$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: vGkwXQQpUtFC2lhp0ivzepZj4j/Jo0EVtsZCpw6L7c4= Subject key identifier: 21:60:94:15:F5:D1:A6:73:A9:85:E6:13:74:25:22:DB:CF:5C:7C:FA Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0148 Signing time: Sat 05 Apr 2025 03:42:38 +0000 Manifest this update: Sat 05 Apr 2025 03:42:38 +0000 Manifest next update: Sat 12 Apr 2025 03:42:38 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: 2oTdA6qCjWgWVD1M54ZpklfdNqFutMRoo5IpIZyJNlk=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: F0IorjVoRNdR/rnfERSJA3kDGcWRN5xMt/uZPHyNwMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017 Validity Not Before: Apr 5 03:42:38 2025 GMT Not After : Apr 12 03:42:38 2025 GMT Subject: CN=67f0a6ae-5816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:4c:76:b4:1c:aa:54:96:4b:99:76:48:ae: 21:d9:0a:8d:16:52:a6:f5:cb:2d:9a:d9:90:9a:73: 60:d8:08:14:16:5e:78:94:f8:0f:75:08:1e:42:3f: ab:e4:f3:24:35:32:60:4e:59:3a:f6:c1:ac:db:d9: 00:ac:ea:d8:fe:8a:96:e7:88:3d:81:12:76:9a:a8: 91:e7:5b:ed:89:35:c4:34:ea:e3:22:63:e5:b3:c8: 57:1e:c1:f0:d0:21:5a:55:8a:80:80:b1:aa:e6:c7: a7:23:5d:ff:35:b4:88:cd:5c:74:da:c5:3d:e8:c7: ce:a9:bb:2d:ee:e0:e9:45:40:2f:0a:5d:b5:e8:7e: 8f:d6:9f:c9:72:8b:74:f5:23:1e:e9:4a:a7:b3:e8: 67:28:25:13:2a:f4:5e:dc:1e:33:54:26:bf:ca:37: df:a6:37:65:6c:3c:10:2d:62:df:88:ab:f4:89:57: 9e:e6:eb:61:9f:af:01:c9:a4:d4:4a:2c:7e:10:bc: 72:95:b2:f7:1f:2f:30:f4:15:c1:06:5d:ee:28:7f: 59:3b:ef:6a:7b:6e:2e:e8:23:d1:b9:56:45:87:19: 0f:92:30:86:36:3b:0b:cf:9d:f8:1f:1f:4f:7d:b3: 3c:6d:a4:96:e0:90:31:37:d0:88:54:6b:79:55:17: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:94:15:F5:D1:A6:73:A9:85:E6:13:74:25:22:DB:CF:5C:7C:FA X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:88:56:0d:8b:98:65:64:7d:d3:84:e3:7e:94:36:65:52:cf: 88:d7:39:25:6f:3c:03:73:f1:79:5b:15:87:7d:c8:d3:39:47: 22:dc:da:e4:a8:06:65:61:1e:3c:c7:34:22:f8:d3:f3:38:94: 5c:43:e1:6f:b7:2d:4b:90:4d:1f:41:82:ab:01:63:21:7d:34: 63:6d:5f:be:2e:f3:9f:61:72:09:3d:7c:32:5b:2b:66:d8:b4: 33:bf:9d:14:56:02:36:e1:88:e0:97:d8:19:0d:b9:ec:ef:02: d0:b2:74:d9:9e:91:59:98:b1:a1:e4:81:94:bd:f3:2b:71:60: e7:ec:ac:97:1a:8f:1e:69:2c:65:ae:45:c8:20:63:87:ed:0c: 00:fd:4b:ad:57:b0:cd:7b:69:a0:45:4e:f0:58:fd:de:17:c5: 38:2c:ed:15:f6:bb:b2:c6:39:78:8f:a0:f8:51:59:bf:42:7b: 5f:a0:41:65:3e:60:04:34:ba:0b:37:40:82:2b:5d:2c:26:90: 34:ba:3f:fc:15:90:9f:8e:8f:b0:b1:8e:3a:e5:d4:a3:74:f6: 6a:92:96:e0:f4:d9:92:d1:e4:81:06:f6:7f:be:99:0a:58:8e: cd:e3:31:c2:9c:99:6c:f7:95:3c:4e:05:f1:e1:91:39:ea:ab: ab:12:9c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNDA1MDM0MjM4WhcNMjUwNDEyMDM0MjM4WjAYMRYwFAYD VQQDEw02N2YwYTZhZS01ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eNMdrQcqlSWS5l2SK4h2QqNFlKm9cstmtmQmnNg2AgUFl54lPgPdQgeQj+r 5PMkNTJgTlk69sGs29kArOrY/oqW54g9gRJ2mqiR51vtiTXENOrjImPls8hXHsHw 0CFaVYqAgLGq5senI13/NbSIzVx02sU96MfOqbst7uDpRUAvCl216H6P1p/Jcot0 9SMe6Uqns+hnKCUTKvRe3B4zVCa/yjffpjdlbDwQLWLfiKv0iVee5uthn68ByaTU Six+ELxylbL3Hy8w9BXBBl3uKH9ZO+9qe24u6CPRuVZFhxkPkjCGNjsLz534Hx9P fbM8baSW4JAxN9CIVGt5VRd0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFglBX1 0aZzqYXmE3QlItvPXHz6MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBziFYNi5hlZH3ThON+lDZlUs+I1zklbzwDc/F5WxWHfcjTOUci3Nrk qAZlYR48xzQi+NPzOJRcQ+Fvty1LkE0fQYKrAWMhfTRjbV++LvOfYXIJPXwyWytm 2LQzv50UVgI24Yjgl9gZDbns7wLQsnTZnpFZmLGh5IGUvfMrcWDn7KyXGo8eaSxl rkXIIGOH7QwA/UutV7DNe2mgRU7wWP3eF8U4LO0V9ruyxjl4j6D4UVm/QntfoEFl PmAENLoLN0CCK10sJpA0uj/8FZCfjo+wsY465dSjdPZqkpbg9NmS0eSBBvZ/vpkK WI7N4zHCnJls95U8TgXx4ZE56qurEpwY -----END CERTIFICATE-----Generated at Sat Apr 5 12:54:09 2025 by rpki-client