$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: x2ZfUPnaiP2teAEPDexlGOmFn3P7TUZVpjen7U5W2MM= Subject key identifier: 7A:93:B6:86:E0:D9:1C:69:24:6E:DA:AB:F1:E7:33:AE:68:D6:3B:3A Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: D7 Signing time: Fri 25 Apr 2025 04:40:49 +0000 Manifest this update: Fri 25 Apr 2025 04:40:49 +0000 Manifest next update: Fri 02 May 2025 04:40:49 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: sxiw6aVKuk5QD9q0YY+2SdIVTSb6X7FX4696Z41bjF4=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Apr 25 04:40:49 2025 GMT Not After : May 2 04:40:49 2025 GMT Subject: CN=680b1251-6283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:be:b7:e3:2e:78:47:53:cb:70:a9:2e:a0: 08:d4:50:1b:01:17:ab:c9:bd:41:a4:b0:a2:36:64: d9:af:8a:63:a5:d9:0b:da:c3:c0:e5:41:72:33:27: 0f:d7:f7:20:13:9d:90:b2:88:35:91:b0:2f:0c:bf: 48:32:08:c5:89:51:c6:ba:18:28:c0:2b:cf:94:0c: d1:f1:34:c7:dc:ae:82:38:09:5c:26:69:54:50:99: 9e:df:59:18:1e:6e:4c:6a:dd:7e:fb:8f:10:1b:4c: 95:ca:b6:ba:94:77:f6:48:ad:5d:7c:5f:3a:d2:82: 53:ef:8a:85:2e:9d:73:64:8a:92:d2:1c:9b:61:6a: d1:9c:87:c7:78:18:d6:40:6d:c4:f4:1b:57:59:c0: 48:cf:95:31:b9:3e:aa:82:88:3e:6b:61:38:73:59: 82:f5:70:10:79:54:5d:e0:93:5a:3b:83:ef:2c:2b: 4f:1d:5f:a1:7b:36:17:d4:c8:fc:e9:13:21:dd:d8: 03:81:92:8c:8a:de:29:ac:1b:bb:cb:ec:ab:8b:a3: bc:36:d9:fb:44:f9:35:18:3e:1b:36:ac:86:a2:7c: 78:80:89:8f:b1:8e:b0:e0:5f:6a:4d:55:87:63:de: 24:4e:0b:c2:bc:25:f2:6f:89:6b:19:82:28:6c:6d: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:B6:86:E0:D9:1C:69:24:6E:DA:AB:F1:E7:33:AE:68:D6:3B:3A X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:54:23:14:7e:ff:2d:0e:79:83:66:ff:09:9f:5e:8e:06:1f: d7:80:9f:71:a1:4d:80:c7:a0:bf:b5:56:22:a3:a9:77:19:36: db:f8:97:a4:42:d5:2c:7a:c8:69:e6:de:83:46:1e:f2:47:2a: ec:55:73:29:f2:f1:00:c3:50:d9:38:d8:7a:25:b0:e4:c6:46: e5:6b:1b:81:4b:81:7b:e9:19:59:ba:5f:98:94:7e:b6:df:93: bf:25:9b:36:83:e7:ce:0a:dc:50:ba:b1:d2:1e:3f:a0:1e:98: 15:45:e0:24:68:92:97:28:96:21:7d:38:28:ba:bd:5a:50:00: 80:a4:36:66:3b:d6:ca:f0:91:d7:f7:f6:d3:90:4f:af:b0:2c: 5b:1c:f5:89:cf:ce:aa:1c:0e:ae:7d:6c:77:da:b7:87:c7:68: 79:10:6d:35:cf:11:7b:ea:35:9e:35:82:88:21:6f:00:25:f4: 13:ad:44:4a:0c:96:3d:f7:5e:a8:51:fa:a0:71:56:30:a0:25: fe:5c:b1:5e:9d:b8:94:13:bf:dd:63:0a:6d:0d:d5:40:72:95: 5a:ca:a1:59:56:40:c0:27:ea:9f:fd:e5:ca:cf:54:93:f3:b8: 32:87:06:6e:d9:99:01:69:94:5f:18:08:c2:7d:30:9c:17:66: f4:e6:31:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjUwNDI1MDQ0MDQ5WhcNMjUwNTAyMDQ0MDQ5WjAYMRYwFAYD VQQDEw02ODBiMTI1MS02MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDe+t+MueEdTy3CpLqAI1FAbAReryb1BpLCiNmTZr4pjpdkL2sPA5UFyMycP 1/cgE52Qsog1kbAvDL9IMgjFiVHGuhgowCvPlAzR8TTH3K6COAlcJmlUUJme31kY Hm5Mat1++48QG0yVyra6lHf2SK1dfF860oJT74qFLp1zZIqS0hybYWrRnIfHeBjW QG3E9BtXWcBIz5UxuT6qgog+a2E4c1mC9XAQeVRd4JNaO4PvLCtPHV+hezYX1Mj8 6RMh3dgDgZKMit4prBu7y+yri6O8Ntn7RPk1GD4bNqyGonx4gImPsY6w4F9qTVWH Y94kTgvCvCXyb4lrGYIobG22dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqTtobg 2RxpJG7aq/HnM65o1js6MB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VCMUfv8tDnmDZv8Jn16OBh/XgJ9xoU2Ax6C/tVYio6l3GTbb+Jek QtUseshp5t6DRh7yRyrsVXMp8vEAw1DZONh6JbDkxkblaxuBS4F76RlZul+YlH62 35O/JZs2g+fOCtxQurHSHj+gHpgVReAkaJKXKJYhfTgour1aUACApDZmO9bK8JHX 9/bTkE+vsCxbHPWJz86qHA6ufWx32reHx2h5EG01zxF76jWeNYKIIW8AJfQTrURK DJY9916oUfqgcVYwoCX+XLFenbiUE7/dYwptDdVAcpVayqFZVkDAJ+qf/eXKz1ST 87gyhwZu2ZkBaZRfGAjCfTCcF2b05jFZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:45 2025 by rpki-client