$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: QA5A5pPDNUmdb/H5ugVe4lyyoYdZ9ldxvI4OuhQt/pA= Subject key identifier: 3B:31:BA:EB:04:32:D0:8D:20:9D:A9:A3:32:23:C6:E9:84:7C:C4:62 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 03BB Signing time: Fri 25 Apr 2025 00:26:02 +0000 Manifest this update: Fri 25 Apr 2025 00:26:01 +0000 Manifest next update: Fri 02 May 2025 00:26:01 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: HEKWkaw6Iugbj1mQkzZe846vmtNMA1UmOObG8/muymQ=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: DMjc7YHOd4HbtoNtunrW+QIJNydNWPoTGiKSwQ+/yhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Apr 25 00:26:01 2025 GMT Not After : May 2 00:26:01 2025 GMT Subject: CN=680ad69a-25de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:46:64:96:e2:1a:0c:32:87:cc:c4:b5:dd: 4b:cd:e8:5f:80:c0:89:dc:d3:fc:d4:54:26:19:86: 2d:76:cc:81:21:70:80:b2:d4:f8:0f:9f:03:76:45: 84:9c:7e:ee:e4:9f:bf:b3:2c:69:61:52:f9:fa:f8: c1:41:c7:73:26:44:99:48:fd:e2:72:7e:23:f0:e1: 7e:66:57:06:0b:7c:b5:6e:f8:28:75:86:c7:03:53: 19:3e:89:bc:8d:56:8a:b7:fb:a5:e1:f8:56:71:f0: d8:96:ad:03:bd:05:c5:7d:92:21:d0:25:07:87:23: bf:39:ba:b3:98:1e:61:32:44:9e:be:12:ab:ec:b2: 43:b3:00:e3:6a:89:cb:c3:d2:75:7f:77:ef:e6:b6: 2a:ec:92:3f:26:f0:fc:7c:e4:b6:79:7b:f9:75:63: 8c:fd:45:6c:92:5f:d7:16:14:6d:dd:f0:81:83:6f: 0f:c6:d4:3d:53:d0:b5:2d:6f:46:e8:2f:52:5c:72: 7a:12:52:99:cb:ca:2b:86:a0:e7:1d:37:45:17:00: 54:ee:e4:87:43:5b:6b:ca:f6:57:5e:c8:b3:4c:a9: db:53:05:81:30:3d:92:ce:da:e7:d5:d6:53:ea:43: b8:36:18:da:3d:aa:6d:52:66:e0:f4:84:ac:6a:cf: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:BA:EB:04:32:D0:8D:20:9D:A9:A3:32:23:C6:E9:84:7C:C4:62 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:73:d3:eb:ad:91:13:dc:e4:7e:af:b2:be:0d:65:aa:c0:ce: 17:88:ca:be:c9:91:f7:55:ec:a4:0c:2a:47:d2:f7:81:79:a9: 0c:c2:5b:81:75:a7:a4:72:cc:14:03:a6:51:a0:c0:e5:67:2d: ff:6a:69:04:15:22:74:dc:d5:2d:cb:a8:19:ee:cd:3d:65:3c: 28:64:5e:8d:ac:3b:aa:00:9d:b6:e7:3c:c4:4e:fe:ac:67:77: e5:f6:d9:93:41:8a:e1:89:6b:49:49:c8:51:f8:50:94:97:94: 5d:4e:1e:46:9d:d4:4e:12:ae:84:dd:ce:7c:68:72:2a:18:2c: 59:9c:4e:c2:94:8f:7f:85:e1:23:6f:5c:38:9d:2f:9d:fc:cb: d4:b7:6e:53:d3:92:03:31:46:29:bf:2e:b2:8c:f4:bd:5b:fa: 10:12:fb:a2:94:c0:59:7c:36:41:66:48:e5:71:ea:30:d4:c5: 1b:e7:63:15:4b:86:a0:3d:f9:e0:f2:55:80:13:e2:4e:93:36: b2:4b:8c:e1:1c:0e:54:14:91:f5:1d:b2:24:85:90:ad:e8:79: d1:7b:15:5b:f9:4a:45:22:05:78:cb:01:f6:d3:8e:e4:71:40: d2:31:9d:83:89:5a:d8:51:fd:82:f0:35:aa:e5:53:49:7b:25: 5b:41:2a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUwNDI1MDAyNjAxWhcNMjUwNTAyMDAyNjAxWjAYMRYwFAYD VQQDEw02ODBhZDY5YS0yNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V9GZJbiGgwyh8zEtd1LzehfgMCJ3NP81FQmGYYtdsyBIXCAstT4D58DdkWE nH7u5J+/syxpYVL5+vjBQcdzJkSZSP3icn4j8OF+ZlcGC3y1bvgodYbHA1MZPom8 jVaKt/ul4fhWcfDYlq0DvQXFfZIh0CUHhyO/ObqzmB5hMkSevhKr7LJDswDjaonL w9J1f3fv5rYq7JI/JvD8fOS2eXv5dWOM/UVskl/XFhRt3fCBg28PxtQ9U9C1LW9G 6C9SXHJ6ElKZy8orhqDnHTdFFwBU7uSHQ1tryvZXXsizTKnbUwWBMD2Sztrn1dZT 6kO4NhjaPaptUmbg9ISsas//0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsxuusE MtCNIJ2pozIjxumEfMRiMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQc9PrrZET3OR+r7K+DWWqwM4XiMq+yZH3VeykDCpH0veBeakMwluB daekcswUA6ZRoMDlZy3/amkEFSJ03NUty6gZ7s09ZTwoZF6NrDuqAJ225zzETv6s Z3fl9tmTQYrhiWtJSchR+FCUl5RdTh5GndROEq6E3c58aHIqGCxZnE7ClI9/heEj b1w4nS+d/MvUt25T05IDMUYpvy6yjPS9W/oQEvuilMBZfDZBZkjlceow1MUb52MV S4agPfng8lWAE+JOkzayS4zhHA5UFJH1HbIkhZCt6HnRexVb+UpFIgV4ywH2047k cUDSMZ2DiVrYUf2C8DWq5VNJeyVbQSqp -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:05 2025 by rpki-client