$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: TKf6JwsAV2Jset3l3eWvh5M8rCDhU9K/mXRcNthtlLs= Subject key identifier: 7C:B5:CA:06:DA:8B:2A:B3:34:A3:11:45:D3:A2:F0:FE:7E:BE:E7:29 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 0402 Signing time: Fri 25 Apr 2025 00:14:19 +0000 Manifest this update: Fri 25 Apr 2025 00:14:19 +0000 Manifest next update: Fri 02 May 2025 00:14:19 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: r/wSrxWJSVhFiJ5RMyiz4HAsQrHigKoZdKxcl5GlQw8=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Apr 25 00:14:19 2025 GMT Not After : May 2 00:14:19 2025 GMT Subject: CN=680ad3db-ed8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:26:18:da:2a:41:1c:a2:df:e4:9e:d5:b9: 0a:61:62:af:32:5b:97:25:31:59:2b:e7:99:55:b7: f0:18:48:99:97:74:7b:6c:0a:20:4e:b0:65:a0:0d: 16:c0:38:13:4f:07:7e:22:df:f8:33:f4:38:eb:91: a5:1a:1d:59:a2:ca:b3:7d:37:3a:a2:bb:bf:27:0e: bc:6b:8a:33:b7:20:f2:13:34:1b:aa:1e:24:bc:16: fa:2a:f2:97:45:f8:be:be:63:e0:66:b3:66:b7:f8: c0:24:48:14:88:49:98:50:4f:88:10:13:41:a5:a3: 6e:60:5f:2f:01:2e:64:3d:74:f6:a5:76:c2:4b:47: 20:6a:e9:0d:c7:a9:3c:a3:92:ad:1f:40:2f:ca:c0: 1e:d1:28:88:51:b6:00:d2:63:56:3b:13:e0:03:71: ab:e0:e1:4d:68:3b:8b:69:07:0c:2f:76:65:01:db: 58:bb:47:42:b0:28:85:80:a4:e6:9c:cc:70:75:a3: a9:ae:8e:e4:3f:1f:5c:64:90:5d:73:95:65:0b:6b: 28:f5:8f:75:dd:4e:99:6a:64:12:28:c4:ef:e5:16: 82:c9:26:ee:07:47:cd:d8:e1:c4:81:0d:f2:eb:e2: 94:67:84:ec:dc:b8:8a:ad:8a:fa:b2:3d:ee:1e:be: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B5:CA:06:DA:8B:2A:B3:34:A3:11:45:D3:A2:F0:FE:7E:BE:E7:29 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c8:be:b1:07:05:b4:f0:a6:14:94:97:98:fe:34:41:80:a6: 4d:1c:19:02:f5:c7:cc:a1:ab:b5:92:97:27:54:13:c6:02:49: bc:28:ce:25:bf:34:c6:99:75:4d:6b:b1:b7:bc:10:80:50:2f: 8f:2b:2f:07:61:66:4b:c9:c5:94:fa:95:43:fd:90:8c:18:d6: 41:cf:e9:5d:38:9b:56:35:b0:47:7e:4f:1d:10:92:67:e9:9e: a8:aa:12:84:4e:94:b6:ae:37:61:47:12:01:ae:f7:70:bc:39: 6e:0c:4e:ed:1f:de:6c:3c:73:09:3d:c6:66:e9:47:ec:85:d3: 49:fe:fc:89:6c:ee:ec:76:e6:a4:56:ef:87:22:c7:57:b3:1e: 0a:7c:30:ee:38:9d:57:c0:e0:b6:0f:7d:58:29:6a:77:cb:7f: 63:88:e3:05:94:c6:05:34:89:37:22:1e:3c:46:2a:13:a6:cd: 8c:27:36:6e:78:04:4d:8d:28:c1:c8:52:c0:af:3e:d5:18:0a: 66:95:c1:b1:a3:0f:4f:4f:2a:17:68:b7:12:2d:c3:c5:fd:59: 4b:8b:a7:a8:dc:84:43:21:0e:28:e0:fd:f9:bf:a7:60:d9:e2: ad:93:3e:ff:bc:9f:06:49:ed:08:b5:93:2f:2c:2a:59:a7:ff: 29:fc:53:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwNDI1MDAxNDE5WhcNMjUwNTAyMDAxNDE5WjAYMRYwFAYD VQQDEw02ODBhZDNkYi1lZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fkmGNoqQRyi3+Se1bkKYWKvMluXJTFZK+eZVbfwGEiZl3R7bAogTrBloA0W wDgTTwd+It/4M/Q465GlGh1ZosqzfTc6oru/Jw68a4oztyDyEzQbqh4kvBb6KvKX Rfi+vmPgZrNmt/jAJEgUiEmYUE+IEBNBpaNuYF8vAS5kPXT2pXbCS0cgaukNx6k8 o5KtH0AvysAe0SiIUbYA0mNWOxPgA3Gr4OFNaDuLaQcML3ZlAdtYu0dCsCiFgKTm nMxwdaOpro7kPx9cZJBdc5VlC2so9Y913U6ZamQSKMTv5RaCySbuB0fN2OHEgQ3y 6+KUZ4Ts3LiKrYr6sj3uHr7M4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy1ygba iyqzNKMRRdOi8P5+vucpMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6yL6xBwW08KYUlJeY/jRBgKZNHBkC9cfMoau1kpcnVBPGAkm8KM4l vzTGmXVNa7G3vBCAUC+PKy8HYWZLycWU+pVD/ZCMGNZBz+ldOJtWNbBHfk8dEJJn 6Z6oqhKETpS2rjdhRxIBrvdwvDluDE7tH95sPHMJPcZm6UfshdNJ/vyJbO7sduak Vu+HIsdXsx4KfDDuOJ1XwOC2D31YKWp3y39jiOMFlMYFNIk3Ih48RioTps2MJzZu eARNjSjByFLArz7VGApmlcGxow9PTyoXaLcSLcPF/VlLi6eo3IRDIQ4o4P35v6dg 2eKtkz7/vJ8GSe0ItZMvLCpZp/8p/FOB -----END CERTIFICATE-----Generated at Sat Apr 26 05:54:58 2025 by rpki-client