$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: DfWuKRT3SbP7VNO2kKyvIrxC26iqeCfIx7teBQdRrC8= Subject key identifier: 6D:A9:FE:67:BF:95:F2:2B:4B:94:D3:DD:6E:34:33:49:3B:CD:14:82 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 1036 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 1036 Signing time: Wed 16 Apr 2025 17:23:03 +0000 Manifest this update: Wed 16 Apr 2025 17:23:03 +0000 Manifest next update: Wed 23 Apr 2025 17:23:03 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: 5QcP5RDKumKrFDy3ElOJ95pBDO2M7v9FC2cznJO5h+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4150 (0x1036) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Apr 16 17:23:03 2025 GMT Not After : Apr 23 17:23:03 2025 GMT Subject: CN=67ffe777-63b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:f5:bd:e9:27:c0:c3:36:9d:b4:99:19:96: ad:7c:a7:34:0a:9b:94:60:36:6f:8b:1c:d0:bb:a9: cb:45:b0:8c:4f:11:d9:90:6f:0f:10:14:3e:20:e5: f6:1e:31:8a:67:f2:c0:5d:ac:97:0c:47:3b:fa:b2: b6:be:48:ed:12:9a:e3:a9:2b:55:b2:51:d6:0e:61: ef:57:d5:44:a8:1d:c9:2f:5f:32:34:a2:42:38:8f: 3d:cd:8d:be:07:7d:a3:a6:3c:aa:74:23:e6:27:6f: ee:fd:6e:f0:fe:66:c1:30:c0:82:57:65:3e:f3:a5: e9:84:16:23:dc:7e:ca:40:a0:88:f4:ef:ee:66:4e: 3e:d3:5b:6c:ee:e0:79:a0:ea:3b:92:f2:4a:54:82: 4c:c6:b9:d9:c8:d6:38:68:09:21:fb:f2:54:18:7d: 8d:fc:49:f2:47:f6:00:e0:e3:ab:c9:80:e3:1f:27: 2c:ca:2c:af:23:ce:da:0f:3f:66:41:86:5d:93:ef: b3:01:db:a8:51:c0:4e:01:4c:2f:8a:81:52:f9:c1: be:77:7f:0e:60:1b:e0:97:90:82:c2:08:d6:bc:e9: 50:31:e0:4a:05:ca:41:cf:12:01:c2:32:2e:5a:c2: b8:fd:a5:8a:52:e5:be:e0:d6:3f:7c:88:62:25:ab: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A9:FE:67:BF:95:F2:2B:4B:94:D3:DD:6E:34:33:49:3B:CD:14:82 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:52:d0:4c:97:9e:8b:5d:15:67:60:3b:38:35:08:d8:0c:3e: 2a:c0:d3:ce:8f:55:47:8b:c6:ea:67:82:6f:9f:97:34:76:6e: f1:17:56:39:97:5c:79:27:cb:ea:93:64:80:a3:67:4a:5b:d6: 31:da:93:1d:48:e1:67:6f:a1:2a:3d:f0:ee:b7:76:68:71:ef: 9c:75:94:1f:98:ad:88:6f:9c:82:74:93:e3:36:69:68:b2:76: f9:14:fa:ec:e5:7c:21:f8:52:1a:b8:29:da:b5:11:bc:c1:6d: 49:95:dd:fe:64:f0:02:b4:78:c6:3a:5d:3a:b3:e4:7f:29:5a: 6f:ba:50:ac:38:b1:ee:4d:fa:78:b1:56:9b:db:0f:52:af:f9: 9e:05:d0:4b:20:1e:b8:60:70:f3:d8:f1:d0:39:5b:c3:f1:21: 9a:d0:0a:1c:da:c8:fa:f0:d5:42:e4:f4:7b:c1:b7:6e:37:ad: fe:5d:e0:77:33:b0:e9:1b:6c:1c:30:e8:9a:f6:66:f0:06:c7: d3:61:22:eb:ae:0c:2e:ec:02:47:73:ef:40:ba:58:d3:83:4a: 5b:7a:36:b6:70:d3:b4:be:51:f9:2d:17:f5:5d:30:ae:29:ac: 53:20:cc:b5:38:b0:a2:bd:9a:e7:53:d7:cc:37:fd:38:38:cc: 84:d4:1d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwNDE2MTcyMzAzWhcNMjUwNDIzMTcyMzAzWjAYMRYwFAYD VQQDEw02N2ZmZTc3Ny02M2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvz1veknwMM2nbSZGZatfKc0CpuUYDZvixzQu6nLRbCMTxHZkG8PEBQ+IOX2 HjGKZ/LAXayXDEc7+rK2vkjtEprjqStVslHWDmHvV9VEqB3JL18yNKJCOI89zY2+ B32jpjyqdCPmJ2/u/W7w/mbBMMCCV2U+86XphBYj3H7KQKCI9O/uZk4+01ts7uB5 oOo7kvJKVIJMxrnZyNY4aAkh+/JUGH2N/EnyR/YA4OOryYDjHycsyiyvI87aDz9m QYZdk++zAduoUcBOAUwvioFS+cG+d38OYBvgl5CCwgjWvOlQMeBKBcpBzxIBwjIu WsK4/aWKUuW+4NY/fIhiJauuwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2p/me/ lfIrS5TT3W40M0k7zRSCMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEUtBMl56LXRVnYDs4NQjYDD4qwNPOj1VHi8bqZ4Jvn5c0dm7xF1Y5 l1x5J8vqk2SAo2dKW9Yx2pMdSOFnb6EqPfDut3Zoce+cdZQfmK2Ib5yCdJPjNmlo snb5FPrs5Xwh+FIauCnatRG8wW1Jld3+ZPACtHjGOl06s+R/KVpvulCsOLHuTfp4 sVab2w9Sr/meBdBLIB64YHDz2PHQOVvD8SGa0Aoc2sj68NVC5PR7wbduN63+XeB3 M7DpG2wcMOia9mbwBsfTYSLrrgwu7AJHc+9AuljTg0pbeja2cNO0vlH5LRf1XTCu KaxTIMy1OLCivZrnU9fMN/04OMyE1B1H -----END CERTIFICATE-----Generated at Thu Apr 17 20:26:10 2025 by rpki-client