$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: arDgZmX6SMqlXPM9x2eY9D0Ws1WG5/ZtJ2oj/4xJZzo= Subject key identifier: EF:02:D7:85:35:70:3F:1A:82:4A:BD:5D:52:13:B4:AE:D2:8C:02:ED Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 026B Signing time: Fri 25 Apr 2025 01:31:22 +0000 Manifest this update: Fri 25 Apr 2025 01:31:21 +0000 Manifest next update: Fri 02 May 2025 01:31:21 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: fmzGfnj5n49D5gv+RXvJpxoI1JYrHwlQduD/fcvZzO4=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: zleKsAQ/UII/VAR0ip3wb38fmNdnLl5jIKA7jKftYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: Apr 25 01:31:21 2025 GMT Not After : May 2 01:31:21 2025 GMT Subject: CN=680ae5ea-ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:02:40:bf:fe:9b:b7:04:9a:e7:88:89:1c: 3e:fd:1c:13:99:85:8b:67:b7:93:a0:75:17:fe:1e: a7:51:52:f8:52:77:4d:e1:d6:fc:8c:54:13:5e:d0: 1f:29:08:52:60:9b:10:46:37:c0:02:ac:2b:55:22: 40:84:5a:a6:5d:bc:43:dc:99:d8:ee:10:b4:e3:2e: e3:59:30:2c:2a:4a:63:75:d4:b9:51:97:01:44:19: 9a:49:58:f6:f5:7c:c3:d3:5b:82:0c:c6:29:7c:b0: eb:fc:1d:8d:c3:aa:7b:17:79:0d:15:6f:20:bb:a8: 54:a7:54:82:89:99:11:06:e0:79:94:93:5a:28:d0: 14:b9:e7:6f:71:b3:91:bb:f3:55:ae:9e:77:03:89: 18:91:bd:ca:c6:53:eb:b2:36:2f:86:8f:d1:c3:6e: cd:42:dc:7f:74:89:cc:e4:01:ec:aa:93:31:6d:51: 95:ae:64:75:92:29:d0:75:51:25:69:2d:6a:0a:13: d3:d4:36:7f:f0:20:31:77:f7:55:1f:38:82:19:f8: f6:c0:2c:16:9f:f9:20:ea:d7:3e:59:78:bc:23:00: 17:7d:ef:04:45:28:24:58:36:ec:7f:ec:32:85:5d: ea:fc:bf:75:c3:84:80:ba:fd:64:c2:45:6b:0c:d1: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:02:D7:85:35:70:3F:1A:82:4A:BD:5D:52:13:B4:AE:D2:8C:02:ED X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:b1:0c:da:7c:91:ca:a4:00:89:8b:c2:e0:49:91:f1:d2: 55:0e:0d:4c:8b:3c:99:71:68:ce:eb:e4:af:d5:cb:ef:15:35: 1f:6b:dc:23:4f:6b:87:5f:f8:f2:12:9c:48:bc:b8:2e:63:5f: 0a:9c:8e:52:ba:62:1d:45:16:fa:bb:24:b6:89:1b:15:cd:10: 58:1f:2a:38:c4:9a:42:08:7a:d3:bf:20:20:80:d6:ec:5a:ed: f2:01:af:1a:72:c0:8f:bd:85:dc:ee:da:d1:d3:5e:39:1d:7c: b4:c1:35:b9:65:9b:4d:5e:b0:38:e3:e9:a5:9f:be:e1:54:7c: 1f:35:9b:bd:fe:a3:a6:b3:44:c7:80:ee:b8:5c:50:74:5a:84: 56:23:d2:0a:f9:b6:a8:a5:57:c1:32:2a:65:89:f1:1d:56:44: 65:23:0f:f1:31:bb:ce:ea:4e:35:45:05:74:aa:91:8e:3c:1c: 0e:eb:29:54:eb:48:63:a5:b9:e8:07:8a:43:71:f3:30:70:ad: 0c:ad:9a:13:99:6d:cc:10:2e:b1:90:88:fb:84:52:1a:19:be: 53:46:93:89:00:57:e0:72:95:3e:3b:fa:d8:d9:56:f7:66:e0: 38:6b:e3:0b:0c:79:73:24:0e:96:5a:52:49:6c:53:9f:ee:ac: 2b:b5:81:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUwNDI1MDEzMTIxWhcNMjUwNTAyMDEzMTIxWjAYMRYwFAYD VQQDEw02ODBhZTVlYS1hZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufgCQL/+m7cEmueIiRw+/RwTmYWLZ7eToHUX/h6nUVL4UndN4db8jFQTXtAf KQhSYJsQRjfAAqwrVSJAhFqmXbxD3JnY7hC04y7jWTAsKkpjddS5UZcBRBmaSVj2 9XzD01uCDMYpfLDr/B2Nw6p7F3kNFW8gu6hUp1SCiZkRBuB5lJNaKNAUuedvcbOR u/NVrp53A4kYkb3KxlPrsjYvho/Rw27NQtx/dInM5AHsqpMxbVGVrmR1kinQdVEl aS1qChPT1DZ/8CAxd/dVHziCGfj2wCwWn/kg6tc+WXi8IwAXfe8ERSgkWDbsf+wy hV3q/L91w4SAuv1kwkVrDNEUhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8C14U1 cD8agkq9XVITtK7SjALtMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbILEM2nyRyqQAiYvC4EmR8dJVDg1MizyZcWjO6+Sv1cvvFTUfa9wj T2uHX/jyEpxIvLguY18KnI5SumIdRRb6uyS2iRsVzRBYHyo4xJpCCHrTvyAggNbs Wu3yAa8acsCPvYXc7trR0145HXy0wTW5ZZtNXrA44+mln77hVHwfNZu9/qOms0TH gO64XFB0WoRWI9IK+baopVfBMiplifEdVkRlIw/xMbvO6k41RQV0qpGOPBwO6ylU 60hjpbnoB4pDcfMwcK0MrZoTmW3MEC6xkIj7hFIaGb5TRpOJAFfgcpU+O/rY2Vb3 ZuA4a+MLDHlzJA6WWlJJbFOf7qwrtYFm -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:29 2025 by rpki-client