$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: w7mMXgYtbATah1ZvXuOvfZn/wFybOCrO7cY7AAcPRhI= Subject key identifier: 1E:ED:9B:2B:CA:77:AB:F1:CF:09:C0:9B:59:2E:07:AF:02:E7:72:D2 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D31 Signing time: Thu 24 Apr 2025 17:58:55 +0000 Manifest this update: Thu 24 Apr 2025 17:58:55 +0000 Manifest next update: Thu 01 May 2025 17:58:55 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: 6t5HpFvH9u9Q+/iUTWAIlhgrXMJMSW1R70rbOPP0fXs=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Apr 24 17:58:55 2025 GMT Not After : May 1 17:58:55 2025 GMT Subject: CN=680a7bdf-2fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:bc:93:0d:b6:6f:4a:de:e4:fa:9d:b8:eb: b6:7d:38:ae:8b:af:2f:60:c5:cd:b2:b3:53:03:16: a0:82:e9:b0:43:52:5d:e5:05:b0:f8:3d:28:a6:05: 07:e0:b8:c4:99:6d:02:74:ed:0f:89:18:e4:62:db: fe:f9:25:65:a4:3a:7f:cd:af:e9:e1:6d:35:08:b3: ac:dc:05:49:53:e6:7b:67:2f:06:0e:a6:11:2e:84: 36:b0:12:3e:23:0b:6c:45:08:03:47:ef:50:7e:7b: 74:57:88:49:8c:fb:60:cb:38:fc:74:fa:81:b6:01: 02:e3:ac:c9:94:d5:fd:f2:dc:50:ea:37:d1:3e:a7: f8:a4:80:87:53:de:51:8b:23:e7:55:f9:ee:df:25: 56:5d:0a:54:48:a9:74:eb:01:51:f8:20:ac:02:ae: b1:97:d0:f7:af:86:d6:a3:28:6f:df:0d:11:eb:e2: aa:4f:fb:6c:5c:f2:8d:a3:a0:f4:b2:63:d5:88:e2: bf:96:e5:c6:79:70:f4:c8:6d:9f:95:2d:8b:30:77: 5d:58:3f:64:7e:07:85:6b:60:84:1e:49:7e:a8:94: 00:b3:24:48:18:e5:b4:01:4f:ec:da:3d:c5:05:05: f5:ec:b1:1b:e2:b9:c2:2b:c2:f0:a5:c4:58:53:68: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:9B:2B:CA:77:AB:F1:CF:09:C0:9B:59:2E:07:AF:02:E7:72:D2 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:96:02:92:cc:cd:c2:6f:56:0d:28:15:7f:b5:9e:27:de: 7c:8f:ef:59:89:db:1d:e4:f4:6f:46:69:b5:bf:22:2b:61:47: e5:ed:bd:96:b3:cc:0b:cb:e1:37:22:98:48:60:39:cd:14:e7: 49:65:32:2f:62:d4:05:b1:50:f4:79:ef:13:77:28:28:c9:5f: 79:a9:2e:db:47:bd:2a:f4:cc:9e:07:d4:0a:c5:89:64:91:ab: 77:a6:f7:41:03:3e:ea:eb:b9:24:c0:a0:66:7a:ad:6c:c3:83: 9a:d2:a5:fc:f5:7e:b3:a0:3e:ed:9c:45:59:17:33:ac:d1:e2: a1:81:f6:b5:f9:6b:87:bc:20:14:32:17:28:24:ce:2e:8c:f7: 96:13:26:65:65:e4:f5:c5:b3:d5:2d:b6:fa:c7:6f:0c:2b:0e: 68:93:b3:9f:ab:69:05:8a:1b:38:ee:8a:1a:a4:18:d6:d0:41: 16:32:7f:03:b2:5c:6c:27:e7:b0:20:e2:c1:ce:06:7a:eb:d6: d5:65:33:1b:fc:4e:b1:e9:28:45:05:bf:b6:f0:14:25:73:d2: dc:fe:4c:a5:18:fd:40:3c:69:fa:2f:03:82:c0:4b:6e:58:47: 30:40:d3:80:ea:f8:0d:f7:7f:3f:de:51:b3:21:34:df:84:7f: 52:48:cc:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwNDI0MTc1ODU1WhcNMjUwNTAxMTc1ODU1WjAYMRYwFAYD VQQDEw02ODBhN2JkZi0yZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+K8kw22b0re5PqduOu2fTiui68vYMXNsrNTAxaggumwQ1Jd5QWw+D0opgUH 4LjEmW0CdO0PiRjkYtv++SVlpDp/za/p4W01CLOs3AVJU+Z7Zy8GDqYRLoQ2sBI+ IwtsRQgDR+9Qfnt0V4hJjPtgyzj8dPqBtgEC46zJlNX98txQ6jfRPqf4pICHU95R iyPnVfnu3yVWXQpUSKl06wFR+CCsAq6xl9D3r4bWoyhv3w0R6+KqT/tsXPKNo6D0 smPViOK/luXGeXD0yG2flS2LMHddWD9kfgeFa2CEHkl+qJQAsyRIGOW0AU/s2j3F BQX17LEb4rnCK8LwpcRYU2jpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7tmyvK d6vxzwnAm1kuB68C53LSMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlHZYCkszNwm9WDSgVf7WeJ958j+9Zidsd5PRvRmm1vyIrYUfl7b2W s8wLy+E3IphIYDnNFOdJZTIvYtQFsVD0ee8TdygoyV95qS7bR70q9MyeB9QKxYlk kat3pvdBAz7q67kkwKBmeq1sw4Oa0qX89X6zoD7tnEVZFzOs0eKhgfa1+WuHvCAU MhcoJM4ujPeWEyZlZeT1xbPVLbb6x28MKw5ok7Ofq2kFihs47ooapBjW0EEWMn8D slxsJ+ewIOLBzgZ669bVZTMb/E6x6ShFBb+28BQlc9Lc/kylGP1APGn6LwOCwEtu WEcwQNOA6vgN938/3lGzITTfhH9SSMzX -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:06 2025 by rpki-client