$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: oAFF5AIJOYrJaVHle4zM2TEHuDHZYyxS1em0tUzRNF0= Subject key identifier: 67:E8:90:25:FF:C9:88:0B:B8:CC:1E:4F:16:1A:59:84:4A:BC:33:E1 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: C8 Signing time: Fri 25 Apr 2025 04:53:26 +0000 Manifest this update: Fri 25 Apr 2025 04:53:26 +0000 Manifest next update: Fri 02 May 2025 04:53:26 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: rfzZhrwpN5B5PhvKLooqP9Vy88y4wcyeifVxNWQY930=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Apr 25 04:53:26 2025 GMT Not After : May 2 04:53:26 2025 GMT Subject: CN=680b1546-39f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:48:b5:76:75:68:69:ea:89:e1:22:c4:81: 23:09:df:e4:dc:44:80:06:36:51:c2:44:e5:92:3d: 99:8b:86:61:28:d2:32:e8:d7:e9:2d:5e:be:ca:d9: 8d:84:cd:b4:e2:97:d1:f1:68:ad:a9:02:b5:cf:5b: 2c:98:5e:a6:3d:f5:7e:7e:b7:a6:66:fb:fd:56:82: a2:d6:43:47:64:82:32:c1:84:14:59:4f:66:a9:14: a6:9f:bd:4c:72:bd:f0:5f:e3:09:3d:87:b8:80:f4: 4b:c2:d0:e5:f2:09:11:5f:52:7b:c8:ff:26:bb:b7: 1e:3c:2d:e8:4f:03:bc:e6:30:ba:b7:ad:13:fb:7c: 2d:dc:ca:d8:2f:5c:f5:0c:6e:ab:df:c6:0b:2a:00: 7a:06:a8:af:87:e5:ee:23:3a:be:a9:c9:73:9b:7f: e2:50:c3:26:bf:be:ea:14:34:7c:15:26:c1:51:16: 2a:bc:e7:2d:2a:9d:14:96:54:b0:18:e8:3a:88:4f: b4:de:e1:d8:d1:8c:7d:c9:ce:e6:5e:ef:d6:29:2d: 9d:e4:85:2d:4d:3d:a5:0c:e2:62:4f:5c:17:d2:f2: 1f:4d:a2:fc:23:33:bf:21:65:4d:a9:dc:d0:b0:3e: 3c:02:af:cb:66:48:8f:35:0e:69:ad:ee:d9:22:72: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:90:25:FF:C9:88:0B:B8:CC:1E:4F:16:1A:59:84:4A:BC:33:E1 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:42:97:0a:5d:b0:8f:f6:58:2f:b7:9d:f5:8a:86:3e:93:a2: f4:82:2c:70:3d:19:ba:37:d3:99:1c:9f:bb:6c:7b:97:03:1b: c5:3a:a3:9c:1f:ab:c6:a3:59:ce:20:4c:62:26:c1:66:31:89: 1c:e4:1b:d3:31:3d:ac:2d:f0:16:09:25:61:c1:55:c9:86:96: e8:39:cc:13:ac:6d:ef:07:04:d9:ca:0c:1a:65:69:0f:18:eb: 45:9e:9b:0f:1a:d1:ff:10:95:aa:ef:62:05:53:ce:ed:42:91: b8:ba:ab:a4:c5:d1:29:27:83:b8:54:10:08:d0:b1:20:dd:be: 35:e3:55:dd:c4:15:3c:f6:5b:62:9d:70:1d:5d:08:cb:fc:1b: 34:4b:e2:d3:72:3f:dc:53:0d:c6:92:37:6f:a9:95:7e:b0:96: 02:87:87:a3:17:12:3d:80:37:31:60:72:b0:37:44:a4:05:50: 47:7a:99:9a:3d:2f:34:1e:c3:f4:25:3e:4f:1c:93:c4:c9:a3: 2a:3b:e4:b2:c4:97:26:47:f9:15:91:b4:a3:c1:3c:bf:f8:8b: 40:8b:b1:89:9a:ab:29:62:6d:3d:d0:07:89:26:49:37:18:7f: dd:6d:d7:97:8c:df:ac:b2:8c:53:19:f2:86:1e:a2:01:c0:0c: cd:d4:b6:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwNDI1MDQ1MzI2WhcNMjUwNTAyMDQ1MzI2WjAYMRYwFAYD VQQDEw02ODBiMTU0Ni0zOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxURItXZ1aGnqieEixIEjCd/k3ESABjZRwkTlkj2Zi4ZhKNIy6NfpLV6+ytmN hM204pfR8WitqQK1z1ssmF6mPfV+fremZvv9VoKi1kNHZIIywYQUWU9mqRSmn71M cr3wX+MJPYe4gPRLwtDl8gkRX1J7yP8mu7cePC3oTwO85jC6t60T+3wt3MrYL1z1 DG6r38YLKgB6Bqivh+XuIzq+qclzm3/iUMMmv77qFDR8FSbBURYqvOctKp0UllSw GOg6iE+03uHY0Yx9yc7mXu/WKS2d5IUtTT2lDOJiT1wX0vIfTaL8IzO/IWVNqdzQ sD48Aq/LZkiPNQ5pre7ZInJoiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfokCX/ yYgLuMweTxYaWYRKvDPhMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQpcKXbCP9lgvt531ioY+k6L0gixwPRm6N9OZHJ+7bHuXAxvFOqOc H6vGo1nOIExiJsFmMYkc5BvTMT2sLfAWCSVhwVXJhpboOcwTrG3vBwTZygwaZWkP GOtFnpsPGtH/EJWq72IFU87tQpG4uqukxdEpJ4O4VBAI0LEg3b4141XdxBU89lti nXAdXQjL/Bs0S+LTcj/cUw3GkjdvqZV+sJYCh4ejFxI9gDcxYHKwN0SkBVBHepma PS80HsP0JT5PHJPEyaMqO+SyxJcmR/kVkbSjwTy/+ItAi7GJmqspYm090AeJJkk3 GH/dbdeXjN+ssoxTGfKGHqIBwAzN1LbM -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:58 2025 by rpki-client