$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: LwcRKHQ2IYPLYYPf7lUo0cJTKXAlGFT7JX7S7XDeHi4= Subject key identifier: BF:56:71:8A:02:CD:26:E9:10:8A:04:2E:1F:E5:46:12:44:74:E8:20 Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 07BB Signing time: Thu 24 Apr 2025 20:58:05 +0000 Manifest this update: Thu 24 Apr 2025 20:58:05 +0000 Manifest next update: Thu 01 May 2025 20:58:05 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: hZcma2aAD5GfvE0bhyPn7/8qPoXKHgr454aO3xClni8=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: Apr 24 20:58:05 2025 GMT Not After : May 1 20:58:05 2025 GMT Subject: CN=680aa5dd-f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:41:8f:4e:7f:88:b0:e6:32:3a:b9:d1:e5: 58:22:c0:bf:86:07:ae:56:c9:ad:4b:ea:98:74:d1: 79:4c:e6:74:37:f4:2e:46:a5:7d:56:c9:95:91:29: c4:8e:a3:06:d9:0f:7b:76:63:38:77:47:71:64:63: 9d:29:4c:1f:cd:0b:f7:bf:c7:87:85:d8:6d:55:69: 28:22:1c:7f:24:1f:a6:f1:aa:56:e5:48:b3:06:0e: 3f:6a:03:3b:46:35:13:7e:38:f7:d5:8c:54:aa:85: 89:66:15:68:81:5c:17:14:f3:4e:ab:10:12:e2:6b: 28:3d:39:d4:d6:a1:51:99:0a:94:fa:ee:d3:4f:e3: 09:38:86:dc:ec:e3:d2:6d:4d:06:d1:eb:a7:ab:7a: b6:57:47:1e:c9:93:14:53:b6:6d:89:0e:47:d7:57: 8d:43:45:27:78:a8:ca:c0:c0:e7:bd:4a:83:12:b6: 00:29:78:dc:b3:07:46:98:40:10:2d:74:e7:4e:a9: 5e:82:b5:a0:01:f7:4c:3d:7a:48:25:83:cd:7e:f2: f1:1a:e2:a7:13:66:22:de:01:16:60:bd:0e:d5:c6: 80:6c:20:7d:0e:82:5e:80:b7:b1:c3:bb:a4:9f:ab: e9:43:11:a1:19:19:50:0f:60:09:35:cb:7a:39:58: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:71:8A:02:CD:26:E9:10:8A:04:2E:1F:E5:46:12:44:74:E8:20 X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1d:5c:7f:30:d7:45:93:ec:d6:95:b6:92:f4:5f:6b:df:63: 34:d4:4c:7b:86:9f:9c:08:08:4e:00:5b:4a:a6:b8:fe:87:5f: 2e:00:a3:0a:51:ce:4c:a1:66:83:d9:2f:c3:03:a0:9f:df:0b: 81:e7:9d:b7:69:8e:ed:f5:d1:f2:09:0c:bf:2a:3d:5a:61:2c: 8a:fb:04:4c:a4:4d:9b:cc:d6:80:be:cc:10:4b:68:6c:ae:66: 21:26:b3:5e:18:ee:18:bc:56:55:5e:ff:89:87:ff:c4:ca:63: f5:9c:3c:ec:8b:7e:ff:32:c5:51:eb:55:e5:b6:6d:ff:5f:22: 2b:4a:e6:0c:d2:6c:c8:32:9f:1f:72:0d:ad:72:8e:29:89:a5: 93:a9:f5:99:47:6c:60:42:07:1a:58:ae:b3:37:7f:d7:75:26: e0:7f:f5:80:ee:0c:39:13:d9:cb:5c:7a:3e:6f:12:ea:55:ff: 3c:90:31:c1:f5:8c:f2:eb:7f:82:0a:64:37:9f:7f:c8:7a:71: 4c:1e:27:93:03:8f:1f:5f:8a:d7:74:58:78:3e:fb:43:7f:c4: 17:46:03:03:cf:2c:d2:08:fa:e7:42:bc:f3:6f:ed:ee:74:f6: 83:ba:57:32:61:4e:89:3d:5d:e5:b5:96:47:6e:9b:9e:dc:df: 84:3c:4d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjUwNDI0MjA1ODA1WhcNMjUwNTAxMjA1ODA1WjAYMRYwFAYD VQQDEw02ODBhYTVkZC1mMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0slBj05/iLDmMjq50eVYIsC/hgeuVsmtS+qYdNF5TOZ0N/QuRqV9VsmVkSnE jqMG2Q97dmM4d0dxZGOdKUwfzQv3v8eHhdhtVWkoIhx/JB+m8apW5UizBg4/agM7 RjUTfjj31YxUqoWJZhVogVwXFPNOqxAS4msoPTnU1qFRmQqU+u7TT+MJOIbc7OPS bU0G0eunq3q2V0ceyZMUU7ZtiQ5H11eNQ0UneKjKwMDnvUqDErYAKXjcswdGmEAQ LXTnTqlegrWgAfdMPXpIJYPNfvLxGuKnE2Yi3gEWYL0O1caAbCB9DoJegLexw7uk n6vpQxGhGRlQD2AJNct6OViD7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9WcYoC zSbpEIoELh/lRhJEdOggMB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHVx/MNdFk+zWlbaS9F9r32M01Ex7hp+cCAhOAFtKprj+h18uAKMK Uc5MoWaD2S/DA6Cf3wuB5523aY7t9dHyCQy/Kj1aYSyK+wRMpE2bzNaAvswQS2hs rmYhJrNeGO4YvFZVXv+Jh//EymP1nDzsi37/MsVR61Xltm3/XyIrSuYM0mzIMp8f cg2tco4piaWTqfWZR2xgQgcaWK6zN3/XdSbgf/WA7gw5E9nLXHo+bxLqVf88kDHB 9Yzy63+CCmQ3n3/IenFMHieTA48fX4rXdFh4PvtDf8QXRgMDzyzSCPrnQrzzb+3u dPaDulcyYU6JPV3ltZZHbpue3N+EPE1R -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:16 2025 by rpki-client