$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json) Hash identifier: Ct+I2NojOoiYcyTrYYhOOAOaX01uye8zKYxUIBNtoYE= Subject key identifier: 9A:E9:A9:11:AC:92:DE:D1:24:DF:F6:3D:10:C9:11:14:92:CB:11:40 Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft Manifest number: 4B Signing time: Fri 25 Apr 2025 06:22:43 +0000 Manifest this update: Fri 25 Apr 2025 06:22:42 +0000 Manifest next update: Fri 02 May 2025 06:22:42 +0000 Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: ecyVsv25BC1PZDLHjgq/ezfu2VPNtkCgYYG0L5yY7dg=) 2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Validity Not Before: Apr 25 06:22:42 2025 GMT Not After : May 2 06:22:42 2025 GMT Subject: CN=680b2a32-3137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:3d:11:39:c0:cf:83:db:0a:80:8e:25:d5: 80:3a:03:3c:09:cc:17:7d:5b:13:cd:ba:2b:c1:46: 2c:ad:a0:cc:3d:8a:3a:c8:68:8c:bb:a0:f0:58:e6: b9:ee:fa:c8:0c:19:bd:9b:29:f2:45:18:ff:55:89: ec:76:92:16:ee:d2:d9:9d:7d:81:54:84:60:d1:4e: 89:81:61:c4:ba:2e:e4:62:53:80:5b:44:6e:df:19: df:e8:57:a8:d6:55:9c:94:6f:9f:48:d6:67:4e:93: 6d:e1:ce:4b:36:d9:85:63:64:08:05:5b:49:81:dc: bd:a4:e7:43:8f:ee:cc:32:7a:e9:fd:4a:c4:59:67: 1d:b8:9a:b6:ff:e5:bd:77:f3:23:4b:2d:e0:a1:3c: 92:c4:29:7f:60:07:c3:50:b3:80:01:03:b2:13:f3: 36:5f:90:46:bc:07:7e:e4:7d:12:b6:f2:29:92:68: 71:2c:cb:2f:9f:d7:cb:22:06:6f:11:09:d7:38:b0: 78:a4:0d:ec:87:93:f9:be:79:e2:95:11:d6:98:c3: e0:61:52:87:b7:89:5b:7e:4a:b0:d4:d8:8f:54:e3: cb:f0:ef:9f:0d:a9:f4:9f:48:3a:f5:97:67:61:36: ae:52:86:59:e0:e8:e6:a8:c3:79:96:69:90:4a:04: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E9:A9:11:AC:92:DE:D1:24:DF:F6:3D:10:C9:11:14:92:CB:11:40 X509v3 Authority Key Identifier: keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0e:68:dd:53:91:51:da:12:8d:71:38:1c:23:2d:50:c9:47: 71:74:cc:57:b9:60:cd:14:8c:66:f1:f7:95:50:58:76:c7:3b: 4f:a4:23:22:2a:fd:b5:8a:9b:9c:a8:c6:39:3b:9e:10:dd:94: a2:ae:47:51:13:20:81:68:56:cf:0b:c1:ad:0a:c6:fc:4d:a0: da:28:c5:06:e6:ea:a6:67:97:54:ee:72:66:0b:29:98:7a:08: 21:cb:ab:ae:32:0d:65:66:2e:31:3e:36:04:23:24:1f:1f:62: 4c:59:9e:55:87:4e:03:8d:0d:a4:84:02:f4:d4:b3:0e:47:98: a1:0a:48:ac:b8:23:e6:b7:03:cb:58:23:d2:0c:10:92:78:96: 1b:7a:35:05:26:8c:25:7e:4c:ce:52:7a:b7:aa:3f:04:2c:fd: 06:ed:96:b3:6c:ff:05:4f:12:2b:76:b6:db:39:ea:f5:63:0a: 5a:93:ad:64:c4:a1:1a:6d:c4:8c:5b:46:4b:70:4c:a9:4c:69: df:41:4c:81:c8:7f:9b:02:e6:bb:e7:92:9d:01:8f:a8:8a:3f: 0e:8a:4c:a7:c2:d5:d3:07:17:13:a3:4d:61:f2:86:b6:0c:da: 57:19:41:fb:2c:02:49:28:90:d0:00:7c:f8:ef:db:82:22:74: b6:13:ae:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0 MzI2RDlEMzAeFw0yNTA0MjUwNjIyNDJaFw0yNTA1MDIwNjIyNDJaMBgxFjAUBgNV BAMTDTY4MGIyYTMyLTMxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2RD0ROcDPg9sKgI4l1YA6AzwJzBd9WxPNuivBRiytoMw9ijrIaIy7oPBY5rnu +sgMGb2bKfJFGP9Viex2khbu0tmdfYFUhGDRTomBYcS6LuRiU4BbRG7fGd/oV6jW VZyUb59I1mdOk23hzks22YVjZAgFW0mB3L2k50OP7swyeun9SsRZZx24mrb/5b13 8yNLLeChPJLEKX9gB8NQs4ABA7IT8zZfkEa8B37kfRK28imSaHEsyy+f18siBm8R Cdc4sHikDeyHk/m+eeKVEdaYw+BhUoe3iVt+SrDU2I9U48vw758NqfSfSDr1l2dh Nq5Shlng6Oaow3mWaZBKBKxtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmumpEayS 3tEk3/Y9EMkRFJLLEUAwHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsOaN1TkVHaEo1xOBwjLVDJR3F0zFe5YM0UjGbx95VQWHbHO0+kIyIq /bWKm5yoxjk7nhDdlKKuR1ETIIFoVs8Lwa0KxvxNoNooxQbm6qZnl1TucmYLKZh6 CCHLq64yDWVmLjE+NgQjJB8fYkxZnlWHTgONDaSEAvTUsw5HmKEKSKy4I+a3A8tY I9IMEJJ4lht6NQUmjCV+TM5SereqPwQs/QbtlrNs/wVPEit2tts56vVjClqTrWTE oRptxIxbRktwTKlMad9BTIHIf5sC5rvnkp0Bj6iKPw6KTKfC1dMHFxOjTWHyhrYM 2lcZQfssAkkokNAAfPjv24IidLYTruI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:29 2025 by rpki-client