$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: COu1k96Cy/bkg0z5BW5FkG1SgTVT28fBj6ax7a5+omE= Subject key identifier: CF:C2:59:C6:C2:1A:7A:3C:03:67:2D:13:58:BD:0C:9D:98:FD:3A:88 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01C5 Signing time: Fri 25 Apr 2025 02:14:20 +0000 Manifest this update: Fri 25 Apr 2025 02:14:20 +0000 Manifest next update: Fri 02 May 2025 02:14:20 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: ATyBLZGBMXr6tICC4UTwftKXUu9VEhqtkxOFbUG6Zrk=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: EGxldo7AGw1cFMotW1VKii2ay/EqR5jKmsG9yMQNqRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Apr 25 02:14:20 2025 GMT Not After : May 2 02:14:20 2025 GMT Subject: CN=680aeffc-970e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:75:a5:a0:fb:48:74:44:b5:7d:87:95:fc: 53:df:f8:24:03:7c:2b:55:f4:51:12:ba:3c:5c:8e: c0:89:d1:2f:7d:0b:6e:c3:3e:23:78:b3:57:a9:e5: f1:b9:f8:6a:83:e8:41:8b:4b:d5:b4:80:ec:6b:a8: 23:b5:5f:44:1d:87:44:a2:6d:e4:98:57:41:94:15: 32:58:7a:49:08:fc:d3:e9:c8:cc:57:4d:12:fb:c4: 47:50:e6:d4:d2:f1:29:36:c6:0f:5d:39:4f:14:58: 23:c0:6b:e6:46:2d:6a:25:b1:22:6d:8c:16:74:1d: 7a:ad:b5:7d:eb:93:20:20:23:b5:e0:ac:48:ea:0b: 39:48:70:e4:81:09:a6:83:db:98:e2:04:c3:e2:3c: 85:36:72:74:4b:87:06:79:0e:34:e7:8b:83:ee:1b: 04:c2:53:27:f8:1e:4b:29:03:de:6f:91:2a:33:d3: ef:cf:6d:48:3d:5c:80:0d:85:84:7b:72:35:05:87: 61:44:8e:54:78:a9:c1:78:84:0a:5d:e5:25:fe:e4: 0e:84:a6:5c:f5:64:ac:79:48:ef:84:6c:27:08:4b: 18:ae:a9:c1:97:03:bf:be:90:15:84:e6:2e:f0:4a: 63:74:3d:47:b4:ed:ba:6b:b1:7b:9f:04:69:64:c1: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:59:C6:C2:1A:7A:3C:03:67:2D:13:58:BD:0C:9D:98:FD:3A:88 X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:83:d4:a1:47:42:ef:52:74:cc:52:8b:92:27:91:1a:92:d4: b1:b4:88:31:90:5e:fb:ee:5b:d2:86:7f:c7:97:80:3b:0d:56: ce:67:62:89:ea:0c:2c:01:b3:04:db:02:6e:e0:5d:80:a4:a6: be:7d:87:f2:f7:c6:aa:8b:c8:84:ce:d8:eb:34:ae:f9:13:60: 8f:2f:ca:df:07:f2:a8:18:75:a3:f8:f7:17:b3:d4:1b:21:90: 03:c6:9f:3a:c4:6d:ee:fc:09:ec:76:a9:b5:dd:78:88:6b:db: 83:59:99:26:2f:a6:99:65:37:10:d2:4c:7e:0b:c7:e2:5d:8c: 92:cf:b9:83:99:77:38:a8:4a:73:c0:7f:2f:ae:c8:9c:4b:c9: f3:b7:11:a5:12:90:a6:d3:9f:11:21:4b:17:7c:f6:db:1f:ec: b3:2e:31:12:4f:9c:e3:8c:5a:fe:6b:71:e0:4f:e4:8b:46:2e: c3:79:b1:9c:c3:59:02:ef:57:df:54:54:94:81:e3:67:02:a8: 9d:82:c6:81:70:c8:58:d5:71:42:be:55:40:30:4d:6b:1c:9e: 76:2e:e9:89:66:7a:b5:26:be:85:ae:e9:e0:13:bd:0f:08:16: f6:9e:ee:33:7f:90:0a:58:4d:e5:77:4b:21:45:fe:f0:9d:b2: a2:8f:56:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwNDI1MDIxNDIwWhcNMjUwNTAyMDIxNDIwWjAYMRYwFAYD VQQDEw02ODBhZWZmYy05NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5a91paD7SHREtX2HlfxT3/gkA3wrVfRREro8XI7AidEvfQtuwz4jeLNXqeXx ufhqg+hBi0vVtIDsa6gjtV9EHYdEom3kmFdBlBUyWHpJCPzT6cjMV00S+8RHUObU 0vEpNsYPXTlPFFgjwGvmRi1qJbEibYwWdB16rbV965MgICO14KxI6gs5SHDkgQmm g9uY4gTD4jyFNnJ0S4cGeQ4054uD7hsEwlMn+B5LKQPeb5EqM9Pvz21IPVyADYWE e3I1BYdhRI5UeKnBeIQKXeUl/uQOhKZc9WSseUjvhGwnCEsYrqnBlwO/vpAVhOYu 8EpjdD1HtO26a7F7nwRpZMGi9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/CWcbC Gno8A2ctE1i9DJ2Y/TqIMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfg9ShR0LvUnTMUouSJ5EaktSxtIgxkF777lvShn/Hl4A7DVbOZ2KJ 6gwsAbME2wJu4F2ApKa+fYfy98aqi8iEztjrNK75E2CPL8rfB/KoGHWj+PcXs9Qb IZADxp86xG3u/Ansdqm13XiIa9uDWZkmL6aZZTcQ0kx+C8fiXYySz7mDmXc4qEpz wH8vrsicS8nztxGlEpCm058RIUsXfPbbH+yzLjEST5zjjFr+a3HgT+SLRi7DebGc w1kC71ffVFSUgeNnAqidgsaBcMhY1XFCvlVAME1rHJ52LumJZnq1Jr6FrungE70P CBb2nu4zf5AKWE3ld0shRf7wnbKij1ZZ -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:33 2025 by rpki-client