$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json) Hash identifier: 7JGyk0Vt4iH6KmQjBwolNHJZV7MHuR2lwhJgqOvyF8s= Subject key identifier: A3:A8:8B:8A:BA:7E:8D:FD:73:23:A3:A1:48:07:59:CD:AC:5A:16:05 Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft Manifest number: 7C Signing time: Sat 05 Apr 2025 05:59:14 +0000 Manifest this update: Sat 05 Apr 2025 05:59:13 +0000 Manifest next update: Sat 12 Apr 2025 05:59:13 +0000 Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: GpVRS2TKM7fRQMYbkF9O3qGweLhhpT2mIF98RVMAD4I=) 2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: tP/YOIdnoY7zTO5p4ZVWJihHDwAVW3mBLrg6H6OaTlM=) 3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: AbR4JwNeIxvK28YKeU+rC69Mel7G0dy68L3LDpPyx/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD08 Validity Not Before: Apr 5 05:59:13 2025 GMT Not After : Apr 12 05:59:13 2025 GMT Subject: CN=67f0c6b2-222d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:d3:25:56:31:2c:35:b8:0b:ac:86:e6:11: eb:fb:6c:06:52:a5:93:f2:de:47:23:92:24:bb:f2: 00:d8:8d:a3:f7:cb:c2:04:2d:f4:95:5e:3f:0a:c0: af:e9:85:d8:61:57:10:9f:a1:3d:e5:76:32:57:e0: 6f:17:26:89:19:79:ec:56:f0:ec:1e:3c:94:7c:e2: f3:09:45:d6:82:ab:93:cd:fa:e7:df:a4:ee:15:d2: c6:7d:fd:1f:ed:c9:ac:12:32:f1:9b:02:69:a1:83: 9b:a1:7a:4a:d4:5f:06:b4:38:71:9a:7e:37:3d:0c: 14:18:6c:53:92:53:2b:17:aa:54:c5:d4:bf:af:17: 80:7c:4c:cd:7f:84:df:e2:78:51:1d:64:7a:38:e7: 28:e2:14:af:0d:5c:d5:93:5f:d8:13:4f:0e:ad:c2: 6d:79:7d:9d:34:1a:44:32:c6:6f:4a:89:70:bb:06: 37:c7:5e:a1:df:2f:e6:0e:69:bb:06:9c:d3:96:7b: 92:d2:02:f4:11:e9:aa:77:ff:2f:df:63:5c:48:67: d7:ad:8d:4c:11:07:f3:26:ec:06:4e:bb:d1:f0:ad: 27:87:ea:45:5d:cf:44:f9:52:a0:4a:35:df:5c:35: ce:0a:bc:57:1f:40:1f:de:02:db:af:c5:97:90:60: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:8B:8A:BA:7E:8D:FD:73:23:A3:A1:48:07:59:CD:AC:5A:16:05 X509v3 Authority Key Identifier: keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3c:d7:2a:cf:ae:22:77:b6:8c:12:cb:a6:fb:27:21:5a:74: 84:43:0e:59:a3:13:53:28:af:c2:d2:b5:90:25:48:f7:da:b9: 13:48:3c:b8:08:b4:d6:49:86:9b:1f:24:ac:64:2f:57:3e:e6: 1b:69:da:c1:c8:15:ff:1b:33:d5:3b:5d:48:84:0d:a9:25:f9: a1:da:c4:64:a2:0a:91:1f:38:fe:f6:11:21:9e:3b:20:33:41: 5e:bb:3e:f9:22:bb:79:c2:86:2e:fb:ab:20:3a:b0:05:bc:5a: af:19:e9:1b:c5:38:33:4f:cc:81:16:66:b5:c5:9a:88:1f:29: 65:e7:1e:69:b2:c2:27:2b:ec:cc:0e:f0:60:04:ed:91:18:b6: da:91:69:d9:8e:53:ca:e1:0f:58:c4:7d:45:85:0d:f4:26:54: 47:b8:7b:d3:7a:a3:70:0f:b9:dc:7f:d1:d8:05:7e:77:5c:27: 4a:0d:18:00:15:52:75:55:a8:16:5a:24:d1:d4:19:ad:a3:7e: 35:16:d9:b2:15:16:00:a1:22:a9:82:d8:44:4a:73:d6:52:7f: 51:77:6b:3c:81:b2:5b:13:1d:5a:f2:31:6a:b9:3c:ac:70:f3: c4:10:37:f9:82:99:89:d5:a1:d2:d6:ff:48:f8:7b:3b:e6:e1: d9:da:83:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REQwODExMC8GA1UEBRMoNjJBQzFCQjk1ODBBNzExOTgxOUU3QjZCNkVCMkMzNTE1 MzQ3ODdGRDAeFw0yNTA0MDUwNTU5MTNaFw0yNTA0MTIwNTU5MTNaMBgxFjAUBgNV BAMTDTY3ZjBjNmIyLTIyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDef9MlVjEsNbgLrIbmEev7bAZSpZPy3kcjkiS78gDYjaP3y8IELfSVXj8KwK/p hdhhVxCfoT3ldjJX4G8XJokZeexW8OwePJR84vMJRdaCq5PN+uffpO4V0sZ9/R/t yawSMvGbAmmhg5uhekrUXwa0OHGafjc9DBQYbFOSUysXqlTF1L+vF4B8TM1/hN/i eFEdZHo45yjiFK8NXNWTX9gTTw6twm15fZ00GkQyxm9KiXC7BjfHXqHfL+YOabsG nNOWe5LSAvQR6ap3/y/fY1xIZ9etjUwRB/Mm7AZOu9HwrSeH6kVdz0T5UqBKNd9c Nc4KvFcfQB/eAtuvxZeQYPQBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo6iLirp+ jf1zI6OhSAdZzaxaFgUwHwYDVR0jBBgwFoAUYqwbuVgKcRmBnntrbrLDUVNHh/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERDA4LzlBNUZCQjYyNUIx OTExRUZCRUQwQzQ3QUM0RjlBRTAyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXF3YnVWZ0tjUm1Cbm50cmJyTERVVk5IaF8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RDA4LzlBNUZCQjYyNUIxOTExRUZCRUQwQzQ3QUM0RjlBRTAyL1lxd2J1VmdLY1Jt Qm5udHJickxEVVZOSGhfMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFM81yrPriJ3towSy6b7JyFadIRDDlmjE1Mor8LStZAlSPfauRNIPLgI tNZJhpsfJKxkL1c+5htp2sHIFf8bM9U7XUiEDakl+aHaxGSiCpEfOP72ESGeOyAz QV67Pvkiu3nChi77qyA6sAW8Wq8Z6RvFODNPzIEWZrXFmogfKWXnHmmywicr7MwO 8GAE7ZEYttqRadmOU8rhD1jEfUWFDfQmVEe4e9N6o3APudx/0dgFfndcJ0oNGAAV UnVVqBZaJNHUGa2jfjUW2bIVFgChIqmC2ERKc9ZSf1F3azyBslsTHVryMWq5PKxw 88QQN/mCmYnVodLW/0j4ezvm4dnagzI= -----END CERTIFICATE-----Generated at Sun Apr 6 14:23:05 2025 by rpki-client