$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: tr/U94iy2zLSbZ2/6lLKnWqoXn17j9QrYOeD+iYrMTI= Subject key identifier: F6:93:C8:F6:CA:59:C0:74:A1:A4:69:B7:09:B7:63:C5:CF:67:67:3C Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0EE1 Signing time: Thu 24 Apr 2025 21:17:50 +0000 Manifest this update: Thu 24 Apr 2025 21:17:49 +0000 Manifest next update: Thu 01 May 2025 21:17:49 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: JQ4WH86H9spDfNod6I6RSmCY912T1nOZK6o1UHVMPnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Apr 24 21:17:49 2025 GMT Not After : May 1 21:17:49 2025 GMT Subject: CN=680aaa7d-0f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:f3:e2:01:0e:08:72:03:12:eb:f8:85:2f: 85:79:8c:85:20:44:59:66:20:f0:b8:a6:7d:e8:cf: c2:0b:8d:85:91:d2:96:f0:87:29:01:98:74:c0:74: dc:e9:ff:65:78:ba:ef:23:23:0b:c0:02:77:d6:ee: c2:1d:3c:6a:15:b2:42:bf:be:dc:4c:9f:00:46:9a: 11:55:fa:df:b8:d8:a7:65:eb:96:ee:9f:6e:6d:eb: 5c:ef:f5:ad:5f:7b:fa:46:f9:40:00:f1:1f:ad:75: ba:06:a5:dd:43:7c:ce:0b:74:d1:d2:91:49:8c:36: 72:2f:32:41:0d:5e:5a:d3:04:a3:3b:a8:54:20:c4: 30:0c:75:09:a2:16:c3:e8:e6:fe:7b:cb:91:30:e1: 9d:35:7c:1e:0f:a2:ba:2e:46:54:99:f7:12:ef:7b: c0:de:3b:e5:f6:38:1c:8c:41:29:55:e2:0e:fd:36: b4:36:0f:4e:e4:00:55:c7:b5:85:61:20:a8:8d:89: c8:37:05:7b:92:7a:bf:56:66:33:d3:33:50:2d:6f: 10:dd:c3:b5:6f:60:96:18:9e:47:ea:d6:34:29:2b: a9:7c:84:73:e9:1f:71:b8:17:6a:57:e3:a8:f3:ab: 37:3d:13:2b:65:6b:d0:a8:e7:da:72:5a:fd:10:d9: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:C8:F6:CA:59:C0:74:A1:A4:69:B7:09:B7:63:C5:CF:67:67:3C X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:62:45:b6:85:1c:06:a6:11:c5:e1:c2:ab:d0:7b:ed:8e: d2:b5:a0:6d:2f:81:bf:17:f3:28:61:ba:f4:89:80:48:57:16: 3a:60:c1:63:50:bb:26:32:b3:39:e0:51:d9:69:2e:e5:d2:12: 03:c6:c2:0c:db:73:70:78:04:e7:88:94:cf:38:a8:90:67:ff: e2:cf:59:e0:44:79:1a:c5:0e:2a:3c:94:73:91:f6:78:63:bf: 9a:68:ef:b9:1d:f1:05:86:b5:e1:5d:c8:71:7b:68:98:f3:e4: 19:1f:3d:be:6f:16:1b:8b:cc:1a:16:1f:b9:29:fc:a4:25:e2: 31:ef:5d:32:f1:1e:a9:db:d4:19:04:f8:ba:0a:14:f2:fd:fc: c2:29:df:d8:8b:03:dc:e2:90:5c:06:2e:76:ca:cc:c3:7c:49: b6:9e:0b:63:77:19:22:18:19:40:d4:8b:97:9f:ba:28:3e:71: e9:a5:f8:4e:ff:86:34:70:9a:4c:25:df:e0:05:41:71:f0:de: 83:df:f8:56:17:db:11:93:b9:6a:07:69:a0:01:f9:f4:98:ce: 9a:30:1e:70:7e:12:7c:39:c7:f2:6b:88:25:5e:69:17:b0:dc: 93:db:11:78:e6:5e:b3:80:7a:f8:e0:44:5d:ed:d5:51:af:34: 9c:5a:1e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUwNDI0MjExNzQ5WhcNMjUwNTAxMjExNzQ5WjAYMRYwFAYD VQQDEw02ODBhYWE3ZC0wZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzDz4gEOCHIDEuv4hS+FeYyFIERZZiDwuKZ96M/CC42FkdKW8IcpAZh0wHTc 6f9leLrvIyMLwAJ31u7CHTxqFbJCv77cTJ8ARpoRVfrfuNinZeuW7p9ubetc7/Wt X3v6RvlAAPEfrXW6BqXdQ3zOC3TR0pFJjDZyLzJBDV5a0wSjO6hUIMQwDHUJohbD 6Ob+e8uRMOGdNXweD6K6LkZUmfcS73vA3jvl9jgcjEEpVeIO/Ta0Ng9O5ABVx7WF YSCojYnINwV7knq/VmYz0zNQLW8Q3cO1b2CWGJ5H6tY0KSupfIRz6R9xuBdqV+Oo 86s3PRMrZWvQqOfaclr9ENnVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaTyPbK WcB0oaRptwm3Y8XPZ2c8MB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9WJFtoUcBqYRxeHCq9B77Y7StaBtL4G/F/MoYbr0iYBIVxY6YMFj ULsmMrM54FHZaS7l0hIDxsIM23NweATniJTPOKiQZ//iz1ngRHkaxQ4qPJRzkfZ4 Y7+aaO+5HfEFhrXhXchxe2iY8+QZHz2+bxYbi8waFh+5KfykJeIx710y8R6p29QZ BPi6ChTy/fzCKd/YiwPc4pBcBi52yszDfEm2ngtjdxkiGBlA1IuXn7ooPnHppfhO /4Y0cJpMJd/gBUFx8N6D3/hWF9sRk7lqB2mgAfn0mM6aMB5wfhJ8Ocfya4glXmkX sNyT2xF45l6zgHr44ERd7dVRrzScWh50 -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:08 2025 by rpki-client