$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json) Hash identifier: 3aAyCcjkM5YOM/FH3mIt81G09AA7XfGCCjvBmFVRI3g= Subject key identifier: 73:EF:41:5B:2B:6D:50:BA:E4:14:8E:CA:9F:37:1B:08:CD:AD:80:3A Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft Manifest number: 033B Signing time: Wed 16 Apr 2025 22:10:21 +0000 Manifest this update: Wed 16 Apr 2025 22:10:20 +0000 Manifest next update: Wed 23 Apr 2025 22:10:20 +0000 Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: uBvHMWlMJVUousepvyYzkKZWP2am3OWA8evc5Hn4cMw=) 2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Validity Not Before: Apr 16 22:10:20 2025 GMT Not After : Apr 23 22:10:20 2025 GMT Subject: CN=68002acd-47dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:b1:cb:a4:31:4a:82:82:d0:5f:b2:c1:5c: 54:ae:a5:79:d6:a5:fe:15:65:df:1e:b2:57:ec:1b: 3e:25:ae:95:20:56:c0:da:20:0a:e1:aa:68:de:c8: 1b:ae:f4:52:4b:54:ba:4f:8f:18:a0:12:03:38:ac: 20:59:72:3b:5e:77:0d:7a:7f:3d:50:15:3d:46:33: 20:21:95:ef:61:22:13:ba:bc:c5:db:2b:1c:20:c6: 8b:42:3b:d0:da:99:69:1a:29:de:ab:98:22:63:16: b6:f8:03:cc:fe:8a:da:a2:20:e3:d4:33:a7:e6:17: 15:ea:fe:3d:b8:52:ab:84:94:22:35:5a:fc:21:fd: 4c:f5:21:49:f7:ae:06:ff:70:c7:7f:40:4c:a4:e2: a9:bb:64:58:95:cd:99:01:71:cc:db:d6:90:c1:09: bc:8e:9e:cc:6b:98:9b:9c:bf:13:c5:3a:9f:5c:bc: 50:0b:b0:e5:5c:64:1d:00:9c:6d:7c:f2:bd:56:cd: 21:e4:32:53:20:4d:67:ec:2e:6b:e4:dd:02:e2:bf: 3a:78:3e:26:68:75:8c:ad:93:1e:bd:3d:b3:c5:54: 5a:d7:d0:02:0b:dd:9c:e5:40:69:76:66:2e:01:ee: d4:4a:5f:01:d1:d6:26:a2:62:b8:b5:a2:a8:aa:82: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:41:5B:2B:6D:50:BA:E4:14:8E:CA:9F:37:1B:08:CD:AD:80:3A X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:a1:04:e3:71:31:c5:6d:5a:21:d5:9b:43:c5:18:7b:3d: 3b:b9:67:3f:5c:4d:b6:b8:16:c6:5a:dd:79:54:86:a9:36:d1: b5:37:ae:10:58:b1:a2:56:5e:6b:46:6a:21:ea:01:2e:73:35: 34:05:2c:f3:29:ec:ab:1d:67:94:37:d7:73:48:e1:ce:2c:ba: 19:d2:19:b6:df:34:17:18:f7:da:40:10:87:39:0f:a6:74:ac: 60:93:ed:44:a5:80:f3:f5:2d:71:b1:16:99:8f:cd:f5:90:b6: da:08:6c:6e:33:3c:af:59:e0:57:db:4a:77:08:ea:00:9e:c8: 16:4b:df:f2:64:e4:5c:7a:54:db:e1:8a:3c:c7:10:c7:7f:92: 07:3d:a8:05:d2:d6:d5:72:5b:47:a2:ef:88:85:84:1a:55:23: 2b:73:ff:15:20:db:27:f2:84:77:71:3f:4d:3b:d1:48:f7:6d: 6f:51:87:db:76:98:35:6d:41:66:cc:ca:21:33:46:f9:d3:99: 68:41:99:81:95:26:51:58:5b:9e:81:75:51:b3:31:e4:b7:0d: 99:ad:9d:42:19:28:36:2e:b1:ab:3f:bb:b0:ce:d6:46:e8:e4: b5:ed:21:4d:f4:e0:dc:1d:87:05:4a:8c:6a:7a:67:cc:66:e2: e8:fb:5d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjUwNDE2MjIxMDIwWhcNMjUwNDIzMjIxMDIwWjAYMRYwFAYD VQQDEw02ODAwMmFjZC00N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Gxy6QxSoKC0F+ywVxUrqV51qX+FWXfHrJX7Bs+Ja6VIFbA2iAK4apo3sgb rvRSS1S6T48YoBIDOKwgWXI7XncNen89UBU9RjMgIZXvYSITurzF2yscIMaLQjvQ 2plpGineq5giYxa2+APM/oraoiDj1DOn5hcV6v49uFKrhJQiNVr8If1M9SFJ964G /3DHf0BMpOKpu2RYlc2ZAXHM29aQwQm8jp7Ma5ibnL8TxTqfXLxQC7DlXGQdAJxt fPK9Vs0h5DJTIE1n7C5r5N0C4r86eD4maHWMrZMevT2zxVRa19ACC92c5UBpdmYu Ae7USl8B0dYmomK4taKoqoKQIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPvQVsr bVC65BSOyp83GwjNrYA6MB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9CRjFFNzExOEJBQzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1Vv cnFRaExNN2JjcFlUcVpGVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADVqEE43ExxW1aIdWbQ8UYez07uWc/XE22uBbGWt15VIapNtG1N64Q WLGiVl5rRmoh6gEuczU0BSzzKeyrHWeUN9dzSOHOLLoZ0hm23zQXGPfaQBCHOQ+m dKxgk+1EpYDz9S1xsRaZj831kLbaCGxuMzyvWeBX20p3COoAnsgWS9/yZORcelTb 4Yo8xxDHf5IHPagF0tbVcltHou+IhYQaVSMrc/8VINsn8oR3cT9NO9FI921vUYfb dpg1bUFmzMohM0b505loQZmBlSZRWFuegXVRszHktw2ZrZ1CGSg2LrGrP7uwztZG 6OS17SFN9ODcHYcFSoxqemfMZuLo+11X -----END CERTIFICATE-----Generated at Fri Apr 18 04:46:50 2025 by rpki-client