$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: ZAIdnFvj7KExTeJmg900woAB3F/F/yCFRoseVlRF+Go= Subject key identifier: 54:FC:AC:33:60:77:7D:A4:DE:00:FB:04:79:6F:6F:61:85:9D:A0:CC Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 01DD Signing time: Tue 15 Apr 2025 01:47:12 +0000 Manifest this update: Tue 15 Apr 2025 01:47:11 +0000 Manifest next update: Tue 22 Apr 2025 01:47:11 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: cDBV1mjxOyf2DesEUM0MC6lmGDzfLttQ0VHrVAie8gw=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Apr 15 01:47:11 2025 GMT Not After : Apr 22 01:47:11 2025 GMT Subject: CN=67fdba9f-a07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:28:d9:df:2c:fb:ad:29:c5:5e:e2:0e:64: 5c:80:28:e5:95:7e:cf:6a:1e:95:af:97:90:c8:0f: 07:fe:c0:2f:57:ca:dd:c9:53:98:96:8c:a2:52:fd: ec:79:48:84:93:1f:a6:63:eb:6e:84:e0:eb:00:60: ac:14:c3:04:8c:4b:71:05:b6:1b:77:36:87:93:aa: 95:b1:f6:31:a3:4b:52:2b:5c:ff:f1:b1:d5:c9:ce: 69:4c:6e:16:9b:a9:1c:6a:6b:94:31:b3:b4:05:39: 01:8d:cf:48:78:2b:f5:2c:18:d7:ce:60:81:07:6f: f8:38:0f:5b:9d:bc:4d:9e:df:24:1f:ba:b8:35:37: 42:09:89:fa:87:02:d2:02:8c:e7:9b:18:e3:8b:05: de:82:43:53:82:57:1b:bf:0c:c2:9d:43:a2:5f:8d: fd:b9:88:13:27:ae:5a:fc:ad:a0:5c:41:98:b1:93: 8f:98:cb:b2:52:94:42:e6:71:09:c0:e4:d4:f0:f5: 22:eb:a1:95:a1:30:56:d9:a1:90:92:ea:42:ca:de: 65:42:43:1b:5b:db:f9:87:5b:ed:0b:f3:b4:fa:4e: 08:c5:1d:61:50:72:f3:7f:bd:2d:7b:c8:b5:c9:eb: 8e:02:8a:80:e8:ce:57:57:d3:6d:9c:42:31:77:bb: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FC:AC:33:60:77:7D:A4:DE:00:FB:04:79:6F:6F:61:85:9D:A0:CC X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a0:51:d0:ce:8f:4d:e9:a2:02:fd:2b:00:63:0d:0d:cf:46: 90:b8:2a:e2:d6:8a:fc:e9:4e:6a:9b:53:c7:42:31:fb:75:28: fd:48:7f:11:a6:df:1c:23:48:07:a6:8a:57:30:87:38:bf:82: 65:cb:8f:9d:8e:40:d2:a6:87:64:8a:0f:94:63:b7:4a:ca:35: 3b:31:60:8f:cf:6e:82:b6:dd:f1:be:53:ff:5e:4c:95:0b:bd: 2f:77:51:d5:e9:a1:5e:18:32:32:7a:1f:23:0b:e6:3a:d8:5e: e2:1b:10:36:98:10:4b:67:4e:4e:c6:0a:d4:9b:a1:85:5a:5b: 11:cb:ba:40:a5:b7:97:e2:d4:7b:71:82:28:8c:a3:ac:b1:fe: c6:0c:05:7f:ef:b1:ff:ba:0a:a7:64:00:5f:80:72:11:b5:e2: ec:39:d5:24:f3:ce:85:40:5d:60:eb:4e:02:8c:69:c1:cd:d1: c3:4a:55:7c:f2:3f:a1:ff:da:01:a3:6d:44:a1:c8:ac:3f:d6: c7:9a:ee:0c:4e:7d:0f:44:f0:02:c9:9d:8c:00:0c:d4:25:47: 91:69:91:5d:a7:d6:23:17:00:6b:42:91:3b:6a:76:f8:a9:14: 1c:23:b5:5a:a9:99:01:d8:8a:f0:fd:35:f7:2f:e2:f1:5c:5f: 83:6d:9a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUwNDE1MDE0NzExWhcNMjUwNDIyMDE0NzExWjAYMRYwFAYD VQQDEw02N2ZkYmE5Zi1hMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+oo2d8s+60pxV7iDmRcgCjllX7Pah6Vr5eQyA8H/sAvV8rdyVOYloyiUv3s eUiEkx+mY+tuhODrAGCsFMMEjEtxBbYbdzaHk6qVsfYxo0tSK1z/8bHVyc5pTG4W m6kcamuUMbO0BTkBjc9IeCv1LBjXzmCBB2/4OA9bnbxNnt8kH7q4NTdCCYn6hwLS AoznmxjjiwXegkNTglcbvwzCnUOiX439uYgTJ65a/K2gXEGYsZOPmMuyUpRC5nEJ wOTU8PUi66GVoTBW2aGQkupCyt5lQkMbW9v5h1vtC/O0+k4IxR1hUHLzf70te8i1 yeuOAoqA6M5XV9NtnEIxd7uHbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT8rDNg d32k3gD7BHlvb2GFnaDMMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYoFHQzo9N6aIC/SsAYw0Nz0aQuCri1or86U5qm1PHQjH7dSj9SH8R pt8cI0gHpopXMIc4v4Jly4+djkDSpodkig+UY7dKyjU7MWCPz26Ctt3xvlP/XkyV C70vd1HV6aFeGDIyeh8jC+Y62F7iGxA2mBBLZ05OxgrUm6GFWlsRy7pApbeX4tR7 cYIojKOssf7GDAV/77H/ugqnZABfgHIRteLsOdUk886FQF1g604CjGnBzdHDSlV8 8j+h/9oBo21EocisP9bHmu4MTn0PRPACyZ2MAAzUJUeRaZFdp9YjFwBrQpE7anb4 qRQcI7VaqZkB2Irw/TX3L+LxXF+DbZrx -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:03 2025 by rpki-client