$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json) Hash identifier: RxVZx1xAXCWC6GOYZcQE5BF5C6s/CK8Lv+v6/3H45kc= Subject key identifier: 14:22:B9:E9:45:EA:48:0F:4C:2F:58:66:01:A3:94:D4:7E:67:97:FB Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft Manifest number: 0869 Signing time: Thu 24 Apr 2025 20:33:39 +0000 Manifest this update: Thu 24 Apr 2025 20:33:39 +0000 Manifest next update: Thu 01 May 2025 20:33:39 +0000 Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: ChcfiG5mTZsHtgctGohgsnOzpafBXi/JCOpsE4eIzwU=) 2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=) 3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=) 4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Apr 24 20:33:39 2025 GMT Not After : May 1 20:33:39 2025 GMT Subject: CN=680aa023-21d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:c6:35:1e:69:6b:7b:25:35:17:bd:38:04: d3:96:93:18:ce:a5:68:69:72:78:c5:6a:aa:41:d0: 33:12:b2:6b:4b:43:de:bf:67:aa:74:00:e0:c5:60: 6c:a8:37:1a:86:39:6e:91:86:35:42:98:0c:b0:01: fa:2c:ef:7c:2f:ea:82:75:9c:db:8f:7c:2d:03:b2: bc:8f:3d:fa:f7:7d:42:04:84:67:40:f0:f9:25:1f: b4:0c:cb:c9:ec:b6:24:ed:c6:c3:be:96:23:22:39: 9a:a6:36:c2:7f:11:ba:f2:5e:fa:ce:4c:20:c7:f8: 6f:4f:6c:36:05:e2:1f:df:1c:3c:ec:7f:04:30:55: 04:f4:e8:d2:4e:0f:63:2a:9e:e5:f0:0e:50:f6:9d: 2d:6c:5d:30:50:ef:20:04:32:70:c8:db:9e:4a:3f: b9:4b:59:15:5a:39:1c:10:d9:bf:f8:81:ea:90:df: 70:01:a2:e8:88:03:43:47:01:8a:78:b4:9b:ae:cd: 2b:12:4c:e3:e5:e3:b3:17:8b:5c:b0:59:b6:3f:21: ca:94:0f:9a:92:db:1d:cb:8d:5b:c5:b9:41:12:f1: af:e5:f4:52:fe:16:60:20:7a:a1:8a:35:27:3e:0d: ee:ce:ce:22:8a:77:7e:fa:a9:71:fb:7f:25:4d:c6: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:B9:E9:45:EA:48:0F:4C:2F:58:66:01:A3:94:D4:7E:67:97:FB X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:7f:43:50:a5:a6:45:1e:dc:3a:e2:0e:99:3c:27:0b:b4:de: 1e:ed:9c:55:c7:8f:12:98:20:47:59:4a:65:24:87:ce:fb:2c: eb:3f:cb:88:d0:86:1a:bd:98:42:2a:49:cd:59:bb:8c:65:f4: 80:59:60:a4:25:70:c9:38:21:8b:34:73:7a:3a:76:75:d9:3d: d7:4d:e4:6f:b6:b1:ad:c7:1c:45:5d:43:2a:31:dc:f0:ea:1c: 9e:a1:97:3e:95:0d:ed:6a:5e:99:2f:85:36:fd:2e:eb:71:d2: e9:11:ab:75:2f:97:5e:9f:f1:28:e9:03:50:f6:2a:49:81:bc: 79:be:fa:f7:d4:6b:8d:35:5a:ee:08:66:33:15:b3:60:76:0f: 53:b0:d1:b8:34:b0:58:01:64:f9:73:d4:10:ba:21:ab:20:2e: 7b:c5:14:46:29:39:6c:37:6b:f7:13:7b:73:8d:bb:0a:72:d0: e7:93:64:41:53:19:48:92:e5:4d:70:21:fe:91:1e:a1:a2:56: 94:9d:6a:1f:ad:5d:75:d4:65:64:25:31:24:71:3a:fd:4f:43: bb:89:de:92:5f:24:e5:a2:72:68:ae:6c:e0:28:b0:a2:13:a3: b5:8e:ec:33:ec:64:2a:42:2c:19:88:6a:83:75:13:7a:dc:76: c9:08:8b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjUwNDI0MjAzMzM5WhcNMjUwNTAxMjAzMzM5WjAYMRYwFAYD VQQDEw02ODBhYTAyMy0yMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRvGNR5pa3slNRe9OATTlpMYzqVoaXJ4xWqqQdAzErJrS0Pev2eqdADgxWBs qDcahjlukYY1QpgMsAH6LO98L+qCdZzbj3wtA7K8jz36931CBIRnQPD5JR+0DMvJ 7LYk7cbDvpYjIjmapjbCfxG68l76zkwgx/hvT2w2BeIf3xw87H8EMFUE9OjSTg9j Kp7l8A5Q9p0tbF0wUO8gBDJwyNueSj+5S1kVWjkcENm/+IHqkN9wAaLoiANDRwGK eLSbrs0rEkzj5eOzF4tcsFm2PyHKlA+aktsdy41bxblBEvGv5fRS/hZgIHqhijUn Pg3uzs4iind++qlx+38lTcaYfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQiuelF 6kgPTC9YZgGjlNR+Z5f7MB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUVEMC82RUVCMTE1MEMyQjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1Zq eDhRNTJ3ZWJaTGF0RVFHbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtf0NQpaZFHtw64g6ZPCcLtN4e7ZxVx48SmCBHWUplJIfO+yzrP8uI 0IYavZhCKknNWbuMZfSAWWCkJXDJOCGLNHN6OnZ12T3XTeRvtrGtxxxFXUMqMdzw 6hyeoZc+lQ3tal6ZL4U2/S7rcdLpEat1L5den/Eo6QNQ9ipJgbx5vvr31GuNNVru CGYzFbNgdg9TsNG4NLBYAWT5c9QQuiGrIC57xRRGKTlsN2v3E3tzjbsKctDnk2RB UxlIkuVNcCH+kR6holaUnWofrV111GVkJTEkcTr9T0O7id6SXyTlonJormzgKLCi E6O1juwz7GQqQiwZiGqDdRN63HbJCIuK -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:06 2025 by rpki-client