$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: cRe4giEILKqvQ/krQ4C9Zu4Kf3fpSv+aRtoCqQCNvD0= Subject key identifier: 92:5C:4B:A7:E4:EF:25:1F:E6:77:B7:52:B0:51:8E:82:F6:18:D4:72 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 03D4 Signing time: Fri 25 Apr 2025 00:30:18 +0000 Manifest this update: Fri 25 Apr 2025 00:30:18 +0000 Manifest next update: Fri 02 May 2025 00:30:18 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: dicufmLp0EDDafioAAl6OC3Zc0oT+yEcAnKJ7PcM6UY=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=) 3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=) 4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: BsDD8bUIIPX7p5KbsJAH9VftSdApmxx21yYEW9Dwpy4=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Apr 25 00:30:18 2025 GMT Not After : May 2 00:30:18 2025 GMT Subject: CN=680ad79a-7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:b6:22:ba:a7:86:61:99:88:e0:75:37:2d: f6:6a:e1:de:37:98:1a:df:e1:dd:ec:b7:f0:fc:2d: 65:79:f0:3a:82:93:20:2c:f2:4a:2c:1f:d8:49:3d: 67:b2:cd:b7:9e:6e:64:28:aa:ce:f6:5f:d3:a5:b3: 97:c0:a4:09:79:54:a7:0c:3b:37:2e:34:34:68:a4: e5:6a:b2:ab:cc:fd:b2:17:32:99:6c:b0:cb:ba:9c: 99:8a:c5:ee:35:09:a8:a9:68:39:16:c0:fa:f3:44: 69:bd:f9:81:46:d5:97:5d:79:e1:1b:ef:a5:d1:1b: 8d:a3:ab:f6:d3:a7:81:44:58:a5:58:56:66:48:71: 40:6f:fe:e4:ac:a0:2e:3a:aa:67:98:65:31:33:e6: 14:d3:ca:06:0e:0c:05:66:2d:cd:27:9e:e4:28:44: 64:84:57:58:6f:4c:18:d4:5c:ac:d0:3b:63:14:f5: 73:29:b2:c3:10:5f:25:51:cc:34:97:56:7e:4f:6a: 74:6e:40:dc:d4:98:d9:d8:55:fb:c6:75:db:59:df: 1b:4b:e3:fa:fd:fb:f4:1a:c8:81:e8:09:6e:2a:dd: 7d:0b:ae:1f:3a:3e:ff:c0:67:4c:ce:9f:7f:1f:c0: 85:3f:b1:6a:b4:d7:05:47:a3:75:3d:71:04:47:8e: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:4B:A7:E4:EF:25:1F:E6:77:B7:52:B0:51:8E:82:F6:18:D4:72 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c9:8e:24:11:8e:c1:24:bb:64:f1:4c:e9:dc:63:39:48:8a: 61:5b:b3:bf:d8:f7:f9:76:8d:38:bb:1a:0d:30:98:e4:fc:0c: d7:46:6c:7b:25:47:99:c1:35:d4:4c:1d:90:d9:86:bc:ec:6a: 47:4f:6f:30:9b:58:32:78:b0:af:aa:6b:d6:5b:20:18:69:2b: ef:aa:9b:d1:24:6c:7b:eb:26:0a:89:2d:72:c1:26:52:53:de: ee:bb:6b:b1:e8:64:29:04:a4:ee:a3:8f:d8:91:9d:2f:11:47: b0:29:ca:f9:bf:15:06:7b:68:bf:ad:72:18:b7:67:19:15:1a: 21:83:64:e4:71:bf:42:dd:6a:48:3e:4f:f8:3b:98:69:72:52: 24:b0:2f:55:64:1e:3b:2e:7d:63:0a:a1:01:00:fa:4d:c1:cf: 74:e9:b2:f8:9d:cf:d3:90:e4:e0:8e:2b:a7:27:a2:95:ed:0d: d2:2e:8a:7a:3f:f3:2f:8a:cc:45:32:0e:f9:f5:84:73:a0:d4: a5:8a:9f:25:e6:d0:c3:af:e7:73:02:72:92:6d:be:9d:db:89: 16:cb:b8:40:62:40:55:10:f1:ab:64:8e:ae:b3:d5:ba:c6:09: f8:ef:c7:d2:92:42:5d:dd:a9:7f:c3:dc:98:a6:17:2e:c5:b5: 60:42:e5:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUwNDI1MDAzMDE4WhcNMjUwNTAyMDAzMDE4WjAYMRYwFAYD VQQDEw02ODBhZDc5YS03MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dq2IrqnhmGZiOB1Ny32auHeN5ga3+Hd7Lfw/C1lefA6gpMgLPJKLB/YST1n ss23nm5kKKrO9l/TpbOXwKQJeVSnDDs3LjQ0aKTlarKrzP2yFzKZbLDLupyZisXu NQmoqWg5FsD680RpvfmBRtWXXXnhG++l0RuNo6v206eBRFilWFZmSHFAb/7krKAu OqpnmGUxM+YU08oGDgwFZi3NJ57kKERkhFdYb0wY1Fys0DtjFPVzKbLDEF8lUcw0 l1Z+T2p0bkDc1JjZ2FX7xnXbWd8bS+P6/fv0GsiB6AluKt19C64fOj7/wGdMzp9/ H8CFP7FqtNcFR6N1PXEER47MPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJcS6fk 7yUf5ne3UrBRjoL2GNRyMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQyY4kEY7BJLtk8Uzp3GM5SIphW7O/2Pf5do04uxoNMJjk/AzXRmx7 JUeZwTXUTB2Q2Ya87GpHT28wm1gyeLCvqmvWWyAYaSvvqpvRJGx76yYKiS1ywSZS U97uu2ux6GQpBKTuo4/YkZ0vEUewKcr5vxUGe2i/rXIYt2cZFRohg2Tkcb9C3WpI Pk/4O5hpclIksC9VZB47Ln1jCqEBAPpNwc906bL4nc/TkOTgjiunJ6KV7Q3SLop6 P/MvisxFMg759YRzoNSlip8l5tDDr+dzAnKSbb6d24kWy7hAYkBVEPGrZI6us9W6 xgn478fSkkJd3al/w9yYphcuxbVgQuUO -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:55 2025 by rpki-client