$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: KcGKT9WyDLt8VCxrDH9m5G2m0qiuHtRsv6qj5pbi1So= Subject key identifier: 2E:4A:DB:9A:F5:D4:25:E1:23:E5:12:D0:81:58:AC:4B:A0:4D:33:4D Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: F2 Signing time: Fri 25 Apr 2025 04:17:51 +0000 Manifest this update: Fri 25 Apr 2025 04:17:50 +0000 Manifest next update: Fri 02 May 2025 04:17:50 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: p4PPso0zdlmwE9rL/ZERIftTlfE1TP8P9Ilq1qATgrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: Apr 25 04:17:50 2025 GMT Not After : May 2 04:17:50 2025 GMT Subject: CN=680b0cee-b0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:e6:3e:82:2c:5b:4d:a2:35:fc:ca:bd:ce: 4b:4c:04:eb:ae:fd:17:ae:72:6f:6a:6f:18:c8:95: 9c:d8:3f:47:45:a2:63:24:4c:75:88:13:42:d9:b3: a0:4f:90:3e:fe:a6:4f:23:c3:02:d0:eb:25:5b:fe: f7:e2:da:18:d3:2d:67:2a:f7:06:92:39:31:19:85: ff:b0:fa:7a:9d:53:5c:51:3f:84:db:68:af:7e:59: 0e:46:a1:e0:57:d6:b5:7c:5a:0e:cd:ca:49:e9:d5: 44:3e:91:ed:cb:b7:d1:18:f3:14:22:9d:04:64:f2: f6:34:bb:0f:df:0a:cf:b0:91:ef:b9:ae:15:51:da: ed:64:0e:67:67:a0:84:19:58:82:65:f4:85:ea:21: c1:a0:05:92:d8:ae:a9:84:ef:6e:df:af:4d:9a:7f: 54:74:14:3b:e0:da:5c:0a:3a:8f:73:e6:e8:66:21: fe:14:b2:2d:4a:f9:6a:47:63:06:92:99:d9:07:33: f9:6a:7e:fc:ac:b1:33:0a:3a:46:69:8e:00:0e:c1: b9:5e:b7:a3:56:6b:1d:9b:c9:b8:25:58:58:e4:bb: 03:5e:d1:da:b4:cd:06:2a:4f:0a:02:6a:e9:cd:60: 5a:5a:4b:14:10:4f:f6:25:75:6c:b3:4f:ac:7a:e2: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4A:DB:9A:F5:D4:25:E1:23:E5:12:D0:81:58:AC:4B:A0:4D:33:4D X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:74:d4:58:be:52:df:e7:b4:27:72:31:ad:4f:09:35:d0: ca:5d:23:67:6f:5b:28:de:74:ef:e6:a5:71:98:0c:da:11:1f: a0:0d:20:f4:ae:d8:0d:44:d7:ba:f0:e3:1a:96:fb:ea:86:33: f5:c2:ee:13:f9:39:e0:3c:7d:d8:d6:1c:79:9f:d7:22:cf:22: 0e:e8:50:7b:90:a2:f6:6e:4c:fd:7c:89:71:00:61:47:ff:27: 6d:78:b0:6c:ef:10:9a:e1:47:6c:67:92:86:56:29:77:84:ed: df:75:f9:55:3c:73:6d:84:16:55:f0:30:00:80:0b:b8:6a:c3: b2:b3:12:60:1b:d7:cb:04:ed:0f:66:ae:3f:f4:7b:e9:44:dc: 9f:6b:d5:05:03:7c:a5:9b:cc:9a:18:2c:88:14:ab:4a:13:42: 76:30:6b:7e:04:7a:2b:34:08:a3:fa:c6:67:37:ee:4e:3c:d0: 44:69:fc:34:c4:8a:c3:48:72:52:e1:c4:20:ae:fa:06:f3:bb: e5:9b:4c:18:ec:14:cf:15:1f:00:b8:9c:c8:83:2a:6e:bd:37: dd:f9:65:9b:1a:b4:db:b8:94:dc:a9:89:af:ea:c9:44:9b:6b: 16:d5:50:92:24:30:ba:a0:66:87:16:d2:00:c9:a2:a8:83:01: e3:ab:e1:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUwNDI1MDQxNzUwWhcNMjUwNTAyMDQxNzUwWjAYMRYwFAYD VQQDEw02ODBiMGNlZS1iMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0DmPoIsW02iNfzKvc5LTATrrv0XrnJvam8YyJWc2D9HRaJjJEx1iBNC2bOg T5A+/qZPI8MC0OslW/734toY0y1nKvcGkjkxGYX/sPp6nVNcUT+E22ivflkORqHg V9a1fFoOzcpJ6dVEPpHty7fRGPMUIp0EZPL2NLsP3wrPsJHvua4VUdrtZA5nZ6CE GViCZfSF6iHBoAWS2K6phO9u369Nmn9UdBQ74NpcCjqPc+boZiH+FLItSvlqR2MG kpnZBzP5an78rLEzCjpGaY4ADsG5XrejVmsdm8m4JVhY5LsDXtHatM0GKk8KAmrp zWBaWksUEE/2JXVss0+seuK29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5K25r1 1CXhI+US0IFYrEugTTNNMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBCHTUWL5S3+e0J3IxrU8JNdDKXSNnb1so3nTv5qVxmAzaER+gDSD0 rtgNRNe68OMalvvqhjP1wu4T+TngPH3Y1hx5n9cizyIO6FB7kKL2bkz9fIlxAGFH /ydteLBs7xCa4UdsZ5KGVil3hO3fdflVPHNthBZV8DAAgAu4asOysxJgG9fLBO0P Zq4/9HvpRNyfa9UFA3ylm8yaGCyIFKtKE0J2MGt+BHorNAij+sZnN+5OPNBEafw0 xIrDSHJS4cQgrvoG87vlm0wY7BTPFR8AuJzIgypuvTfd+WWbGrTbuJTcqYmv6slE m2sW1VCSJDC6oGaHFtIAyaKogwHjq+GU -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:09 2025 by rpki-client