$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: 5mEkw2XmVmmkQLJTsz23RBoZ/glBVzqKwaO/7fyZPR0= Subject key identifier: A1:04:0A:71:0C:40:04:2B:1D:9A:02:1B:80:C0:2C:09:7C:83:A4:CA Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0C86 Signing time: Thu 24 Apr 2025 18:13:18 +0000 Manifest this update: Thu 24 Apr 2025 18:13:17 +0000 Manifest next update: Thu 01 May 2025 18:13:17 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: pVrwr+E/fNAeVJKeu0UuxExcJnRbKWeSJzgor6c3l2U=) 2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw=) 3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Apr 24 18:13:17 2025 GMT Not After : May 1 18:13:17 2025 GMT Subject: CN=680a7f3d-f152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3b:a9:86:8a:6c:68:16:4d:24:66:45:f6:fa: 9e:3f:e7:cc:b7:b4:16:27:30:3b:fd:54:63:a1:18: bb:32:f1:f1:bf:f7:d9:45:d5:23:56:21:35:e2:2e: 04:ad:4e:4a:4d:30:0c:a6:95:8f:72:93:ac:94:46: 42:dc:9b:37:4c:c1:d3:0c:fe:27:71:a2:46:aa:17: 28:6d:35:e0:5e:37:76:15:98:80:9e:b5:af:6d:c9: 57:d7:18:c1:0e:0c:49:54:c5:66:e7:a3:aa:e3:69: 36:f8:73:72:13:f6:5b:bc:16:e6:c3:81:67:c2:13: 36:ac:ef:b6:37:e3:17:53:50:91:1d:43:65:8a:89: f7:1e:14:20:63:f0:75:dd:0e:11:b0:b7:75:a6:58: b9:86:c9:08:dc:d9:4a:19:9c:46:fd:e8:b9:e5:67: 4a:54:9c:43:4a:b7:43:00:48:3b:c8:5a:2b:06:d4: 27:74:ee:10:db:47:32:7f:41:ae:f1:47:0c:ad:f3: c7:3a:b5:38:53:b8:c1:fe:90:74:a1:ee:00:03:3f: 12:6f:f6:11:29:d2:2a:50:1c:24:1d:c0:30:85:9b: c1:cb:4e:f9:7c:c0:4f:68:de:1e:9a:71:ae:0e:e8: 7b:e0:c7:6f:4c:c0:da:8f:79:e1:b2:8a:5f:58:e1: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:0A:71:0C:40:04:2B:1D:9A:02:1B:80:C0:2C:09:7C:83:A4:CA X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:45:39:19:85:22:47:ad:f2:9d:fe:e9:2c:cd:5f:cb:34:67: f4:d3:3f:86:cc:b0:6b:de:49:23:5e:e7:37:b8:1f:d5:37:84: a3:68:07:b2:f5:d3:b2:78:c2:e5:5a:59:c1:a6:8e:6a:23:49: 52:48:06:e3:a9:ba:1f:71:0a:e8:57:18:a6:2b:db:dd:f6:b2: 9c:96:7f:30:3a:f5:23:09:6a:cc:82:05:92:43:45:b1:51:1e: 2b:ab:41:27:9a:64:93:0e:33:0b:bf:f1:25:14:54:18:02:3f: 9f:ff:91:05:9c:03:8a:a0:8b:3d:ff:33:23:ed:d5:e0:5c:dd: 54:db:4a:dc:aa:13:d6:0a:f4:59:be:9d:78:82:91:8a:30:f4: ce:d5:fd:ce:71:c9:f2:43:c1:7a:84:6a:9b:79:e5:67:2d:ab: 39:95:8f:23:17:e7:e1:01:68:c7:6e:66:4c:f7:e4:ad:49:b0: 03:b4:1b:62:fe:fe:d7:38:a6:59:96:7c:84:f9:02:06:65:bd: d1:c9:0c:b0:0e:7e:58:81:48:b9:98:e1:ce:a4:4a:bc:19:20: d5:96:70:ae:4d:49:a9:8c:23:08:e3:b8:2f:08:aa:e9:a1:02: f8:a8:6c:0a:b6:e6:19:f7:ca:61:e6:a1:eb:3d:81:b7:48:b7: 81:16:27:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwNDI0MTgxMzE3WhcNMjUwNTAxMTgxMzE3WjAYMRYwFAYD VQQDEw02ODBhN2YzZC1mMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTuphopsaBZNJGZF9vqeP+fMt7QWJzA7/VRjoRi7MvHxv/fZRdUjViE14i4E rU5KTTAMppWPcpOslEZC3Js3TMHTDP4ncaJGqhcobTXgXjd2FZiAnrWvbclX1xjB DgxJVMVm56Oq42k2+HNyE/ZbvBbmw4FnwhM2rO+2N+MXU1CRHUNlion3HhQgY/B1 3Q4RsLd1pli5hskI3NlKGZxG/ei55WdKVJxDSrdDAEg7yForBtQndO4Q20cyf0Gu 8UcMrfPHOrU4U7jB/pB0oe4AAz8Sb/YRKdIqUBwkHcAwhZvBy075fMBPaN4emnGu Duh74MdvTMDaj3nhsopfWOHuiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEECnEM QAQrHZoCG4DALAl8g6TKMB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5RTkZhSJHrfKd/ukszV/LNGf00z+GzLBr3kkjXuc3uB/VN4SjaAey 9dOyeMLlWlnBpo5qI0lSSAbjqbofcQroVximK9vd9rKcln8wOvUjCWrMggWSQ0Wx UR4rq0EnmmSTDjMLv/ElFFQYAj+f/5EFnAOKoIs9/zMj7dXgXN1U20rcqhPWCvRZ vp14gpGKMPTO1f3OccnyQ8F6hGqbeeVnLas5lY8jF+fhAWjHbmZM9+StSbADtBti /v7XOKZZlnyE+QIGZb3RyQywDn5YgUi5mOHOpEq8GSDVlnCuTUmpjCMI47gvCKrp oQL4qGwKtuYZ98ph5qHrPYG3SLeBFid5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:55 2025 by rpki-client