$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: yiLF/pQsYHi0ZEABe2gVbKt6nnaQoLXeSl7spdNtzvg= Subject key identifier: 3A:A5:AB:A5:0E:C5:E5:3E:09:A2:DB:15:FF:34:4A:9F:F8:93:3F:1F Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 03CE Signing time: Sat 29 Mar 2025 00:50:55 +0000 Manifest this update: Sat 29 Mar 2025 00:50:55 +0000 Manifest next update: Sat 05 Apr 2025 00:50:55 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: tu/RogT9SRCaQ2FuQgADhj9iWTeF7rjBSt3esR6PyIY=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: BND24LJDq2vvWZ+xp3RlYNXBh82urnxKrrVdHSwL4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B Validity Not Before: Mar 29 00:50:55 2025 GMT Not After : Apr 5 00:50:55 2025 GMT Subject: CN=67e743ef-9d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:03:4b:83:69:af:de:13:a1:72:56:bd:38: a1:f7:59:b7:1a:2c:fe:be:05:a6:c5:07:f7:e8:3f: d0:6e:df:cc:29:a5:79:5c:ad:db:e9:7e:56:55:65: 3e:cc:57:dd:3e:1c:8e:e7:c8:9f:57:96:f2:1d:f0: e1:11:49:f6:2e:42:06:a9:cb:e5:1e:c9:0f:eb:24: 54:60:f6:2a:9c:80:cc:ee:e9:6b:b0:a6:9f:cf:bf: 4a:d2:ec:d1:d1:86:67:09:c8:a4:a1:90:39:f7:97: 8c:85:dd:c4:ea:53:4d:68:bc:92:b9:ec:43:a3:45: f7:78:fd:84:4f:e5:ef:c4:00:81:ae:db:e5:b2:ac: 02:43:3d:b9:59:ea:15:4a:a6:28:26:3b:ff:24:75: 07:ed:95:56:b0:24:e9:a1:8f:0a:b3:29:9c:6e:05: cb:cf:b0:b2:76:17:05:76:5f:1a:83:cd:80:23:5c: 66:29:ba:5a:42:d5:2a:6c:4e:1f:c7:95:86:56:67: 58:04:7b:f2:cf:c7:82:e3:a6:fd:bb:ef:e3:3d:03: 04:05:b5:f6:ba:e6:c4:b1:ca:10:4f:50:96:c0:ec: ec:9d:48:4e:b3:ee:8e:17:ac:4f:b9:d8:54:1d:c0: 0f:79:7e:d9:5a:0d:d0:33:5c:95:4c:a7:e9:93:3a: 48:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:AB:A5:0E:C5:E5:3E:09:A2:DB:15:FF:34:4A:9F:F8:93:3F:1F X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ef:67:a8:f0:6f:4f:d2:df:48:64:7f:b0:3e:75:9a:a3:02: ad:42:f5:c8:3a:11:af:58:ff:76:6a:19:84:de:48:37:1b:49: b7:ed:09:9d:d8:54:86:67:9e:67:97:9b:c5:79:81:08:05:8f: 16:61:bf:69:f7:0a:06:8a:1c:e4:6d:97:a3:ff:62:32:64:f2: 15:ba:f8:eb:9c:87:50:d6:e1:1a:1d:bd:79:02:27:35:32:09: cc:d6:ed:03:6f:d0:bd:1e:ef:cf:35:c5:de:f5:a6:fb:9d:00: 10:eb:4d:8a:bd:05:95:bd:30:ae:df:e2:0f:90:1f:36:a4:31: 66:60:f7:a8:3b:06:49:b2:f3:92:53:b8:22:9f:87:19:81:f0: 9e:80:de:ac:a1:94:d6:47:0e:03:93:12:c6:18:4e:71:3f:18: 78:48:d1:c0:e4:1d:17:47:a2:ad:bc:fe:b8:b0:31:e6:ea:53: 45:2b:00:d7:2b:a6:d7:6a:9c:06:d6:aa:47:f8:71:92:ca:87: f4:ad:f2:2e:67:2f:c5:93:7a:22:39:94:b8:e9:50:46:7e:f0: 20:8d:de:f6:73:03:15:05:2a:48:f8:cb:d3:99:60:c3:8f:4a: 59:34:a7:41:c4:4b:1e:84:df:90:66:9f:d8:f5:5c:24:d1:17: 36:48:9f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUwMzI5MDA1MDU1WhcNMjUwNDA1MDA1MDU1WjAYMRYwFAYD VQQDEw02N2U3NDNlZi05ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/kDS4Npr94ToXJWvTih91m3Giz+vgWmxQf36D/Qbt/MKaV5XK3b6X5WVWU+ zFfdPhyO58ifV5byHfDhEUn2LkIGqcvlHskP6yRUYPYqnIDM7ulrsKafz79K0uzR 0YZnCcikoZA595eMhd3E6lNNaLySuexDo0X3eP2ET+XvxACBrtvlsqwCQz25WeoV SqYoJjv/JHUH7ZVWsCTpoY8KsymcbgXLz7CydhcFdl8ag82AI1xmKbpaQtUqbE4f x5WGVmdYBHvyz8eC46b9u+/jPQMEBbX2uubEscoQT1CWwOzsnUhOs+6OF6xPudhU HcAPeX7ZWg3QM1yVTKfpkzpIrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqlq6UO xeU+CaLbFf80Sp/4kz8fMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL72eo8G9P0t9IZH+wPnWaowKtQvXIOhGvWP92ahmE3kg3G0m37Qmd 2FSGZ55nl5vFeYEIBY8WYb9p9woGihzkbZej/2IyZPIVuvjrnIdQ1uEaHb15Aic1 MgnM1u0Db9C9Hu/PNcXe9ab7nQAQ602KvQWVvTCu3+IPkB82pDFmYPeoOwZJsvOS U7gin4cZgfCegN6soZTWRw4DkxLGGE5xPxh4SNHA5B0XR6KtvP64sDHm6lNFKwDX K6bXapwG1qpH+HGSyof0rfIuZy/Fk3oiOZS46VBGfvAgjd72cwMVBSpI+MvTmWDD j0pZNKdBxEsehN+QZp/Y9Vwk0Rc2SJ8w -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:49 2025 by rpki-client