$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: Uaar+eHk047/FlDQAJybOEiC5ASQAO0KiYxf3O1H4Lk= Subject key identifier: 73:E8:2F:D0:77:C5:D2:D8:A2:69:4D:94:1C:9B:A2:7F:1A:C2:A4:F0 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 73 Signing time: Fri 25 Apr 2025 05:47:52 +0000 Manifest this update: Fri 25 Apr 2025 05:47:52 +0000 Manifest next update: Fri 02 May 2025 05:47:52 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: DaESpefxuJAanwE0bfuQz2eiokL0J+uTlcVDhh1dL8o=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Apr 25 05:47:52 2025 GMT Not After : May 2 05:47:52 2025 GMT Subject: CN=680b2208-82bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:da:16:88:15:38:b1:f0:eb:a8:8f:e0:40: 24:03:5c:6e:77:22:28:c6:f3:7c:d5:7c:ff:a8:48: 2f:5c:e2:57:23:99:d7:bd:4c:ba:83:f8:7f:41:04: 76:63:41:67:08:70:42:94:01:a7:5f:01:f9:63:25: f6:47:65:c3:a4:64:0c:7c:7a:0f:25:6a:84:ba:f9: d9:d2:61:6a:0c:ec:31:2e:84:77:8b:96:5c:3f:49: 6a:a9:3d:f9:53:20:ca:23:e7:dd:ec:6f:5f:e6:9f: 4b:de:61:14:14:c7:ee:30:f3:89:4f:c0:3c:24:8a: 66:20:bd:1b:ab:02:c3:d0:b6:3f:d9:92:3e:39:f9: 90:ba:5f:0c:34:23:ca:df:86:b6:43:1c:76:a5:13: b5:89:2d:53:16:d3:09:89:00:ce:3d:0f:3f:ac:25: 80:df:e6:3d:13:3b:21:ff:fe:00:5c:99:8e:4e:eb: af:47:53:9f:df:3a:9c:a7:a9:a2:83:aa:1d:e8:35: 3c:10:83:01:73:7a:dc:5e:88:0c:7b:cb:ad:f4:85: de:82:96:ae:95:0e:9e:ca:55:ce:c2:7b:e7:c0:52: 02:64:a9:cf:0c:73:b3:ff:e6:95:44:81:9e:95:96: 03:88:08:1a:b5:16:2f:c2:7f:e7:f3:b8:a1:ca:b1: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:2F:D0:77:C5:D2:D8:A2:69:4D:94:1C:9B:A2:7F:1A:C2:A4:F0 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:80:08:5c:ab:69:8d:3f:8e:aa:ef:4c:4e:00:a3:cd:ea:47: a6:66:f9:b7:43:8c:83:0d:33:9f:38:10:f3:c8:c4:b1:3b:52: 48:e8:50:2a:ee:3b:89:05:f5:61:20:ab:64:25:9f:59:54:e0: dc:d9:31:97:31:67:c7:7e:21:cd:26:c6:e6:50:7a:08:51:7c: 6b:3b:44:1d:5e:26:b6:8b:aa:88:4c:de:9e:c6:a0:35:b2:f7: fa:76:db:1a:fc:c4:b1:b0:c3:5c:2e:0e:46:4f:4c:a9:d5:fb: 18:c5:69:98:9f:89:84:27:21:70:79:b7:6f:5e:e1:07:1e:90: 11:b2:ad:64:f1:2e:30:d3:02:f3:88:b8:fb:7d:3d:53:94:29: 40:d2:98:6f:be:2a:8d:6f:62:b4:d3:97:88:67:38:4b:20:4e: 60:b0:66:7b:5d:2b:30:d4:34:e2:3d:ed:b7:32:b3:b3:f9:3b: e6:8f:ab:b4:97:6d:5e:fd:37:ca:91:0f:a3:f0:ad:44:d6:f5: 6c:57:fd:2a:8b:52:dd:db:b5:cd:bc:51:9f:22:b1:66:1f:18: 31:65:8a:9d:c5:ac:d0:14:96:a8:db:8b:14:9d:58:34:67:ca: bb:6d:07:16:4e:10:d0:ed:5a:f8:6f:b5:d2:c4:77:81:f3:28: 2c:bb:79:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoQzg0OUMxRjZFQjhEMUIwQjM3OTRCMDYwQzQ5QzVBOUJE NTNBRDRDOTAeFw0yNTA0MjUwNTQ3NTJaFw0yNTA1MDIwNTQ3NTJaMBgxFjAUBgNV BAMTDTY4MGIyMjA4LTgyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKydoWiBU4sfDrqI/gQCQDXG53IijG83zVfP+oSC9c4lcjmde9TLqD+H9BBHZj QWcIcEKUAadfAfljJfZHZcOkZAx8eg8laoS6+dnSYWoM7DEuhHeLllw/SWqpPflT IMoj593sb1/mn0veYRQUx+4w84lPwDwkimYgvRurAsPQtj/Zkj45+ZC6Xww0I8rf hrZDHHalE7WJLVMW0wmJAM49Dz+sJYDf5j0TOyH//gBcmY5O669HU5/fOpynqaKD qh3oNTwQgwFzetxeiAx7y630hd6Clq6VDp7KVc7Ce+fAUgJkqc8Mc7P/5pVEgZ6V lgOICBq1Fi/Cf+fzuKHKsXuBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc+gv0HfF 0tiiaU2UHJuifxrCpPAwHwYDVR0jBBgwFoAUyEnB9uuNGws3lLBgxJxam9U61Mkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0E3MzM3QzZBNzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFN ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveUVuQjl1dU5Hd3MzbExCZ3hKeGFtOVU2MU1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0E3MzM3QzZBNzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dz M2xMQmd4SnhhbTlVNjFNay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiACFyraY0/jqrvTE4Ao83qR6Zm+bdDjIMNM584EPPIxLE7UkjoUCru O4kF9WEgq2Qln1lU4NzZMZcxZ8d+Ic0mxuZQeghRfGs7RB1eJraLqohM3p7GoDWy 9/p22xr8xLGww1wuDkZPTKnV+xjFaZifiYQnIXB5t29e4QcekBGyrWTxLjDTAvOI uPt9PVOUKUDSmG++Ko1vYrTTl4hnOEsgTmCwZntdKzDUNOI97bcys7P5O+aPq7SX bV79N8qRD6PwrUTW9WxX/SqLUt3btc28UZ8isWYfGDFlip3FrNAUlqjbixSdWDRn yrttBxZOENDtWvhvtdLEd4HzKCy7eak= -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:30 2025 by rpki-client