$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: rvQmWceNYm407T9gLiL8yPprdCSjsI6gLzzbRitx3Lg= Subject key identifier: 5F:53:E4:CB:B1:9D:84:EC:BA:9F:EE:D1:9A:6D:5A:27:A9:55:8B:45 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03BB Signing time: Fri 25 Apr 2025 00:26:48 +0000 Manifest this update: Fri 25 Apr 2025 00:26:48 +0000 Manifest next update: Fri 02 May 2025 00:26:48 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: ifzlSdUFJEZydFqlTOqgoleyQhOGVa0RLscN50HKw4s=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Apr 25 00:26:48 2025 GMT Not After : May 2 00:26:48 2025 GMT Subject: CN=680ad6c8-c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:69:a8:65:ea:e9:f9:2d:2c:04:2f:57:05: d1:8c:f7:31:bf:b4:2e:5e:78:ca:45:29:34:10:bc: 4c:8a:e1:38:6b:7c:33:b1:ef:04:58:9c:4e:02:c7: ff:3a:32:a6:1a:0d:cc:61:63:71:fb:bc:e5:df:78: df:54:aa:7d:3d:6a:1e:5d:f0:4c:bc:be:28:b2:67: b3:e8:39:fd:de:4c:4e:1f:02:57:be:54:3c:55:ba: b9:f1:f3:94:55:c3:d3:cc:d6:79:93:be:9a:6c:2d: 8c:ec:dd:d8:16:c4:25:2f:16:d0:c4:45:82:c1:8a: 10:49:a5:52:35:06:d7:e6:7e:7d:2c:0f:19:28:e9: 9f:14:29:b2:67:4d:2c:f0:06:29:cf:41:3b:6b:ae: 8a:3c:fa:3e:5a:45:7e:2c:42:da:b5:d4:f3:b6:d7: 37:cf:e0:e6:9e:25:d2:2c:af:71:5e:95:6f:f9:50: 86:83:ee:d5:2f:02:15:f8:b1:fb:fe:f0:83:fa:81: db:29:9d:79:bd:68:cb:dc:24:dd:b0:c6:24:c9:ac: d0:41:3f:b9:b8:82:f9:45:57:66:a6:42:e4:4f:a2: 1d:bb:b8:c1:03:6f:23:6a:3f:9d:cc:f9:8c:a5:71: 67:5f:55:8c:4c:b1:db:38:5d:0b:6a:b9:8e:b3:c7: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:53:E4:CB:B1:9D:84:EC:BA:9F:EE:D1:9A:6D:5A:27:A9:55:8B:45 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:7f:00:f2:66:ee:05:8c:60:ed:73:e2:e0:26:7e:a8:9d:9f: 24:13:9e:83:c9:1d:ff:16:9f:7c:aa:48:d7:13:a2:97:9c:3d: 92:3a:d1:99:7e:6a:c5:51:70:1f:56:e3:e9:c2:61:4d:83:93: 20:c9:b7:ec:dd:bc:db:1a:1a:a9:8f:0c:ab:f0:a4:75:f8:06: d8:83:61:19:d8:fb:21:95:17:39:fe:56:1f:51:63:25:07:64: 5e:4c:86:91:4c:53:33:c4:d8:7b:93:3a:48:c7:26:f5:1c:9d: 1a:9d:0a:18:ea:fe:ee:d7:db:59:07:20:39:1c:8d:d2:55:14: bb:bb:fd:b3:a0:31:d1:96:00:a7:02:86:d2:8c:82:63:80:35: 18:05:4d:6b:ea:88:b0:e3:73:b3:b5:5d:73:95:22:b3:f1:7d: 84:0d:a0:93:e2:63:c7:92:e7:f4:42:5c:5e:5c:c7:d5:c7:5c: 1a:70:80:18:da:70:11:a4:e0:d7:5f:99:65:a3:7e:ee:c8:95: a8:af:27:8a:34:d4:6f:ca:c0:cb:34:da:49:fc:e5:69:1c:b8: 47:1f:6f:e2:45:0b:59:99:bf:07:fa:81:e3:6a:b0:1c:80:dc: 9e:68:e1:1d:37:e8:ae:8d:b3:c8:a1:3d:c0:7e:aa:e0:5b:32: 02:2c:82:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNDI1MDAyNjQ4WhcNMjUwNTAyMDAyNjQ4WjAYMRYwFAYD VQQDEw02ODBhZDZjOC1jNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NNpqGXq6fktLAQvVwXRjPcxv7QuXnjKRSk0ELxMiuE4a3wzse8EWJxOAsf/ OjKmGg3MYWNx+7zl33jfVKp9PWoeXfBMvL4osmez6Dn93kxOHwJXvlQ8Vbq58fOU VcPTzNZ5k76abC2M7N3YFsQlLxbQxEWCwYoQSaVSNQbX5n59LA8ZKOmfFCmyZ00s 8AYpz0E7a66KPPo+WkV+LELatdTzttc3z+DmniXSLK9xXpVv+VCGg+7VLwIV+LH7 /vCD+oHbKZ15vWjL3CTdsMYkyazQQT+5uIL5RVdmpkLkT6Idu7jBA28jaj+dzPmM pXFnX1WMTLHbOF0LarmOs8fvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9T5Mux nYTsup/u0ZptWiepVYtFMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFfwDyZu4FjGDtc+LgJn6onZ8kE56DyR3/Fp98qkjXE6KXnD2SOtGZ fmrFUXAfVuPpwmFNg5Mgybfs3bzbGhqpjwyr8KR1+AbYg2EZ2PshlRc5/lYfUWMl B2ReTIaRTFMzxNh7kzpIxyb1HJ0anQoY6v7u19tZByA5HI3SVRS7u/2zoDHRlgCn AobSjIJjgDUYBU1r6oiw43OztV1zlSKz8X2EDaCT4mPHkuf0QlxeXMfVx1wacIAY 2nARpODXX5llo37uyJWoryeKNNRvysDLNNpJ/OVpHLhHH2/iRQtZmb8H+oHjarAc gNyeaOEdN+iujbPIoT3AfqrgWzICLIJk -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:38 2025 by rpki-client