$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: LvIvrf3o+gsy1qG+/FU6pXa6mdFiWqt2FpHLBgiMgJQ= Subject key identifier: 60:A8:EC:8A:26:54:8C:5F:1E:2F:02:D5:74:E9:9B:18:E1:6B:88:06 Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 03DF Signing time: Fri 25 Apr 2025 00:18:59 +0000 Manifest this update: Fri 25 Apr 2025 00:18:58 +0000 Manifest next update: Fri 02 May 2025 00:18:58 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: 3XR9xGoifM6GxCW2XftzRmOk5f+emt3TMLmOe494T0A=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: j9zT2tbgYHNW+zQe8fJ7BxqX2WRK2n0Np1/48KzCevY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456, serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: Apr 25 00:18:58 2025 GMT Not After : May 2 00:18:58 2025 GMT Subject: CN=680ad4f3-a1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:e4:59:a9:7b:5b:b6:16:e0:28:c2:7b:11: 59:2c:87:a8:a4:08:11:15:78:55:a9:9a:b3:08:5b: 24:9b:2c:21:7a:53:9b:72:c3:82:c9:d7:b7:b3:8d: bf:77:04:c8:9d:7a:d4:9a:16:ca:c1:a1:16:ae:bd: c5:34:92:02:eb:38:8f:e0:f3:0c:02:1f:ab:c9:a5: 75:3d:69:a0:bd:a1:ce:12:d6:95:6d:ba:96:02:c5: 64:2e:cc:ea:2b:a4:88:cf:47:7e:88:9b:0a:76:52: 52:ff:ec:01:00:6f:e7:4e:cb:54:80:65:d1:69:55: e6:76:0a:d7:c7:21:2e:3d:af:75:60:d9:79:63:66: 43:a8:5a:23:b8:e7:20:36:a4:f5:00:2a:0c:53:9d: 45:7a:ac:82:db:c0:78:c2:16:00:fe:d7:e5:bf:c1: de:2d:98:ab:46:b8:5b:ed:f4:ca:c6:9a:bf:ad:e3: 95:58:50:0b:de:bc:29:b0:dd:60:53:8a:4f:58:85: e4:e8:f1:58:e5:46:d6:ed:7c:3a:14:92:b8:db:b4: cf:d4:c7:fe:dd:65:b0:0f:86:c6:ad:23:4e:dc:fc: cd:8b:3a:ed:22:91:04:92:0e:f3:05:68:2e:75:9c: ef:30:eb:90:b2:c7:43:54:9a:07:02:ad:62:fa:ea: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A8:EC:8A:26:54:8C:5F:1E:2F:02:D5:74:E9:9B:18:E1:6B:88:06 X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6f:19:aa:dd:8c:88:64:db:82:fa:40:18:89:c5:43:ee:ba: d4:79:97:24:a9:8f:6f:50:d4:60:9f:f5:47:7d:27:cf:2e:5d: 17:9a:b7:28:96:f8:c6:57:94:8f:90:ca:32:18:23:55:28:f2: bf:8b:1c:75:2b:27:88:dd:7e:a5:3d:69:7e:33:48:b7:0d:6c: a3:03:b3:86:2a:b3:9a:ae:67:e5:83:d8:fb:d4:30:f4:47:f5: 46:f8:ad:64:87:44:9b:83:40:60:15:68:26:78:03:a5:d4:0d: 5a:10:7e:db:14:cd:83:18:cf:f1:73:5e:b2:93:90:58:84:0a: b6:64:e0:be:c5:c0:28:d8:53:d5:ad:fb:5a:9d:d9:2a:80:3b: 7f:99:56:e3:26:07:f3:15:11:99:9f:95:76:9d:35:8f:fe:e9: 4e:ae:be:d7:58:21:4f:a9:5e:00:36:1e:e2:d0:d9:33:d5:b4: f7:c2:18:50:1a:92:ab:41:50:a0:b7:11:0b:dc:47:f1:3c:b0: 07:40:39:ea:cf:3b:c0:73:4c:27:11:74:e0:85:9d:f9:e8:00: 56:6b:48:c6:f4:b5:e8:f6:67:67:b9:43:ea:f8:91:1a:f5:e6: 11:e4:8b:95:96:7d:74:76:46:da:d4:78:04:78:7a:33:3f:e7: 16:06:7f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjUwNDI1MDAxODU4WhcNMjUwNTAyMDAxODU4WjAYMRYwFAYD VQQDEw02ODBhZDRmMy1hMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV7kWal7W7YW4CjCexFZLIeopAgRFXhVqZqzCFskmywhelObcsOCyde3s42/ dwTInXrUmhbKwaEWrr3FNJIC6ziP4PMMAh+ryaV1PWmgvaHOEtaVbbqWAsVkLszq K6SIz0d+iJsKdlJS/+wBAG/nTstUgGXRaVXmdgrXxyEuPa91YNl5Y2ZDqFojuOcg NqT1ACoMU51FeqyC28B4whYA/tflv8HeLZirRrhb7fTKxpq/reOVWFAL3rwpsN1g U4pPWIXk6PFY5UbW7Xw6FJK427TP1Mf+3WWwD4bGrSNO3PzNizrtIpEEkg7zBWgu dZzvMOuQssdDVJoHAq1i+ur+qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCo7Iom VIxfHi8C1XTpmxjha4gGMB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2bxmq3YyIZNuC+kAYicVD7rrUeZckqY9vUNRgn/VHfSfPLl0Xmrco lvjGV5SPkMoyGCNVKPK/ixx1KyeI3X6lPWl+M0i3DWyjA7OGKrOarmflg9j71DD0 R/VG+K1kh0Sbg0BgFWgmeAOl1A1aEH7bFM2DGM/xc16yk5BYhAq2ZOC+xcAo2FPV rftandkqgDt/mVbjJgfzFRGZn5V2nTWP/ulOrr7XWCFPqV4ANh7i0Nkz1bT3whhQ GpKrQVCgtxEL3EfxPLAHQDnqzzvAc0wnEXTghZ356ABWa0jG9LXo9mdnuUPq+JEa 9eYR5IuVln10dkba1HgEeHozP+cWBn8L -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:52 2025 by rpki-client