$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: T5paC3IGpzbS42BdKkbKMlHsb41LYoUCuWkqoRxjBOI= Subject key identifier: 0A:6B:11:5A:F6:C2:82:0A:0E:3B:E5:05:FF:1E:D2:A8:68:76:23:48 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: AD Signing time: Fri 25 Apr 2025 05:07:46 +0000 Manifest this update: Fri 25 Apr 2025 05:07:45 +0000 Manifest next update: Fri 02 May 2025 05:07:45 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: Pnm07+vs0/wMYROqKg/sSGkhtu/IMbzd6u/ilVdh8Co=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: 4EHRpeMi8/g5A65WYX96AeSBYgGFYLJaPZfMVf/nA+U=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6APWnum5XO+1AjxPLod4M585Hvd075IxDDxMYdDbIE0=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: A1M8cgXwpueoyV//ap2OtyS//Qc9zVR+BitCHlrnuUc=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: qoBV7sb5eaX6g1s+qv3xkdJSZExJ62bMwOk41VIcbsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Apr 25 05:07:45 2025 GMT Not After : May 2 05:07:45 2025 GMT Subject: CN=680b18a1-dad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:f6:21:1c:ca:eb:4f:5c:98:ae:f9:e7:55: b3:12:bc:1c:14:f6:76:a0:b8:c8:f9:7f:46:3d:4f: d6:dc:b1:0e:26:74:eb:49:4b:47:59:af:87:16:95: 83:da:12:12:db:b6:d1:d8:b7:53:50:c3:ec:0f:42: fe:59:db:ce:37:03:6f:18:b3:b5:92:81:10:4e:95: e2:1b:78:ad:9c:2f:e4:44:41:e3:8e:1d:c3:70:a4: 9d:a3:42:9b:1b:bd:41:93:0b:f7:0f:99:36:49:8b: e2:87:8a:b0:0c:01:3f:92:9c:c3:7b:da:1f:2c:b6: 77:67:a5:93:1a:51:22:f9:37:47:6f:b4:35:37:cc: 36:ab:91:b1:85:a6:ca:28:cd:c9:8a:69:f5:c1:32: 91:9f:85:2e:45:4f:4d:66:79:f1:ad:27:36:20:6d: e2:b8:29:ed:13:af:f2:63:56:98:ee:e0:c5:e6:24: 05:ad:01:d5:20:75:43:d8:b8:2f:38:51:90:ff:b8: 97:5e:46:f7:25:67:4f:2f:22:d5:9a:8c:74:dc:71: 24:4c:f1:e7:6a:d6:95:98:ed:d7:01:02:06:e1:7c: a9:a2:a5:5b:0e:5a:ea:c8:95:37:d7:e5:10:a2:db: 03:09:40:34:da:b4:b9:e9:73:34:08:43:6e:87:ce: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:11:5A:F6:C2:82:0A:0E:3B:E5:05:FF:1E:D2:A8:68:76:23:48 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fc:ae:44:2a:39:1e:8e:64:79:68:36:09:e0:51:f9:ce:45: 7c:c9:60:dc:86:86:fd:1f:66:8c:90:36:15:ad:c8:f4:5f:4c: 34:2d:a8:f3:94:ed:50:b3:f1:34:85:a9:f0:da:55:8d:9e:8e: 53:33:1a:77:99:8c:59:84:69:e4:39:6c:a3:35:61:3b:48:dc: 7b:b8:d2:e8:1b:fb:76:a2:29:97:ee:7c:b6:7d:a7:e6:a1:6b: 28:9f:e7:57:58:1b:ab:7c:a8:96:5d:86:8b:1e:ab:ae:62:84: 68:51:63:b8:73:60:15:01:d3:3e:81:70:28:39:e3:14:07:b3: 76:0f:f7:d6:83:4b:25:fe:8a:9f:ac:af:78:03:a3:e3:d9:11: bc:49:16:5a:a2:6a:24:1e:8d:a1:1d:40:7e:c3:35:c3:cd:16: 87:41:1d:30:f1:fd:16:7b:87:07:71:1f:79:8a:87:52:bd:b5: 1b:ee:25:7a:73:84:6c:d6:41:4d:df:b4:bf:ac:9f:d6:54:f9: 07:d2:c4:93:c2:cf:41:f3:93:bb:3e:14:d0:9e:14:40:06:e5: d3:e8:b5:e7:1a:44:0e:70:20:63:00:35:50:95:23:65:9a:b8: 7c:3b:b7:3d:06:63:b8:ec:f6:33:65:ba:c6:da:46:50:07:dd: 70:07:20:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUwNDI1MDUwNzQ1WhcNMjUwNTAyMDUwNzQ1WjAYMRYwFAYD VQQDEw02ODBiMThhMS1kYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4b2IRzK609cmK7551WzErwcFPZ2oLjI+X9GPU/W3LEOJnTrSUtHWa+HFpWD 2hIS27bR2LdTUMPsD0L+WdvONwNvGLO1koEQTpXiG3itnC/kREHjjh3DcKSdo0Kb G71Bkwv3D5k2SYvih4qwDAE/kpzDe9ofLLZ3Z6WTGlEi+TdHb7Q1N8w2q5GxhabK KM3Jimn1wTKRn4UuRU9NZnnxrSc2IG3iuCntE6/yY1aY7uDF5iQFrQHVIHVD2Lgv OFGQ/7iXXkb3JWdPLyLVmox03HEkTPHnataVmO3XAQIG4XypoqVbDlrqyJU31+UQ otsDCUA02rS56XM0CENuh86jLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAprEVr2 woIKDjvlBf8e0qhodiNIMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP/K5EKjkejmR5aDYJ4FH5zkV8yWDchob9H2aMkDYVrcj0X0w0Lajz lO1Qs/E0hanw2lWNno5TMxp3mYxZhGnkOWyjNWE7SNx7uNLoG/t2oimX7ny2fafm oWson+dXWBurfKiWXYaLHquuYoRoUWO4c2AVAdM+gXAoOeMUB7N2D/fWg0sl/oqf rK94A6Pj2RG8SRZaomokHo2hHUB+wzXDzRaHQR0w8f0We4cHcR95iodSvbUb7iV6 c4Rs1kFN37S/rJ/WVPkH0sSTws9B85O7PhTQnhRABuXT6LXnGkQOcCBjADVQlSNl mrh8O7c9BmO47PYzZbrG2kZQB91wByD6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:22 2025 by rpki-client