$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: +4A0SJlg8D3Ebp74EiwXAHEx6zouXymwDhXs2wmpyBs= Subject key identifier: FB:89:60:CA:BC:1A:FA:7B:93:AC:14:A5:0F:EA:39:26:B3:0F:80:1E Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: 5F Signing time: Fri 25 Apr 2025 06:06:06 +0000 Manifest this update: Fri 25 Apr 2025 06:06:06 +0000 Manifest next update: Fri 02 May 2025 06:06:06 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: AYgDqnWcMvmhV2v71BL3HZDnkOv7mobx4YMA4b2Cqas=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Apr 25 06:06:06 2025 GMT Not After : May 2 06:06:06 2025 GMT Subject: CN=680b264e-8c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:98:b8:5b:a3:07:83:b9:8a:48:28:68:c2: 8a:1d:c4:0d:b0:ae:c9:5e:3d:3f:f2:ae:c5:a5:b3: 20:4e:9b:8c:5f:aa:1f:eb:ca:ce:13:f8:c1:05:c8: 19:80:84:65:fb:9a:06:63:5b:ee:f6:28:56:ce:19: ea:6d:9a:9b:64:8c:da:d4:3c:b1:a7:bc:15:67:87: 00:ca:1c:b8:37:4a:3a:fe:5f:c6:3d:eb:c7:ca:20: f1:d0:ab:bb:7b:73:c0:29:84:4d:fd:bd:c4:a3:3f: bc:23:23:6e:59:89:f9:f7:5f:85:b0:76:01:72:0f: 42:bd:6d:86:b6:e3:ff:e8:a4:0d:28:ea:d6:70:e4: 66:39:69:89:8f:8e:16:b2:bd:9c:7e:47:72:fa:f1: 13:f3:3b:5e:c0:df:36:f0:23:c5:f0:44:0c:83:92: b6:b9:32:c0:74:15:67:1f:45:ac:a2:77:c6:1c:e3: 42:e0:f0:d4:ac:65:6e:c6:65:c2:a3:bf:e5:68:44: b8:30:06:48:d5:0d:3e:c0:85:60:03:2f:44:ed:8b: 3c:5d:80:e7:01:19:fe:82:77:96:a0:7b:6b:1f:8f: a9:3b:67:cc:3c:d8:14:e0:22:4c:f4:ff:24:be:37: c3:3e:9b:45:50:c8:52:9e:32:18:f8:89:63:90:40: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:89:60:CA:BC:1A:FA:7B:93:AC:14:A5:0F:EA:39:26:B3:0F:80:1E X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:57:31:12:8a:34:e7:e6:80:85:13:31:ac:d6:d1:5e:f3:66: 85:7d:25:f9:35:33:f9:9f:3f:45:c3:c0:cd:14:ea:da:77:2f: b0:7d:ad:3a:bb:e9:e2:f1:3e:3b:9e:e0:a8:c5:e7:6a:d5:38: b3:6d:ec:80:bd:ac:b0:7c:32:45:52:55:ee:4c:42:e1:88:83: 06:40:2e:33:7b:20:6a:93:6d:42:6f:36:be:2b:5f:51:58:cf: e0:49:b9:68:64:1e:f7:ec:2d:9b:db:90:d7:41:e3:18:a9:25: 6b:b9:41:17:02:ea:48:44:ac:e1:97:c2:8f:e7:90:db:63:43: 2a:95:96:31:19:e7:ef:ff:84:3e:30:fa:bf:5e:35:2a:e9:b5: dc:0d:21:f6:29:80:e5:20:dc:07:9a:83:4a:56:71:fe:05:64: 48:d7:af:a8:5e:6e:da:08:e3:a7:bd:4e:1e:2c:5a:fa:22:f1: 41:a2:30:a6:50:c3:c5:57:c1:ae:21:c5:56:e7:5e:1c:78:2f: c6:7c:45:61:f2:bc:73:ac:f8:03:b5:7c:38:5f:9b:f7:db:87: 28:3f:d1:c6:93:0d:ac:b5:a4:f7:d8:4c:d5:95:31:82:1b:8a: 36:cf:71:33:11:89:57:b2:1f:84:99:1c:ed:93:0d:91:54:1e: 70:21:52:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNTA0MjUwNjA2MDZaFw0yNTA1MDIwNjA2MDZaMBgxFjAUBgNV BAMTDTY4MGIyNjRlLThjNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClT5i4W6MHg7mKSChowoodxA2wrslePT/yrsWlsyBOm4xfqh/rys4T+MEFyBmA hGX7mgZjW+72KFbOGeptmptkjNrUPLGnvBVnhwDKHLg3Sjr+X8Y968fKIPHQq7t7 c8AphE39vcSjP7wjI25Zifn3X4WwdgFyD0K9bYa24//opA0o6tZw5GY5aYmPjhay vZx+R3L68RPzO17A3zbwI8XwRAyDkra5MsB0FWcfRayid8Yc40Lg8NSsZW7GZcKj v+VoRLgwBkjVDT7AhWADL0TtizxdgOcBGf6Cd5age2sfj6k7Z8w82BTgIkz0/yS+ N8M+m0VQyFKeMhj4iWOQQF1fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+4lgyrwa +nuTrBSlD+o5JrMPgB4wHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Nzk0LzczREI3N0QwOTVCRTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJE SjVlbGhGUFpYemxpVnNmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItXMRKKNOfmgIUTMazW0V7zZoV9Jfk1M/mfP0XDwM0U6tp3L7B9rTq7 6eLxPjue4KjF52rVOLNt7IC9rLB8MkVSVe5MQuGIgwZALjN7IGqTbUJvNr4rX1FY z+BJuWhkHvfsLZvbkNdB4xipJWu5QRcC6khErOGXwo/nkNtjQyqVljEZ5+//hD4w +r9eNSrptdwNIfYpgOUg3Aeag0pWcf4FZEjXr6hebtoI46e9Th4sWvoi8UGiMKZQ w8VXwa4hxVbnXhx4L8Z8RWHyvHOs+AO1fDhfm/fbhyg/0caTDay1pPfYTNWVMYIb ijbPcTMRiVeyH4SZHO2TDZFUHnAhUss= -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:21 2025 by rpki-client