$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: jFpGuKrA0MFyc0wDY/GPXcRG+CHgK3Yfag5T/Ud7CS0= Subject key identifier: 53:A6:7D:8D:49:27:B0:51:8A:AE:2C:D3:5F:13:FC:8D:4F:93:19:26 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 1806 Signing time: Thu 24 Apr 2025 16:33:36 +0000 Manifest this update: Thu 24 Apr 2025 16:33:35 +0000 Manifest next update: Thu 01 May 2025 16:33:35 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: hE0+31uYcPGsCb+7TDWcmeKWvgs80i5ilGPFrRJCQMU=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: YxR/IEAXYjhKk4qyNbFNVRXx2+Bty0U++VTURHi/7GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6163 (0x1813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Apr 24 16:33:35 2025 GMT Not After : May 1 16:33:35 2025 GMT Subject: CN=680a67e0-202b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:d7:fc:5a:ea:d5:2c:ea:f9:1c:97:85:6d: 3f:64:92:e7:f7:7b:f7:04:8c:72:20:a7:9a:82:2f: 35:a4:ff:0d:13:c8:b1:94:7b:36:da:0a:d5:02:a3: b8:4e:94:73:c6:90:b3:5f:2e:51:e4:ac:1d:4f:48: 57:50:02:56:cc:dc:16:7b:ec:dd:c8:60:f6:ac:87: 5d:59:63:aa:5c:2e:74:2c:88:ef:aa:7d:58:38:56: 6d:4b:7f:66:ea:3f:e4:7b:a8:62:e7:57:7d:00:4f: 4a:f0:d8:b0:86:80:fb:e6:b7:26:22:dc:58:b4:e0: 9c:1e:d2:5d:78:5e:9e:fc:78:cc:55:70:59:05:3a: 8c:9a:43:b8:1c:12:27:e3:56:7d:12:19:8b:ac:cb: 6d:f8:f7:1c:10:d1:47:0f:dc:46:7d:22:d7:50:49: ca:ba:f1:b0:be:35:bc:32:a6:b4:15:6c:04:4c:14: 42:d8:5c:72:0a:22:4b:3e:41:71:9e:0e:65:ac:e5: fd:c5:6f:81:2d:43:7b:d7:5f:82:ea:ad:8c:0b:48: 37:b4:f0:8a:33:dd:a1:ae:bc:92:84:74:58:02:be: 91:4b:2d:47:e3:32:19:9d:53:4d:cf:f5:69:0d:5b: 16:98:4b:71:95:5d:23:1f:9d:97:ed:08:71:58:df: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A6:7D:8D:49:27:B0:51:8A:AE:2C:D3:5F:13:FC:8D:4F:93:19:26 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a0:41:e9:43:35:c0:f2:12:a9:03:ef:cd:d5:46:cb:17:bf: 9c:b8:79:05:1f:f9:34:d0:f4:55:75:15:e2:41:ff:e9:8f:b0: 29:1b:d9:63:ed:cc:dd:e5:7f:22:08:9e:c2:7e:b9:d2:0a:c1: 1a:0a:c2:a1:d2:fe:f1:a6:68:11:08:d8:90:49:14:fb:6a:75: 77:3a:07:fe:29:8e:ca:e5:c8:42:de:24:7a:fa:02:67:a5:48: 03:5b:35:c5:28:1c:85:72:61:89:6c:cd:29:bd:27:7f:56:23: 99:76:21:5d:e2:eb:46:f3:2a:f5:30:65:47:99:2a:a3:bf:fc: 38:0d:3e:df:e7:16:07:65:60:ec:78:15:f7:69:24:33:79:08: 19:97:2b:7d:2f:eb:ab:d9:20:45:5d:3f:4c:d1:f1:00:9d:0a: f9:13:72:e0:87:a5:a6:5d:2a:bc:03:1d:b8:62:e4:d7:b8:09: cc:bb:2f:de:6b:66:e9:11:3d:78:2d:c4:2b:2e:e4:7b:92:08: 20:09:19:b6:90:f6:29:fe:d3:1f:4f:c6:80:d0:cd:04:10:42: 0f:8f:8b:65:b8:a9:3b:fb:80:02:61:b2:f2:49:0b:11:9f:b8: db:ce:fd:96:81:b5:67:85:4f:f3:88:12:2b:eb:78:8f:2f:10: 7d:a9:77:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwNDI0MTYzMzM1WhcNMjUwNTAxMTYzMzM1WjAYMRYwFAYD VQQDEw02ODBhNjdlMC0yMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDXX/Frq1Szq+RyXhW0/ZJLn93v3BIxyIKeagi81pP8NE8ixlHs22grVAqO4 TpRzxpCzXy5R5KwdT0hXUAJWzNwWe+zdyGD2rIddWWOqXC50LIjvqn1YOFZtS39m 6j/ke6hi51d9AE9K8NiwhoD75rcmItxYtOCcHtJdeF6e/HjMVXBZBTqMmkO4HBIn 41Z9EhmLrMtt+PccENFHD9xGfSLXUEnKuvGwvjW8Mqa0FWwETBRC2FxyCiJLPkFx ng5lrOX9xW+BLUN711+C6q2MC0g3tPCKM92hrryShHRYAr6RSy1H4zIZnVNNz/Vp DVsWmEtxlV0jH52X7QhxWN8YhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOmfY1J J7BRiq4s018T/I1PkxkmMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgoEHpQzXA8hKpA+/N1UbLF7+cuHkFH/k00PRVdRXiQf/pj7ApG9lj 7czd5X8iCJ7CfrnSCsEaCsKh0v7xpmgRCNiQSRT7anV3Ogf+KY7K5chC3iR6+gJn pUgDWzXFKByFcmGJbM0pvSd/ViOZdiFd4utG8yr1MGVHmSqjv/w4DT7f5xYHZWDs eBX3aSQzeQgZlyt9L+ur2SBFXT9M0fEAnQr5E3Lgh6WmXSq8Ax24YuTXuAnMuy/e a2bpET14LcQrLuR7kgggCRm2kPYp/tMfT8aA0M0EEEIPj4tluKk7+4ACYbLySQsR n7jbzv2WgbVnhU/ziBIr63iPLxB9qXdw -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:44 2025 by rpki-client