$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: Xn8dU4dzIvJfbP+6OWuXqgqbe5L86KajtrTvqTfANGc= Subject key identifier: F0:82:1F:4A:FE:21:2F:60:15:AA:3C:B2:3D:F0:2A:E7:2D:50:DA:07 Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 0160 Signing time: Fri 25 Apr 2025 03:08:57 +0000 Manifest this update: Fri 25 Apr 2025 03:08:56 +0000 Manifest next update: Fri 02 May 2025 03:08:56 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: RnO0y//2m6IQO9JKF0x7QC9CLM1ttVfdMYCWG254bjY=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: 0rI/XzwPRIVwwabd+r6TwmOXeplcoAxng7nnkYKOe44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Apr 25 03:08:56 2025 GMT Not After : May 2 03:08:56 2025 GMT Subject: CN=680afcc9-d8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:7e:b0:dc:65:1d:20:c6:21:66:62:4e:3d: b7:6f:c5:46:03:8b:36:69:6c:17:30:c1:00:62:bd: 1b:11:5c:e3:bf:2d:e8:b0:57:aa:19:b6:70:98:d6: de:99:54:3c:b2:a7:3c:c7:68:9d:53:e3:e7:92:9f: 45:27:3f:f0:00:49:49:cc:23:d1:d6:c5:73:0e:b0: 53:69:23:3e:6c:b6:07:ca:29:b0:ed:29:ce:70:cb: 89:de:4c:13:cf:b6:3a:17:0d:a9:12:82:3a:b5:33: 49:9f:85:1c:12:aa:50:1b:e0:c5:64:4c:51:22:00: e7:1e:02:8f:17:95:2b:13:ea:fe:8a:60:a4:38:9e: 94:e4:18:9e:b5:02:53:29:3d:27:8a:3d:02:a8:48: 5a:76:84:3d:a0:0e:84:19:e6:6c:dd:5f:ac:c5:15: 89:27:7a:a9:0a:67:22:9f:e6:d6:5f:01:c4:2b:85: b9:7c:bc:88:55:01:1f:bf:3d:20:ec:4b:cd:4a:c8: 2f:11:d7:1a:52:eb:4c:9a:12:06:95:76:4b:98:d2: fa:1b:2b:65:91:bb:f8:20:3b:5f:ea:c9:4f:2b:fc: e1:37:80:27:d3:7a:ea:c7:ab:82:56:66:70:4d:14: 28:a7:e8:5e:2c:72:8a:52:93:b4:93:23:3a:ab:15: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:1F:4A:FE:21:2F:60:15:AA:3C:B2:3D:F0:2A:E7:2D:50:DA:07 X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c3:5a:8b:1a:85:c3:5e:6d:b7:51:bb:97:1c:6c:36:1f:4d: 76:a9:10:a7:7f:a7:b6:34:e8:2d:2e:08:2a:13:ee:92:63:dc: b7:5b:be:7d:ac:d1:96:6c:b9:d7:76:4f:12:46:db:90:34:2c: f7:c9:3e:d3:87:63:34:b2:1b:43:71:b0:f3:24:b7:f9:46:c3: 7c:06:b5:03:aa:62:1e:81:a5:bc:e3:9d:33:cd:91:83:90:22: ac:a2:3e:2d:08:1f:08:88:e1:92:c5:93:02:34:89:a5:44:3f: 92:88:3c:58:9e:36:2a:6c:32:b8:09:86:c1:88:36:08:f7:b1: b2:61:8b:22:cd:80:ea:17:17:b1:e2:77:45:35:d8:97:6f:fa: e5:fe:b2:af:2a:ba:4c:a2:f8:1b:12:e4:6d:7e:85:a0:ce:96: fa:34:91:78:fd:5f:c0:53:30:49:13:00:8b:76:24:ad:f6:01: 1f:fa:ee:71:47:ff:e0:8b:a8:96:50:40:af:98:83:36:ef:b8: 43:11:22:ea:45:6d:8d:73:5e:b9:1f:d9:d8:b9:21:14:55:da: 7c:78:27:5f:62:c0:54:50:94:76:69:b9:2b:e4:e2:df:c8:c1: f1:e8:38:40:56:30:31:b3:2a:59:c0:d5:6d:f3:3f:be:51:4d: 17:02:1d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwNDI1MDMwODU2WhcNMjUwNTAyMDMwODU2WjAYMRYwFAYD VQQDEw02ODBhZmNjOS1kOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZh+sNxlHSDGIWZiTj23b8VGA4s2aWwXMMEAYr0bEVzjvy3osFeqGbZwmNbe mVQ8sqc8x2idU+Pnkp9FJz/wAElJzCPR1sVzDrBTaSM+bLYHyimw7SnOcMuJ3kwT z7Y6Fw2pEoI6tTNJn4UcEqpQG+DFZExRIgDnHgKPF5UrE+r+imCkOJ6U5BietQJT KT0nij0CqEhadoQ9oA6EGeZs3V+sxRWJJ3qpCmcin+bWXwHEK4W5fLyIVQEfvz0g 7EvNSsgvEdcaUutMmhIGlXZLmNL6Gytlkbv4IDtf6slPK/zhN4An03rqx6uCVmZw TRQop+heLHKKUpO0kyM6qxXyBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCCH0r+ IS9gFao8sj3wKuctUNoHMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5w1qLGoXDXm23UbuXHGw2H012qRCnf6e2NOgtLggqE+6SY9y3W759 rNGWbLnXdk8SRtuQNCz3yT7Th2M0shtDcbDzJLf5RsN8BrUDqmIegaW8450zzZGD kCKsoj4tCB8IiOGSxZMCNImlRD+SiDxYnjYqbDK4CYbBiDYI97GyYYsizYDqFxex 4ndFNdiXb/rl/rKvKrpMovgbEuRtfoWgzpb6NJF4/V/AUzBJEwCLdiSt9gEf+u5x R//gi6iWUECvmIM277hDESLqRW2Nc165H9nYuSEUVdp8eCdfYsBUUJR2abkr5OLf yMHx6DhAVjAxsypZwNVt8z++UU0XAh1a -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:58 2025 by rpki-client