$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: 5n09dE6MelfIUIJKHG2z5Snvee8eEekeyBKXAofiNJc= Subject key identifier: 95:C5:0E:2F:E4:6D:2A:98:9C:FF:57:97:B6:77:62:13:1C:E8:92:D6 Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:16:34 +0000 Manifest this update: Fri 25 Apr 2025 06:16:33 +0000 Manifest next update: Fri 02 May 2025 06:16:33 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: jVYMv9WLExJ5ECdOVtOEHFxeoPIpQUltQuoxSHwncCQ=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Apr 25 06:16:33 2025 GMT Not After : May 2 06:16:33 2025 GMT Subject: CN=680b28c1-c651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:11:d4:cb:cf:65:f8:09:dc:c6:3c:28:99: 07:1f:c1:d2:1a:76:88:14:5c:ee:32:e4:e3:9e:52: 4f:10:0e:a2:cf:f1:30:9f:4d:a5:3f:91:ab:01:78: 8f:aa:5a:81:81:4f:be:4b:8e:e3:38:a2:66:83:ae: ff:ce:f9:56:dc:70:38:34:0f:b3:28:31:bb:4d:62: d5:1d:c6:c7:e7:eb:bd:6e:78:69:6b:e4:c4:28:87: 22:5d:b4:79:ab:9a:b3:34:87:21:ca:f4:7a:96:ec: 7d:0f:a6:6c:b3:da:79:54:a0:fd:ad:eb:b8:48:ea: 3a:71:11:4d:e3:f1:62:24:26:7d:bc:7e:fb:2a:30: 41:6d:45:58:cf:30:26:9f:3b:c0:f5:57:81:76:2f: da:40:68:17:96:80:23:cf:a8:82:15:c3:04:48:6c: 38:4f:9b:1c:c5:9a:b9:26:00:ae:9a:b4:53:bd:11: 84:1c:6e:44:9a:02:2d:bc:94:16:2f:0a:c2:cf:ad: 44:c8:be:07:69:bb:7d:cf:e4:bb:c2:1d:13:c9:76: 2b:2b:f4:66:60:f0:4b:56:63:26:22:f5:db:08:c8: 05:56:b7:15:96:d7:db:39:06:d5:76:62:b4:06:05: 64:28:e9:26:18:bc:60:5b:0e:e3:3b:d8:8f:bc:05: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:0E:2F:E4:6D:2A:98:9C:FF:57:97:B6:77:62:13:1C:E8:92:D6 X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:19:62:48:1e:4d:1b:7a:51:35:c9:29:66:1c:00:87:09:66: 27:92:d8:9f:9a:93:1b:58:29:be:33:e7:37:a0:d0:6f:d9:3c: 95:f5:b2:6c:70:93:48:e6:a1:92:dc:ff:d5:0e:b4:30:96:9f: d6:4c:ea:fe:46:ce:67:ea:3b:5e:2e:20:97:52:30:3a:80:d7: 64:fd:07:03:85:99:43:4b:29:3b:ad:b8:dc:97:c5:62:fd:b4: ca:d4:44:6f:8d:de:f5:71:0f:e1:55:10:d0:a0:a6:94:a2:f1: 60:a4:4e:d8:17:dc:ac:42:1e:d9:3f:86:c0:6a:b1:dd:59:9a: e7:94:ba:55:f9:98:6b:2a:06:8d:31:5f:f5:18:89:d9:3a:5e: f0:b9:c5:74:8f:0e:ff:99:a2:e3:e8:9f:60:cf:19:df:7b:5d: b3:59:f3:1a:36:16:97:09:5b:4a:c2:af:6b:75:51:7e:a1:1d: c8:f7:61:bd:0b:f3:6a:d1:b1:1d:fe:b7:ab:0b:19:eb:d2:26: b3:6f:86:01:02:3f:42:f4:05:2f:83:cd:d0:94:e0:77:90:98: 5d:7b:02:f1:0b:b8:7d:4a:f8:b0:02:e4:83:61:52:88:c8:09: fa:46:36:b9:8d:28:1b:42:86:3a:9c:82:c9:40:a0:c3:48:3c: 29:9a:25:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkZDNTExMC8GA1UEBRMoRkQ4OERFRjlBNkJEREJFQTU5Mzg5RURDNjE3MUFBRENB MTA2QjUwOTAeFw0yNTA0MjUwNjE2MzNaFw0yNTA1MDIwNjE2MzNaMBgxFjAUBgNV BAMTDTY4MGIyOGMxLWM2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj9BHUy89l+AncxjwomQcfwdIadogUXO4y5OOeUk8QDqLP8TCfTaU/kasBeI+q WoGBT75LjuM4omaDrv/O+VbccDg0D7MoMbtNYtUdxsfn671ueGlr5MQohyJdtHmr mrM0hyHK9HqW7H0Ppmyz2nlUoP2t67hI6jpxEU3j8WIkJn28fvsqMEFtRVjPMCaf O8D1V4F2L9pAaBeWgCPPqIIVwwRIbDhPmxzFmrkmAK6atFO9EYQcbkSaAi28lBYv CsLPrUTIvgdpu33P5LvCHRPJdisr9GZg8EtWYyYi9dsIyAVWtxWW19s5BtV2YrQG BWQo6SYYvGBbDuM72I+8Bf8HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlcUOL+Rt Kpic/1eXtndiExzoktYwHwYDVR0jBBgwFoAU/Yje+aa92+pZOJ7cYXGq3KEGtQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyRkM1L0VEQUJEMjMwQUIz RjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1lqZS1hYTkyLXBaT0o3Y1lYR3EzS0VHdFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy RkM1L0VEQUJEMjMwQUIzRjExRUZCRTAyQ0YxNEM0RjlBRTAyL19ZamUtYWE5Mi1w Wk9KN2NZWEdxM0tFR3RRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUZYkgeTRt6UTXJKWYcAIcJZieS2J+akxtYKb4z5zeg0G/ZPJX1smxw k0jmoZLc/9UOtDCWn9ZM6v5GzmfqO14uIJdSMDqA12T9BwOFmUNLKTutuNyXxWL9 tMrURG+N3vVxD+FVENCgppSi8WCkTtgX3KxCHtk/hsBqsd1ZmueUulX5mGsqBo0x X/UYidk6XvC5xXSPDv+ZouPon2DPGd97XbNZ8xo2FpcJW0rCr2t1UX6hHcj3Yb0L 82rRsR3+t6sLGevSJrNvhgECP0L0BS+DzdCU4HeQmF17AvELuH1K+LAC5INhUojI CfpGNrmNKBtChjqcgslAoMNIPCmaJbE= -----END CERTIFICATE-----Generated at Sat Apr 26 05:16:38 2025 by rpki-client