$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json) Hash identifier: 061eKFHZXUfj1jQMOnkS9/U/fZzdPcxSuruSZ0i9cLQ= Subject key identifier: 14:B6:A0:55:BD:44:1B:6D:39:60:48:BF:85:3F:00:E4:0E:E6:DE:D7 Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft Manifest number: 3472 Signing time: Thu 24 Apr 2025 14:41:09 +0000 Manifest this update: Thu 24 Apr 2025 14:41:09 +0000 Manifest next update: Thu 01 May 2025 14:41:09 +0000 Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: AF53Wu/CyHzpCmff8JLv1fuzj+HTVyMSiD9UdYHgECc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Validity Not Before: Apr 24 14:41:09 2025 GMT Not After : May 1 14:41:09 2025 GMT Subject: CN=680a4d85-e5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:31:00:64:ae:ee:cc:d3:81:e2:85:6f:62: 79:26:64:01:f1:07:a0:66:29:ce:f0:33:e6:9c:ad: 6b:aa:ae:aa:b6:e5:e9:df:24:ba:4f:96:10:b0:4c: b4:94:b9:42:cf:62:6c:60:26:e0:49:e6:7c:8b:d6: b7:52:c4:d7:ae:9a:e3:d3:a1:30:65:b7:53:f9:12: ef:2e:d4:7a:d6:e0:d0:38:2b:18:70:e1:01:92:ce: d8:0a:45:7b:31:47:6c:24:5a:18:e9:fc:da:ef:24: 69:dc:db:11:03:42:de:e2:f8:39:08:b5:3f:92:54: d7:29:91:b4:c9:c2:00:74:1e:93:7a:f7:2a:1b:5f: 61:64:d3:0b:66:71:64:1d:78:d1:3d:64:92:c4:f7: fb:57:4c:d0:15:80:a8:9e:c3:c8:40:fa:51:1a:5a: 6d:da:04:c6:c6:41:3b:e7:70:45:9c:04:5b:b4:0b: 84:16:3a:c9:28:ce:7f:e1:b9:46:2f:a7:3c:a5:ae: 9c:a1:d5:07:4b:df:80:ff:02:a5:6c:6b:ab:cb:05: 0a:49:2f:99:7d:cd:4f:71:18:37:ba:fd:ea:a6:f7: 2c:3c:86:d4:df:8a:2a:d8:30:00:90:28:43:67:03: 70:b9:1f:9b:14:02:10:05:cb:79:84:29:1b:42:6f: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:A0:55:BD:44:1B:6D:39:60:48:BF:85:3F:00:E4:0E:E6:DE:D7 X509v3 Authority Key Identifier: keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:60:d4:b0:4a:44:2d:fb:09:38:4d:83:f8:7f:44:5a:a8: fd:19:c8:ce:c3:a5:5d:6b:98:ea:f5:05:62:a1:97:ab:a4:ca: 38:b4:97:d3:82:c9:23:2e:c3:00:1c:16:b1:a8:d3:cc:11:68: aa:2d:7a:42:dc:69:6a:cc:51:d3:50:7f:07:2d:fc:f2:14:79: 77:f3:fd:af:29:02:5e:cf:45:4d:46:b3:d3:a1:d3:c2:4f:74: fe:38:46:bb:b3:03:10:62:52:92:f2:d4:c1:f8:b5:56:f7:0d: 4d:b6:fb:c9:c4:26:97:8d:56:60:78:1f:94:d1:c3:91:a3:df: 6e:e4:ac:8d:32:08:b2:d6:13:3c:a2:17:9e:a1:e1:6f:44:09: 7a:21:77:3c:91:d0:75:eb:a8:e8:b9:c5:27:75:83:ac:51:f3: e2:f9:87:f5:b2:db:9a:5f:e5:cb:41:a1:2e:ae:4e:d3:2f:d4: cc:50:73:6e:3d:0b:ec:66:fe:fd:24:43:1a:e0:12:43:74:ba: 7c:84:11:b2:33:c4:cf:ab:63:a2:9f:3e:23:db:f0:79:ac:78: 2e:12:a3:ff:2d:52:00:11:65:66:c3:b8:e7:f5:7e:8a:96:fb: be:11:31:f4:25:c6:db:08:62:ed:78:36:24:2e:d1:aa:38:7a: e4:12:72:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3OUQxMTAvBgNVBAUTKDYyQTZENUVEQzU4RDUzRUY5ODA4MDhCRUNFRDUxOUU4 MDVCMUU0MEMwHhcNMjUwNDI0MTQ0MTA5WhcNMjUwNTAxMTQ0MTA5WjAYMRYwFAYD VQQDEw02ODBhNGQ4NS1lNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqkxAGSu7szTgeKFb2J5JmQB8QegZinO8DPmnK1rqq6qtuXp3yS6T5YQsEy0 lLlCz2JsYCbgSeZ8i9a3UsTXrprj06EwZbdT+RLvLtR61uDQOCsYcOEBks7YCkV7 MUdsJFoY6fza7yRp3NsRA0Le4vg5CLU/klTXKZG0ycIAdB6TevcqG19hZNMLZnFk HXjRPWSSxPf7V0zQFYConsPIQPpRGlpt2gTGxkE753BFnARbtAuEFjrJKM5/4blG L6c8pa6codUHS9+A/wKlbGurywUKSS+Zfc1PcRg3uv3qpvcsPIbU34oq2DAAkChD ZwNwuR+bFAIQBct5hCkbQm/0/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS2oFW9 RBttOWBIv4U/AOQO5t7XMB8GA1UdIwQYMBaAFGKm1e3FjVPvmAgIvs7VGegFseQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc5RC9BQzZBMTY4QzFE OTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUtLVlDQWktenRVWjZBV3g1 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxYlY3Y1dOVS0tWUNBaS16dFVaNkFXeDVBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc5RC9BQzZBMTY4QzFEOTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUt LVlDQWktenRVWjZBV3g1QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe6WDUsEpELfsJOE2D+H9EWqj9GcjOw6Vda5jq9QVioZerpMo4tJfT gskjLsMAHBaxqNPMEWiqLXpC3GlqzFHTUH8HLfzyFHl38/2vKQJez0VNRrPTodPC T3T+OEa7swMQYlKS8tTB+LVW9w1NtvvJxCaXjVZgeB+U0cORo99u5KyNMgiy1hM8 oheeoeFvRAl6IXc8kdB166joucUndYOsUfPi+Yf1stuaX+XLQaEurk7TL9TMUHNu PQvsZv79JEMa4BJDdLp8hBGyM8TPq2Oinz4j2/B5rHguEqP/LVIAEWVmw7jn9X6K lvu+ETH0JcbbCGLteDYkLtGqOHrkEnLp -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:00 2025 by rpki-client