$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: gm/96BVQTPO5ZN8rrgq7VqpXdOIbMCqEhWMRUL4eKWk= Subject key identifier: 65:64:CC:86:8C:C6:6E:E5:2D:1C:5D:BA:3B:4B:A7:32:18:3B:1E:57 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 07CB Signing time: Thu 24 Apr 2025 20:53:11 +0000 Manifest this update: Thu 24 Apr 2025 20:53:10 +0000 Manifest next update: Thu 01 May 2025 20:53:10 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: l6PmgjxJuprCQNpp2jeuObkfS1xU0ocQ7p1MeOIjN9w=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Apr 24 20:53:10 2025 GMT Not After : May 1 20:53:10 2025 GMT Subject: CN=680aa4b6-a384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:42:76:89:a7:7f:c2:8d:c3:a8:f3:de:30: 28:fa:39:99:92:ae:ab:90:fc:47:ca:58:d8:e7:c4: 5f:6c:d5:06:15:64:07:1b:bc:3c:3d:02:66:48:c5: 5a:98:b8:e2:b1:9b:87:d6:3a:37:4b:9a:cb:2e:ef: 14:6c:98:19:5f:a8:e1:5a:71:8e:8a:ec:e4:39:b7: 7b:42:83:48:57:e8:ca:30:7d:e2:34:c9:64:53:34: 97:3c:1b:f0:dc:8f:b1:78:17:a1:af:77:39:d9:60: 9f:1c:d3:29:83:31:c4:b3:dd:79:d9:1e:bb:04:ee: b9:82:01:d9:19:01:a1:7b:e3:53:45:7f:13:d3:de: 0e:b7:88:82:f5:24:f4:61:7a:8b:eb:6e:73:19:50: 33:77:5d:f5:87:fe:f0:d3:bc:1f:b3:2d:c0:f0:7c: 8d:d3:ab:d5:0f:0d:8b:29:a5:3a:db:f2:5e:5a:9e: dc:00:86:1d:23:70:92:52:a8:54:0f:ab:6b:7c:f3: 66:25:72:88:00:b1:45:67:42:4a:fb:e8:b8:0c:2d: 91:dc:42:e4:f5:ab:34:a8:e9:cd:23:ed:b6:53:7a: db:ad:c3:3f:b5:d7:f0:53:80:8d:3e:d1:9f:ab:48: 0b:00:2f:50:ad:86:6a:6a:43:46:b6:6f:d5:d2:f4: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:64:CC:86:8C:C6:6E:E5:2D:1C:5D:BA:3B:4B:A7:32:18:3B:1E:57 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:5b:9d:59:f4:e9:1c:1d:28:4d:58:02:e4:09:b3:8c:f8:38: 84:03:95:d4:7a:b9:8c:81:ab:12:03:2d:9a:20:ac:56:b5:9a: 60:b6:ee:24:a5:fa:10:d7:4c:30:51:71:67:03:51:00:75:43: 1c:dd:23:a2:a2:4c:8c:d2:4c:b9:d0:d6:40:a4:59:5f:16:7a: b7:6e:84:05:36:90:4f:44:34:55:cc:0a:15:0d:aa:08:40:f9: 4e:72:7c:c6:f4:b6:c8:f0:31:2d:a9:12:d0:6d:37:c1:ac:ad: 56:e7:79:e6:6d:52:84:09:dd:04:32:4d:5a:34:3e:a2:f6:f7: 25:f6:52:57:3e:fa:b4:cb:4c:bd:97:b0:ce:7a:19:f3:18:8c: eb:e8:67:f7:02:5f:6a:dd:55:69:3e:29:fa:5d:0e:b0:78:77: 00:51:10:d4:20:09:5d:a2:3b:89:a2:ae:10:1f:82:ff:c8:9d: 43:8e:ce:0d:14:fd:1e:54:9c:fd:ae:e7:39:27:ed:3d:e1:32: 71:e5:2d:4e:ae:93:f8:55:07:79:7e:1e:1d:09:2f:d4:73:a2: 9c:24:79:37:37:f2:6e:1d:8e:b3:31:f3:20:fe:83:a9:b3:e7: 90:05:8c:f5:a4:df:57:f5:02:4b:16:5b:2a:38:6e:f5:6f:5e: 61:61:d2:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUwNDI0MjA1MzEwWhcNMjUwNTAxMjA1MzEwWjAYMRYwFAYD VQQDEw02ODBhYTRiNi1hMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnddCdomnf8KNw6jz3jAo+jmZkq6rkPxHyljY58RfbNUGFWQHG7w8PQJmSMVa mLjisZuH1jo3S5rLLu8UbJgZX6jhWnGOiuzkObd7QoNIV+jKMH3iNMlkUzSXPBvw 3I+xeBehr3c52WCfHNMpgzHEs9152R67BO65ggHZGQGhe+NTRX8T094Ot4iC9ST0 YXqL625zGVAzd131h/7w07wfsy3A8HyN06vVDw2LKaU62/JeWp7cAIYdI3CSUqhU D6trfPNmJXKIALFFZ0JK++i4DC2R3ELk9as0qOnNI+22U3rbrcM/tdfwU4CNPtGf q0gLAC9QrYZqakNGtm/V0vTWmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVkzIaM xm7lLRxdujtLpzIYOx5XMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxW51Z9OkcHShNWALkCbOM+DiEA5XUermMgasSAy2aIKxWtZpgtu4k pfoQ10wwUXFnA1EAdUMc3SOiokyM0ky50NZApFlfFnq3boQFNpBPRDRVzAoVDaoI QPlOcnzG9LbI8DEtqRLQbTfBrK1W53nmbVKECd0EMk1aND6i9vcl9lJXPvq0y0y9 l7DOehnzGIzr6Gf3Al9q3VVpPin6XQ6weHcAURDUIAldojuJoq4QH4L/yJ1Djs4N FP0eVJz9ruc5J+094TJx5S1OrpP4VQd5fh4dCS/Uc6KcJHk3N/JuHY6zMfMg/oOp s+eQBYz1pN9X9QJLFlsqOG71b15hYdLt -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:44 2025 by rpki-client