$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft File: pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json) Hash identifier: wU1c9ao9xuFGpkJJpBAwkFkV3YXV9C8Ti2afukktUGk= Subject key identifier: 88:26:37:01:33:30:14:EF:D5:F4:0C:B7:AE:27:F3:11:80:42:25:A0 Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 Certificate issuer: /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Certificate serial: 147E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft Manifest number: 1472 Signing time: Thu 24 Apr 2025 16:54:09 +0000 Manifest this update: Thu 24 Apr 2025 16:54:08 +0000 Manifest next update: Thu 01 May 2025 16:54:08 +0000 Files and hashes: 1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: 7nco4Wh4u+dm0JVXITcsEWWNbR73nb2lGsy5oZWNSXs=) 2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: FG61AEeBt/KwKh7Rq7GtmQk5iB1zq03M8kwTThCsmIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5246 (0x147e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Validity Not Before: Apr 24 16:54:08 2025 GMT Not After : May 1 16:54:08 2025 GMT Subject: CN=680a6cb1-2871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:13:17:95:b8:11:4f:8b:5d:aa:d7:59:d8: ee:44:06:01:11:fb:2a:f2:ec:d0:ad:ee:58:e1:b6: 5e:95:5d:dc:83:25:ea:d6:9b:75:92:1e:50:67:6c: 6e:09:13:4b:54:33:b6:55:ef:5d:73:19:2c:7c:03: aa:d0:44:0c:15:7b:5b:d8:a2:4c:81:52:68:a2:c7: c8:14:f2:c3:a3:a4:8a:24:53:9a:fc:04:02:99:a3: ef:f6:28:5a:a3:e0:7e:96:cf:4d:07:64:90:86:1c: ea:16:eb:3d:5c:e1:a4:e1:b0:04:8d:e1:4a:1c:23: ff:1e:bf:c0:72:1b:b2:e1:c5:15:aa:62:97:4b:2d: b8:a8:33:17:28:80:29:f8:49:8b:ee:97:f7:5e:c1: 1d:39:e5:c6:08:2f:21:95:17:81:d4:74:77:8b:83: 46:8b:e7:fd:f1:b2:91:e6:cb:9d:ce:c8:0d:f1:30: 99:92:3f:a1:0a:90:50:35:f0:2e:16:31:1f:cc:3b: 9e:0b:3f:7e:f7:a0:9d:9e:b5:12:27:24:5c:a1:94: 0e:0e:68:ed:4e:1e:7c:c2:87:93:d7:73:90:d6:d7: 4d:4b:2c:17:08:aa:cb:4d:f0:d5:aa:1e:21:a4:bc: b4:51:80:0b:70:73:34:00:7d:58:61:1c:e4:07:2c: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:26:37:01:33:30:14:EF:D5:F4:0C:B7:AE:27:F3:11:80:42:25:A0 X509v3 Authority Key Identifier: keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d9:1f:2b:0f:25:db:d6:48:88:ac:1e:bc:a7:f6:0d:01:96: 20:25:09:04:15:76:be:37:8b:10:00:23:ae:c0:2c:ce:25:6e: 3d:db:88:be:a4:32:b3:5b:48:fd:9a:c0:25:67:5f:da:28:5b: a1:a5:4c:12:ee:0c:4f:bf:d5:03:30:b9:d0:0d:8c:aa:33:21: a7:a9:dd:7c:21:a4:a5:16:48:41:53:32:69:04:96:34:d8:06: 50:c7:ce:11:8d:35:17:22:39:87:5f:1f:9f:7e:8a:be:96:39: 01:f1:a4:2c:17:1c:9a:be:51:68:c8:d7:32:c0:3a:21:41:ad: 54:c0:c0:99:49:64:d3:4a:84:90:63:1b:4a:24:b9:0f:ca:a2: a1:3b:55:48:07:ef:2b:81:74:26:8c:6d:54:00:94:64:16:b6: cd:c5:85:c4:01:87:67:f2:f5:58:00:af:6a:73:5f:26:e6:27: 4a:87:a3:ed:70:b2:32:c1:10:ae:83:e5:8d:f2:3a:03:bf:ec: b0:ab:16:1f:14:fb:35:13:a2:92:22:66:42:b7:da:63:df:98: 66:09:70:e1:bd:cf:8a:78:b0:ad:a2:27:c2:c6:a3:9d:16:db: 47:9b:a8:3d:c9:63:1d:22:28:c5:c7:e2:2b:7e:09:4a:34:85: d8:55:50:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzMkYxMTAvBgNVBAUTKEE3MjdGNTlCMjRCMTE0QTI1MUZERjc3RjUzQkZBMEVD NjkxRTI1QTUwHhcNMjUwNDI0MTY1NDA4WhcNMjUwNTAxMTY1NDA4WjAYMRYwFAYD VQQDEw02ODBhNmNiMS0yODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfkTF5W4EU+LXarXWdjuRAYBEfsq8uzQre5Y4bZelV3cgyXq1pt1kh5QZ2xu CRNLVDO2Ve9dcxksfAOq0EQMFXtb2KJMgVJoosfIFPLDo6SKJFOa/AQCmaPv9iha o+B+ls9NB2SQhhzqFus9XOGk4bAEjeFKHCP/Hr/Achuy4cUVqmKXSy24qDMXKIAp +EmL7pf3XsEdOeXGCC8hlReB1HR3i4NGi+f98bKR5sudzsgN8TCZkj+hCpBQNfAu FjEfzDueCz9+96CdnrUSJyRcoZQODmjtTh58woeT13OQ1tdNSywXCKrLTfDVqh4h pLy0UYALcHM0AH1YYRzkBywxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgmNwEz MBTv1fQMt64n8xGAQiWgMB8GA1UdIwQYMBaAFKcn9ZsksRSiUf33f1O/oOxpHiWl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMyRi8zMzQ1QzRDNjY2 NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZLSlJfZmRfVTctZzdHa2VK YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B5ZjFteVN4RktKUl9mZF9VNy1nN0drZUphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjMyRi8zMzQ1QzRDNjY2NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZL SlJfZmRfVTctZzdHa2VKYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC42R8rDyXb1kiIrB68p/YNAZYgJQkEFXa+N4sQACOuwCzOJW4924i+ pDKzW0j9msAlZ1/aKFuhpUwS7gxPv9UDMLnQDYyqMyGnqd18IaSlFkhBUzJpBJY0 2AZQx84RjTUXIjmHXx+ffoq+ljkB8aQsFxyavlFoyNcywDohQa1UwMCZSWTTSoSQ YxtKJLkPyqKhO1VIB+8rgXQmjG1UAJRkFrbNxYXEAYdn8vVYAK9qc18m5idKh6Pt cLIywRCug+WN8joDv+ywqxYfFPs1E6KSImZCt9pj35hmCXDhvc+KeLCtoifCxqOd FttHm6g9yWMdIijFx+IrfglKNIXYVVCe -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:18 2025 by rpki-client