$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft File: YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json) Hash identifier: AbrMdc3d6RO+1XXipUxjxdh8xAX7PHskuKUJVaPCEkM= Subject key identifier: A8:1A:0B:D4:59:DE:1E:5C:BE:AC:05:ED:EF:E9:63:E1:EA:6E:F7:37 Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD Certificate issuer: /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft Manifest number: 012F Signing time: Fri 25 Apr 2025 03:38:32 +0000 Manifest this update: Fri 25 Apr 2025 03:38:32 +0000 Manifest next update: Fri 02 May 2025 03:38:32 +0000 Files and hashes: 1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: lOtM/E6Oj+r4Jp3TUS5SKZ4SfdPR/wBrbzxjOuDlfgA=) 2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: JF98gdzocH1/AV+95pGblYdfL1FxgXSJftaTSJva7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Validity Not Before: Apr 25 03:38:32 2025 GMT Not After : May 2 03:38:32 2025 GMT Subject: CN=680b03b8-0c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:77:1f:15:a6:a4:2c:f8:2c:03:e7:01:63: 15:26:89:77:08:f5:b2:61:36:f7:94:33:81:92:79: 8a:af:15:b4:96:cd:70:13:be:4b:2c:fa:f2:87:d8: e8:ac:16:9d:0a:f7:76:8a:eb:10:9b:e4:59:0e:e9: de:60:56:c5:64:1c:62:62:62:db:3d:a0:9c:c6:06: 0d:47:67:39:7d:68:37:00:95:63:2d:1d:e7:12:a3: 1e:8c:18:38:66:7a:0a:a8:55:fc:53:af:e0:df:8c: 0e:6e:06:ae:d3:61:2e:42:a0:5b:aa:7c:02:35:e5: 58:6f:7b:68:24:4a:35:80:c6:1c:70:35:db:b6:a0: 14:70:f2:a3:6d:b9:a7:cc:53:ed:0b:5f:54:ce:f0: a5:fd:68:81:bc:33:01:8f:24:53:d9:c2:7e:69:29: 6c:2b:fb:41:43:77:9f:0d:40:f8:72:a1:31:89:18: 68:4b:47:17:ce:bf:29:c5:9a:a1:f9:16:25:27:57: 0d:eb:f1:04:47:01:db:b5:26:e5:65:ab:b4:a4:22: 36:65:94:e9:04:1e:6b:f5:b1:aa:26:17:cf:17:df: 5d:1e:04:98:72:64:f8:7e:cf:25:84:30:83:7b:42: d1:8e:ad:7b:0f:07:33:ad:bd:36:a9:12:36:b7:78: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:0B:D4:59:DE:1E:5C:BE:AC:05:ED:EF:E9:63:E1:EA:6E:F7:37 X509v3 Authority Key Identifier: keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:46:32:ad:01:22:ae:cf:62:b6:b6:45:24:4e:a0:03:39: 1e:3e:ac:e4:2b:59:3e:4f:17:ed:6d:7c:c2:6e:f2:71:c8:9d: 84:ff:a0:f5:a0:84:ba:cd:c6:6e:e0:72:1e:a7:f1:70:04:f1: 42:ea:37:cd:63:85:3c:6b:c4:19:12:e9:a2:59:95:13:4f:aa: fa:45:5d:57:98:b4:f2:2d:50:63:a7:f3:b9:b3:37:d0:52:31: 37:51:10:29:ea:79:8d:24:2f:23:0d:e3:d2:f6:47:4f:b0:20: bc:3a:54:73:de:90:29:18:fd:70:15:25:bd:05:b9:ad:cd:08: e2:73:83:f9:38:6e:ac:c4:c1:ab:25:f7:43:53:75:3c:24:e8: 9e:fc:b0:2b:40:91:33:11:36:5e:e8:44:7c:40:fd:1a:9a:dd: 92:34:78:e6:b7:a8:e3:dd:31:0a:33:df:66:14:82:a4:f1:31: 62:a8:7b:40:d5:4e:c3:db:34:11:80:14:17:3f:b6:71:f8:8c: 94:58:b4:2a:5a:d4:ac:d9:7d:56:cf:8c:25:18:91:b5:2c:c7: 81:bb:d7:79:f5:4b:21:aa:4b:87:20:37:75:1a:c7:eb:f8:c2: 84:77:77:0f:1b:2e:02:3b:f6:7a:3a:75:30:aa:74:5a:4b:98: fb:8e:f4:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5 RTFFMkY5Q0QwHhcNMjUwNDI1MDMzODMyWhcNMjUwNTAyMDMzODMyWjAYMRYwFAYD VQQDEw02ODBiMDNiOC0wYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVl3HxWmpCz4LAPnAWMVJol3CPWyYTb3lDOBknmKrxW0ls1wE75LLPryh9jo rBadCvd2iusQm+RZDuneYFbFZBxiYmLbPaCcxgYNR2c5fWg3AJVjLR3nEqMejBg4 ZnoKqFX8U6/g34wObgau02EuQqBbqnwCNeVYb3toJEo1gMYccDXbtqAUcPKjbbmn zFPtC19UzvCl/WiBvDMBjyRT2cJ+aSlsK/tBQ3efDUD4cqExiRhoS0cXzr8pxZqh +RYlJ1cN6/EERwHbtSblZau0pCI2ZZTpBB5r9bGqJhfPF99dHgSYcmT4fs8lhDCD e0LRjq17Dwczrb02qRI2t3jTSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgaC9RZ 3h5cvqwF7e/pY+Hqbvc3MB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho UVpBNFVyaGpJdy1lSGktYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgs0YyrQEirs9itrZFJE6gAzkePqzkK1k+TxftbXzCbvJxyJ2E/6D1 oIS6zcZu4HIep/FwBPFC6jfNY4U8a8QZEumiWZUTT6r6RV1XmLTyLVBjp/O5szfQ UjE3URAp6nmNJC8jDePS9kdPsCC8OlRz3pApGP1wFSW9BbmtzQjic4P5OG6sxMGr JfdDU3U8JOie/LArQJEzETZe6ER8QP0amt2SNHjmt6jj3TEKM99mFIKk8TFiqHtA 1U7D2zQRgBQXP7Zx+IyUWLQqWtSs2X1Wz4wlGJG1LMeBu9d59UshqkuHIDd1Gsfr +MKEd3cPGy4CO/Z6OnUwqnRaS5j7jvSx -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:22 2025 by rpki-client