:26:cd:9a:d3:30:39:2d:64:f6: 81:1d:19:75:39:39:2a:d1:7c:6e:16:a3:7f:ca:94: 3c:55:66:51:49:1a:22:4b:2f:7a:7b:91:52:6d:a5: dd:04:8b:3c:50:29:fc:73:5f:35:0a:00:32:65:8e: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:8D:55:81:70:D8:16:B1:AB:03:7C:AE:C2:BB:A3:60:39:3E:A2 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2f:38:dc:c6:9d:3a:3b:d5:b2:ec:40:f7:60:84:75:a7:aa: 4d:1d:98:5c:21:d8:ae:bc:84:eb:e2:83:2b:78:4a:79:2f:8e: 5c:5b:a0:38:cd:74:4a:53:2f:cd:46:50:e9:64:09:c7:4c:3e: 1f:43:52:4d:c4:c2:32:7d:41:2d:af:5c:f3:b4:66:35:48:c5: 9c:7b:d2:86:e5:5c:fb:3c:ed:e8:5c:a0:ae:8a:fe:a7:29:09: 3e:d5:5f:52:e5:bb:f5:dc:86:7e:29:53:18:e8:a7:80:27:db: d8:4b:46:90:57:fc:69:9e:f0:d5:59:c6:96:22:ed:0d:66:7d: 3f:7a:03:8a:fc:df:7e:f6:db:b1:6b:22:20:18:59:1d:1d:98: 9d:69:25:cd:4d:fb:21:e1:dc:df:d3:d7:61:5c:29:fd:d7:19: d0:e0:01:47:30:3c:c6:fa:4e:1a:5b:f9:20:9b:9a:e7:4a:12: 34:f9:21:7d:4e:b3:ca:51:da:5d:ea:27:46:5f:b0:8e:18:c7: 70:db:22:e5:c2:2f:21:33:1b:70:3b:f7:5f:09:f6:c8:ec:82: 52:73:ae:cb:ff:09:1d:ed:c8:f4:58:97:71:e6:02:cd:e3:f2: 17:06:b5:5d:23:7d:10:a7:28:5a:bd:98:a3:ee:28:ab:46:0d: f7:e4:23:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwNDI0MTQ1NjUxWhcNMjUwNTAxMTQ1NjUxWjAYMRYwFAYD VQQDEw02ODBhNTEzMy1kZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshh8lvaUa2gN+oWF1L3fyN/TJxN7AyB3fOXDVT/Esry0GHR9nFU36s5ivGUq L106/TDwjSyEQvREGpkEBS7xmBfFmZy5gIkiTFAlWukPwfbtKkqBWg7X9/nQysk1 nbUAg0m9k45UmRrfJ8t90oQgKUjWVQkkV5QThnzNIRXNVEbaUEhYyqM+4VF3jXZ1 rSOV6o6qb9/WqnNuSDiTnXwvvNAHnqEFu6jbUWSERAdhv3+TMDbRjLk/JpgmCvZs 7TyuUMCk5hyUu9wmzZrTMDktZPaBHRl1OTkq0XxuFqN/ypQ8VWZRSRoiSy96e5FS baXdBIs8UCn8c181CgAyZY5oqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSijVWB cNgWsasDfK7Cu6NgOT6iMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Lzjcxp06O9Wy7ED3YIR1p6pNHZhcIdiuvITr4oMreEp5L45cW6A4 zXRKUy/NRlDpZAnHTD4fQ1JNxMIyfUEtr1zztGY1SMWce9KG5Vz7PO3oXKCuiv6n KQk+1V9S5bv13IZ+KVMY6KeAJ9vYS0aQV/xpnvDVWcaWIu0NZn0/egOK/N9+9tux ayIgGFkdHZidaSXNTfsh4dzf09dhXCn91xnQ4AFHMDzG+k4aW/kgm5rnShI0+SF9 TrPKUdpd6idGX7COGMdw2yLlwi8hMxtwO/dfCfbI7IJSc67L/wkd7cj0WJdx5gLN 4/IXBrVdI30QpyhavZij7iirRg335CM7 -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:28 2025 by rpki-client