$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: VjkgK5PMr7kar9P2eOOpC3lKgz2ylL4MEAo3sG1Hgc4= Subject key identifier: DD:D0:8F:73:13:56:2E:EA:9F:DF:17:C9:9F:1B:00:3C:C8:81:3B:D4 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0D93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0D7E Signing time: Thu 24 Apr 2025 17:54:52 +0000 Manifest this update: Thu 24 Apr 2025 17:54:51 +0000 Manifest next update: Thu 01 May 2025 17:54:51 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: jB5k+PPJwCiCtkC0I6Nxaj5fGupb3Pgif/ugpM7R82k=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: ei37UEPvAyJIPiR8lkdojLtbKQiKoaBSIPUwB8sha18=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: dbAsxfzu6f+yImX351fMIh4a0dyPHR7GYgrAqsT4PFg=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: KL8aICS0aayuRpdlvbYehEzSsatkO3Hs+QAJl8XQUok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Apr 24 17:54:51 2025 GMT Not After : May 1 17:54:51 2025 GMT Subject: CN=680a7aeb-c981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:8c:6e:fa:79:b0:ea:c7:1a:c4:b2:41:b0: ac:96:9b:64:74:a5:ba:f9:34:14:ef:d2:91:d3:ca: cc:b2:e5:4f:f8:3a:d9:d4:41:57:de:c2:69:e6:a1: 92:ce:8d:29:cd:3c:b7:8c:6f:cb:1a:a7:6f:f7:34: 5f:db:45:3c:f4:0c:82:09:45:32:dd:6b:55:44:c5: 92:20:1d:d7:6a:c6:cf:cb:84:a6:30:75:56:ca:55: 19:a5:d0:10:86:57:87:6e:a2:89:25:0d:9d:fb:f3: 35:6b:bd:2a:54:66:84:05:8a:45:16:f3:fa:d9:0e: e0:01:ea:ac:99:c2:9f:99:a0:0a:9f:b2:a4:f4:3c: 40:d4:a8:a9:3b:b8:ca:7c:2c:18:f2:f1:e1:60:2c: cb:35:39:7c:5a:a1:68:30:d2:bd:af:1e:ce:30:c3: 93:00:a4:c8:63:e2:a9:35:ab:bf:9a:50:c7:d9:a3: 3b:a9:7d:97:9d:ff:6a:ec:a0:5e:f0:bb:2d:b8:27: a0:c5:d8:84:82:9f:e4:24:09:27:1d:1e:55:97:80: c5:9c:0b:31:74:2d:53:e5:d8:7b:7c:9c:00:f5:4d: 81:96:59:be:b4:35:84:80:5c:cc:2f:f9:57:44:eb: 4e:62:cf:84:d8:9d:cd:a0:3c:e2:a9:30:ca:7b:74: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:8F:73:13:56:2E:EA:9F:DF:17:C9:9F:1B:00:3C:C8:81:3B:D4 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:74:3d:ce:32:58:c5:d1:fd:9e:98:0f:fd:46:dd:7f:2f:48: 7e:ec:af:e4:f3:25:e7:ee:7a:aa:d1:d4:38:da:93:b5:47:58: 42:2f:ee:c2:36:96:b2:30:6e:83:c1:6a:b8:92:95:08:20:70: 08:bd:b9:6c:36:3d:4a:da:fd:d2:77:38:69:e4:6a:b3:08:9e: c9:f3:62:d9:6e:4f:b3:42:ff:9e:be:f6:95:f3:1e:49:02:b2: 0b:73:80:7b:c9:cf:d0:35:0e:fb:20:34:32:76:5b:4c:e6:05: ee:29:1e:74:04:8a:a6:d1:ba:e2:9c:82:b5:7e:9b:07:7e:92: 94:f7:79:10:92:95:8b:25:da:3c:32:08:60:27:32:50:40:05: a2:e1:db:e0:10:b0:36:3c:a7:65:33:79:e8:ac:88:50:13:1f: 53:52:b1:87:54:48:71:09:8d:63:bf:4d:cf:52:ea:ab:1e:20: 2c:f3:33:96:4f:42:94:80:82:aa:14:5b:af:f8:a7:a7:0c:39: e8:15:9e:3f:88:c4:42:d9:fe:0c:7c:08:e8:d5:08:fe:cd:13: ad:53:44:de:22:1a:44:42:9b:ea:2d:bc:94:9a:51:76:38:1a: 50:28:f2:d8:1a:92:1a:35:de:e6:e1:e3:7f:44:f6:57:a8:80: 1d:3c:51:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwNDI0MTc1NDUxWhcNMjUwNTAxMTc1NDUxWjAYMRYwFAYD VQQDEw02ODBhN2FlYi1jOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumOMbvp5sOrHGsSyQbCslptkdKW6+TQU79KR08rMsuVP+DrZ1EFX3sJp5qGS zo0pzTy3jG/LGqdv9zRf20U89AyCCUUy3WtVRMWSIB3XasbPy4SmMHVWylUZpdAQ hleHbqKJJQ2d+/M1a70qVGaEBYpFFvP62Q7gAeqsmcKfmaAKn7Kk9DxA1KipO7jK fCwY8vHhYCzLNTl8WqFoMNK9rx7OMMOTAKTIY+KpNau/mlDH2aM7qX2Xnf9q7KBe 8LstuCegxdiEgp/kJAknHR5Vl4DFnAsxdC1T5dh7fJwA9U2Bllm+tDWEgFzML/lX ROtOYs+E2J3NoDziqTDKe3SgVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Qj3MT Vi7qn98XyZ8bADzIgTvUMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAndD3OMljF0f2emA/9Rt1/L0h+7K/k8yXn7nqq0dQ42pO1R1hCL+7C NpayMG6DwWq4kpUIIHAIvblsNj1K2v3Sdzhp5GqzCJ7J82LZbk+zQv+evvaV8x5J ArILc4B7yc/QNQ77IDQydltM5gXuKR50BIqm0brinIK1fpsHfpKU93kQkpWLJdo8 MghgJzJQQAWi4dvgELA2PKdlM3norIhQEx9TUrGHVEhxCY1jv03PUuqrHiAs8zOW T0KUgIKqFFuv+KenDDnoFZ4/iMRC2f4MfAjo1Qj+zROtU0TeIhpEQpvqLbyUmlF2 OBpQKPLYGpIaNd7m4eN/RPZXqIAdPFHn -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:51 2025 by rpki-client