$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: aEToFO+6A1emgH/R2p6nyRIGO+gk94V65CuMGMaZLe8= Subject key identifier: E1:AF:9A:39:7A:7B:BF:C3:74:60:65:AA:0B:EF:C5:67:B7:06:56:93 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C23 Signing time: Thu 24 Apr 2025 18:33:59 +0000 Manifest this update: Thu 24 Apr 2025 18:33:58 +0000 Manifest next update: Thu 01 May 2025 18:33:58 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: /pUexk5DJI9fOhTQDeB3idIPpk1pIdOFDT8dV4qyaUk=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Apr 24 18:33:58 2025 GMT Not After : May 1 18:33:58 2025 GMT Subject: CN=680a8416-fbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:5e:44:a8:ec:1c:96:3a:ba:2a:eb:86:63: 5c:46:82:4f:62:e3:08:63:be:81:41:78:e5:20:d1: 3c:c7:21:cf:70:fb:39:c9:70:c2:a6:38:56:f1:e8: 6d:60:16:2e:b9:d7:bd:3c:c9:79:9a:07:45:1a:28: 58:7f:5a:24:d4:40:ca:87:b7:0d:af:25:47:d9:b3: 7f:49:23:04:ad:f9:d4:28:98:9a:55:51:58:5d:96: 43:4a:23:56:0b:98:cd:63:77:1f:c4:13:aa:46:c5: e5:61:cc:43:c8:23:56:da:6a:b6:ea:ac:14:f2:1b: 5a:10:e6:aa:a8:61:bc:a9:58:d0:10:56:16:17:03: dc:ea:81:5b:be:4f:0d:24:af:b8:67:8e:d5:42:97: 2d:ef:5c:1a:c9:96:e7:36:5b:eb:e9:c1:83:da:96: 0c:ab:cd:80:77:69:cb:66:9a:a7:68:de:32:e0:f7: ee:2f:f2:34:e6:c8:af:6f:7b:d8:c1:44:11:3e:46: 69:59:41:32:ae:06:c9:c5:95:3a:84:89:67:39:26: c6:51:1a:5c:1a:f9:af:c2:b0:55:40:1f:ad:fa:69: f9:e9:79:9e:1f:ca:11:c0:ac:fd:dc:e0:f0:85:2d: ee:be:b5:74:68:36:70:f8:ea:26:25:55:aa:fa:a6: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:9A:39:7A:7B:BF:C3:74:60:65:AA:0B:EF:C5:67:B7:06:56:93 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:28:0b:b0:a4:c7:ef:6e:b2:f8:29:82:5a:06:9e:97:e8:11: 33:5c:1e:c4:8a:24:8f:4b:2a:e3:63:71:7b:6e:49:65:0d:b9: f1:7c:3d:50:ee:eb:1d:51:ec:da:1e:07:98:d2:a5:ce:69:c6: 68:fc:98:a6:ac:74:c9:d3:b7:71:4e:03:8b:18:c2:8a:7a:77: 7c:b0:65:0b:12:e3:10:1f:bc:fa:5e:51:37:ba:06:bc:e3:c5: ad:77:d8:9e:16:67:04:99:af:90:2c:b7:c6:4d:81:86:0e:ac: cd:54:c3:0e:9a:00:43:26:e4:58:e8:84:aa:7d:04:2c:00:45: 7c:6f:ac:13:95:7b:37:f1:06:b5:38:78:69:50:90:3a:e1:d6: 3a:d3:da:e7:4e:1a:8b:0a:f8:26:a6:39:31:45:ca:0c:67:5a: d6:a1:cc:bc:fa:1b:5c:c6:e8:3f:d5:7d:ea:10:9f:ec:51:2f: 2b:ca:59:2d:55:ad:7f:02:1a:0c:23:83:cf:09:0c:56:4b:18: d8:28:03:3a:86:2f:67:ff:28:cb:71:0d:36:bb:3b:12:33:0a: 32:8b:13:05:d2:3b:67:8e:e2:6c:1a:29:38:8e:60:2c:e5:62: de:05:3b:f9:3c:26:96:02:92:d4:a8:e4:d5:cd:70:72:6d:81: f6:f9:3a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNDI0MTgzMzU4WhcNMjUwNTAxMTgzMzU4WjAYMRYwFAYD VQQDEw02ODBhODQxNi1mYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot9eRKjsHJY6uirrhmNcRoJPYuMIY76BQXjlINE8xyHPcPs5yXDCpjhW8eht YBYuude9PMl5mgdFGihYf1ok1EDKh7cNryVH2bN/SSMErfnUKJiaVVFYXZZDSiNW C5jNY3cfxBOqRsXlYcxDyCNW2mq26qwU8htaEOaqqGG8qVjQEFYWFwPc6oFbvk8N JK+4Z47VQpct71wayZbnNlvr6cGD2pYMq82Ad2nLZpqnaN4y4PfuL/I05sivb3vY wUQRPkZpWUEyrgbJxZU6hIlnOSbGURpcGvmvwrBVQB+t+mn56XmeH8oRwKz93ODw hS3uvrV0aDZw+OomJVWq+qbD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGvmjl6 e7/DdGBlqgvvxWe3BlaTMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVKAuwpMfvbrL4KYJaBp6X6BEzXB7EiiSPSyrjY3F7bkllDbnxfD1Q 7usdUezaHgeY0qXOacZo/JimrHTJ07dxTgOLGMKKend8sGULEuMQH7z6XlE3uga8 48Wtd9ieFmcEma+QLLfGTYGGDqzNVMMOmgBDJuRY6ISqfQQsAEV8b6wTlXs38Qa1 OHhpUJA64dY609rnThqLCvgmpjkxRcoMZ1rWocy8+htcxug/1X3qEJ/sUS8rylkt Va1/AhoMI4PPCQxWSxjYKAM6hi9n/yjLcQ02uzsSMwoyixMF0jtnjuJsGik4jmAs 5WLeBTv5PCaWApLUqOTVzXBybYH2+Toi -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:42 2025 by rpki-client