$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: Fa0k2fMadOEyS9pdlyEBp67v4+nP+A9UKa+kMNZj0DY= Subject key identifier: 5B:75:3B:E8:4B:E2:B1:A5:2F:08:8A:41:B6:BE:15:EA:0C:9F:AF:2C Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B49 Signing time: Thu 24 Apr 2025 16:17:31 +0000 Manifest this update: Thu 24 Apr 2025 16:17:31 +0000 Manifest next update: Thu 01 May 2025 16:17:31 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: /kSeHqi2HgxmPYEwQ4bJECMETcGGixwWQbiTvvUNd4U=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: vUCWQOdb7qjvOhdcg4SHMXTM8oTjFBVRvGp114pmqGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6994 (0x1b52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Apr 24 16:17:31 2025 GMT Not After : May 1 16:17:31 2025 GMT Subject: CN=680a641b-3ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:0a:9e:46:a8:b2:0f:48:c4:b1:8e:af:02: 05:f9:dd:b7:44:81:10:03:10:f6:78:a7:a7:db:88: 6c:df:31:df:91:68:9a:3a:20:4e:49:b9:fe:4f:e3: db:34:e4:6c:22:d2:fb:e0:20:98:96:eb:e4:c7:35: d4:98:71:fe:5a:96:01:76:df:f3:2d:b2:c7:e3:20: f2:67:9e:eb:78:3b:8f:a5:31:8f:cd:48:7c:8d:65: db:44:6e:50:b2:dc:88:50:1c:a2:75:79:bd:f7:f0: cb:d8:8c:82:7a:2a:2d:22:fd:59:1f:c7:be:5e:bb: 46:bc:25:d2:98:20:83:6c:35:77:ef:57:94:69:98: 77:bc:d3:08:81:93:a0:7b:cc:a1:a0:9c:c4:f6:ab: 7a:b7:3a:9b:05:31:eb:0f:04:77:ca:66:c4:0e:78: 55:ab:44:d2:4c:7c:e0:1f:fe:01:62:7c:39:92:f4: b8:4a:30:4b:5f:d9:71:1c:24:31:d7:00:b2:06:27: 3b:3b:5a:d3:09:55:5f:2d:3c:ef:a7:de:9c:da:37: 79:2d:07:c6:b6:e3:c9:85:30:ab:aa:8a:6f:6c:de: a6:79:97:63:41:09:53:76:d5:e1:0b:08:83:84:9f: b2:d9:e8:33:19:f9:f5:88:a2:d5:db:73:31:ac:ba: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:3B:E8:4B:E2:B1:A5:2F:08:8A:41:B6:BE:15:EA:0C:9F:AF:2C X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c4:47:a1:36:d7:cf:cb:ea:8d:23:68:2c:0f:d2:ef:d8:69: d2:48:02:5f:ce:c8:b4:49:b0:b0:06:c9:07:79:78:b8:fb:78: 8b:ed:d4:13:cd:d7:7f:af:61:09:55:6b:d8:29:8c:e0:db:8c: c5:22:ba:30:2d:23:59:83:49:e1:c0:90:2b:e2:b0:ab:72:8f: 7d:50:a6:33:f9:d5:64:31:82:0a:55:e4:d3:f8:28:5f:47:28: 27:95:b6:89:30:2c:cf:e5:f4:05:30:16:8b:db:a9:91:ea:3c: e3:b1:2b:de:8a:c4:1d:60:4b:30:9d:0e:a2:19:29:61:66:54: f6:01:27:c7:a8:f9:5b:27:4b:92:fe:c5:cb:31:83:fb:b9:6b: 0c:41:d8:36:6a:07:23:1b:73:b6:5b:56:d0:af:44:b2:a3:3b: 70:da:48:27:ba:9e:66:64:be:42:d8:c9:b1:51:ef:be:51:b3: 94:0e:0a:4b:5b:59:3a:8c:76:27:1a:51:30:c4:ef:d4:a7:ed: ae:d4:25:b1:30:ff:5d:37:4b:80:8d:aa:11:b4:39:b7:33:58: 17:db:f9:f1:01:20:6c:f7:f9:d6:15:d7:ef:91:05:38:e3:65: 80:8d:a7:bf:0b:e4:ae:63:af:13:f3:25:b3:29:7d:15:46:01: 3d:c1:d7:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwNDI0MTYxNzMxWhcNMjUwNTAxMTYxNzMxWjAYMRYwFAYD VQQDEw02ODBhNjQxYi0zY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP8Knkaosg9IxLGOrwIF+d23RIEQAxD2eKen24hs3zHfkWiaOiBOSbn+T+Pb NORsItL74CCYluvkxzXUmHH+WpYBdt/zLbLH4yDyZ57reDuPpTGPzUh8jWXbRG5Q styIUByidXm99/DL2IyCeiotIv1ZH8e+XrtGvCXSmCCDbDV371eUaZh3vNMIgZOg e8yhoJzE9qt6tzqbBTHrDwR3ymbEDnhVq0TSTHzgH/4BYnw5kvS4SjBLX9lxHCQx 1wCyBic7O1rTCVVfLTzvp96c2jd5LQfGtuPJhTCrqopvbN6meZdjQQlTdtXhCwiD hJ+y2egzGfn1iKLV23MxrLr/pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt1O+hL 4rGlLwiKQba+FeoMn68sMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARxEehNtfPy+qNI2gsD9Lv2GnSSAJfzsi0SbCwBskHeXi4+3iL7dQT zdd/r2EJVWvYKYzg24zFIrowLSNZg0nhwJAr4rCrco99UKYz+dVkMYIKVeTT+Chf RygnlbaJMCzP5fQFMBaL26mR6jzjsSveisQdYEswnQ6iGSlhZlT2ASfHqPlbJ0uS /sXLMYP7uWsMQdg2agcjG3O2W1bQr0Syoztw2kgnup5mZL5C2MmxUe++UbOUDgpL W1k6jHYnGlEwxO/Up+2u1CWxMP9dN0uAjaoRtDm3M1gX2/nxASBs9/nWFdfvkQU4 42WAjae/C+SuY68T8yWzKX0VRgE9wddI -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:11 2025 by rpki-client