$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: n8jcK1+3ZVfuPRRm873eu9Lf2ckMgr32XmHSyDHbNLs= Subject key identifier: 43:58:50:BF:02:BA:91:EA:CA:00:84:F0:CA:5D:AE:4F:D8:53:43:A7 Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 037E Signing time: Fri 25 Apr 2025 00:38:50 +0000 Manifest this update: Fri 25 Apr 2025 00:38:49 +0000 Manifest next update: Fri 02 May 2025 00:38:49 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: 0ZUzlf8xmhMFZ9P6XF0jUTn+Yw4NadSb0OQqKAYZ6fs=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: Apr 25 00:38:49 2025 GMT Not After : May 2 00:38:49 2025 GMT Subject: CN=680ad999-2ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:72:ba:41:5c:fa:1f:0a:e3:2d:2f:42:50: 67:22:ac:44:c4:4c:0f:18:31:43:be:3d:d1:1f:ed: 5c:db:d4:dc:23:d6:5d:fe:d8:5d:ba:6a:9a:cb:db: 1a:ea:a4:db:d8:53:4c:c5:59:32:aa:54:6d:2b:bf: 4d:50:22:e5:41:d7:27:b0:1c:6d:46:49:de:1b:a6: c7:ad:b3:ef:49:4a:51:dc:79:68:1b:8c:d2:50:1b: 40:84:5c:a3:60:d6:02:e0:28:c3:c7:5d:d0:4d:df: 76:52:8d:ee:9d:b6:05:0a:80:18:d7:18:3e:19:61: d1:7d:f8:58:e8:1e:b1:8a:1a:2e:e5:6f:9e:55:5a: 02:e0:72:2d:29:65:e9:81:c2:8f:16:64:c4:27:43: 30:f2:4a:60:fe:35:f3:57:2a:a5:d3:1a:26:69:c9: 58:61:32:af:af:5e:7d:95:4e:da:67:32:53:ca:ab: 63:44:2d:20:8a:03:ea:c2:fc:e3:bf:e7:3e:a2:c4: 7a:19:eb:8c:30:55:3f:d2:f6:96:04:59:4c:04:b6: 22:b7:47:ef:fa:b2:b3:36:b6:02:51:db:44:d4:ff: 5e:3c:16:91:90:77:38:92:90:b8:b2:aa:6d:19:96: e7:6c:41:1e:4b:93:08:b1:72:5a:10:ae:72:af:39: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:50:BF:02:BA:91:EA:CA:00:84:F0:CA:5D:AE:4F:D8:53:43:A7 X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e0:5d:85:09:f6:57:8e:7f:77:dd:9a:38:a3:ef:82:51:72: 49:86:af:52:1f:1c:a8:2b:dc:c8:7a:98:41:62:68:15:94:fa: 1d:b0:57:ea:e3:8b:67:e3:0c:57:e4:33:3b:f0:38:40:5f:48: 45:d2:13:46:ae:2e:81:ec:de:60:4f:5c:d1:2e:64:86:13:e4: 1f:9f:cc:8f:ed:0c:12:40:ff:5c:8c:79:ab:6c:94:a7:2d:87: f6:80:39:b8:5f:44:cc:42:6d:9e:9d:82:55:d5:69:9a:7a:9b: ad:3d:d6:c0:1e:aa:71:31:cc:c9:19:26:7e:0b:91:90:01:bc: 56:ba:bf:be:f0:8b:d0:d6:73:6f:01:c2:36:04:7b:c4:34:d5: d4:c6:03:2f:00:32:07:f9:62:c8:14:e3:4a:fc:ed:7d:8d:ae: 17:0a:a9:79:7d:ea:91:ef:b8:b6:a4:5a:99:68:1e:c1:84:ef: ee:b6:a1:67:46:93:18:7e:49:b9:4c:bd:da:35:11:11:5b:a4: 22:ab:25:a4:65:47:77:8d:bb:2d:f9:55:fd:18:58:27:96:c8: 72:88:e4:84:06:59:6c:50:ce:0d:8d:17:10:ea:a5:ad:56:57: e7:09:26:0d:fa:d8:f3:a5:e4:56:b3:57:88:a2:fe:0e:bc:c6: c5:0a:b3:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUwNDI1MDAzODQ5WhcNMjUwNTAyMDAzODQ5WjAYMRYwFAYD VQQDEw02ODBhZDk5OS0yZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxpyukFc+h8K4y0vQlBnIqxExEwPGDFDvj3RH+1c29TcI9Zd/thdumqay9sa 6qTb2FNMxVkyqlRtK79NUCLlQdcnsBxtRkneG6bHrbPvSUpR3HloG4zSUBtAhFyj YNYC4CjDx13QTd92Uo3unbYFCoAY1xg+GWHRffhY6B6xihou5W+eVVoC4HItKWXp gcKPFmTEJ0Mw8kpg/jXzVyql0xomaclYYTKvr159lU7aZzJTyqtjRC0gigPqwvzj v+c+osR6GeuMMFU/0vaWBFlMBLYit0fv+rKzNrYCUdtE1P9ePBaRkHc4kpC4sqpt GZbnbEEeS5MIsXJaEK5yrzmRTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENYUL8C upHqygCE8Mpdrk/YU0OnMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq4F2FCfZXjn933Zo4o++CUXJJhq9SHxyoK9zIephBYmgVlPodsFfq 44tn4wxX5DM78DhAX0hF0hNGri6B7N5gT1zRLmSGE+Qfn8yP7QwSQP9cjHmrbJSn LYf2gDm4X0TMQm2enYJV1WmaeputPdbAHqpxMczJGSZ+C5GQAbxWur++8IvQ1nNv AcI2BHvENNXUxgMvADIH+WLIFONK/O19ja4XCql5feqR77i2pFqZaB7BhO/utqFn RpMYfkm5TL3aNRERW6QiqyWkZUd3jbst+VX9GFgnlshyiOSEBllsUM4NjRcQ6qWt VlfnCSYN+tjzpeRWs1eIov4OvMbFCrOr -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:33 2025 by rpki-client