$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: JNSLtMw7kFmY5cyMZ+nRNIOFv///8RdJzAUZaoLhZmA= Subject key identifier: 83:5E:20:AA:51:C2:75:9E:64:F3:41:CF:7B:23:99:3D:F4:54:57:33 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 145A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 1458 Signing time: Fri 04 Apr 2025 16:59:17 +0000 Manifest this update: Fri 04 Apr 2025 16:59:16 +0000 Manifest next update: Fri 11 Apr 2025 16:59:16 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: hU3GEca66lBlnj+A7mnMebNXr+6FRe1PxrUAzTISvnA=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5210 (0x145a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992 Validity Not Before: Apr 4 16:59:16 2025 GMT Not After : Apr 11 16:59:16 2025 GMT Subject: CN=67f00fe4-aba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:3a:da:8c:33:78:95:9c:c5:ef:7e:7c:98: 32:cf:8a:67:ea:95:58:f7:8a:71:61:71:95:89:1e: b0:5d:3c:60:b6:df:c3:27:9a:36:3e:6f:71:75:db: ab:35:ac:a2:8c:91:48:c2:47:c9:80:ec:1a:59:2d: 68:90:2f:36:c1:89:65:17:13:63:ea:aa:a2:d1:2f: 93:0a:f8:55:8b:18:06:a8:ae:80:85:7a:74:f5:57: 85:4a:af:f8:62:43:94:6d:62:3a:24:bb:ef:8f:76: 75:b4:bd:2b:20:5a:f9:b0:33:c3:9b:22:1b:96:92: 8c:cf:37:cb:e1:79:1a:bb:c6:fb:05:9a:d2:61:75: 91:0c:1a:f6:ae:d2:e5:08:80:48:36:31:ff:ae:a8: b1:70:96:60:5a:30:5c:40:75:fd:7d:c2:2d:52:dc: ec:c7:99:d9:0d:55:3d:4e:e3:24:fd:f0:64:c5:43: 1f:82:0a:3c:55:cd:c5:34:e4:9e:79:f8:a9:24:86: 64:87:45:8e:2d:51:b0:95:48:4d:87:50:ab:a9:13: ab:d4:58:a2:dd:c1:4e:7f:76:6f:fc:f6:bb:97:50: a2:ae:8a:8c:43:b3:a8:4e:41:d8:85:88:a9:a6:c1: 7c:3d:86:4b:ce:fd:b8:84:22:af:6c:24:96:ab:a3: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:20:AA:51:C2:75:9E:64:F3:41:CF:7B:23:99:3D:F4:54:57:33 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:98:49:fb:cd:fc:bb:63:3d:4b:46:56:2f:38:5e:43:25:6b: 74:a3:20:95:35:9c:27:f1:d4:c4:8d:1b:33:e9:48:1b:4e:db: 3f:64:f4:5f:96:10:ff:15:37:3b:da:b1:a8:e0:39:27:ce:7b: 22:ad:3b:76:34:65:65:cc:8d:2a:b0:4f:0a:79:08:97:e1:85: 2e:89:24:b4:86:64:84:6b:e2:cb:4a:03:ae:e4:74:35:15:d9: 8c:b4:19:52:05:5c:e2:c5:b4:cd:d7:da:b1:e7:f3:21:3f:25: ef:51:e6:e4:78:82:c9:d7:14:0a:a3:a7:61:d7:4b:c8:a7:71: 73:34:f6:b3:71:77:36:c9:0a:42:9c:81:df:3a:db:f8:c3:21: 72:78:d5:80:c6:ae:ad:03:c8:e0:e9:bd:f3:75:db:64:bd:60: 4f:06:04:13:2e:23:a8:d2:58:cb:6d:e3:55:06:f8:e5:51:d3: 93:7a:d3:bb:e7:a8:09:9a:b9:94:c1:e6:6d:72:58:64:c5:90: d2:48:51:fd:ec:3a:90:2c:19:e7:53:b5:e9:d4:e9:ea:68:49: fd:2f:2d:1a:c9:6d:87:44:e0:2d:f8:5e:dd:8a:ce:92:3b:4f: c5:a0:10:c2:5d:a9:27:2c:b4:f4:a6:77:e8:fb:e7:02:94:85: e7:e6:c2:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUwNDA0MTY1OTE2WhcNMjUwNDExMTY1OTE2WjAYMRYwFAYD VQQDEw02N2YwMGZlNC1hYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshw62owzeJWcxe9+fJgyz4pn6pVY94pxYXGViR6wXTxgtt/DJ5o2Pm9xddur NayijJFIwkfJgOwaWS1okC82wYllFxNj6qqi0S+TCvhVixgGqK6AhXp09VeFSq/4 YkOUbWI6JLvvj3Z1tL0rIFr5sDPDmyIblpKMzzfL4Xkau8b7BZrSYXWRDBr2rtLl CIBINjH/rqixcJZgWjBcQHX9fcItUtzsx5nZDVU9TuMk/fBkxUMfggo8Vc3FNOSe efipJIZkh0WOLVGwlUhNh1CrqROr1Fii3cFOf3Zv/Pa7l1CiroqMQ7OoTkHYhYip psF8PYZLzv24hCKvbCSWq6MvjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINeIKpR wnWeZPNBz3sjmT30VFczMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfmEn7zfy7Yz1LRlYvOF5DJWt0oyCVNZwn8dTEjRsz6UgbTts/ZPRf lhD/FTc72rGo4DknznsirTt2NGVlzI0qsE8KeQiX4YUuiSS0hmSEa+LLSgOu5HQ1 FdmMtBlSBVzixbTN19qx5/MhPyXvUebkeILJ1xQKo6dh10vIp3FzNPazcXc2yQpC nIHfOtv4wyFyeNWAxq6tA8jg6b3zddtkvWBPBgQTLiOo0ljLbeNVBvjlUdOTetO7 56gJmrmUweZtclhkxZDSSFH97DqQLBnnU7Xp1OnqaEn9Ly0ayW2HROAt+F7dis6S O0/FoBDCXaknLLT0pnfo++cClIXn5sKu -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:49 2025 by rpki-client