$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: rIzTjDVevXDC1/gwEi9pmHOUvJkpBqiXf0vm2vJZdSA= Subject key identifier: 82:F9:72:1A:F2:9D:91:D4:B6:05:AB:7C:02:76:93:C1:EE:48:63:45 Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A15 Signing time: Wed 02 Apr 2025 19:51:51 +0000 Manifest this update: Wed 02 Apr 2025 19:51:50 +0000 Manifest next update: Wed 09 Apr 2025 19:51:50 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: QgDuxKUbe0YFZ19XrvKy0UYzBha5IrmegGDmjuyJ/f0=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839 Validity Not Before: Apr 2 19:51:50 2025 GMT Not After : Apr 9 19:51:50 2025 GMT Subject: CN=67ed9556-20c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:a7:26:68:77:c6:dd:85:58:9e:09:fc:9f: dd:8d:7e:f4:36:7f:fa:be:95:26:7d:8b:12:27:2b: 08:5d:40:d7:91:0c:16:9a:20:ba:ff:0f:c4:0e:b2: 37:c9:0b:bd:e1:a8:c2:c3:55:79:dc:28:0e:aa:a6: 4e:f0:17:fe:13:58:a8:f7:4d:41:ae:38:73:80:0b: 0a:a0:17:1e:54:c8:4f:fd:60:17:35:d5:9a:61:3f: 5a:23:71:7b:c9:75:04:86:90:ef:50:8d:c6:91:e9: 65:2a:a9:cc:b3:4d:3a:b4:f8:b8:c1:2b:76:c8:9e: 91:99:9c:ab:3e:87:60:44:91:b2:b2:24:b5:aa:c4: 4d:57:4e:41:5f:14:35:e3:7f:7c:cc:88:c9:44:98: c8:38:9e:0a:72:74:b8:9f:fe:10:cd:97:91:a4:69: 9c:24:6d:fd:c7:68:58:4a:92:87:51:ef:77:3e:9d: ed:1c:7e:9d:34:4b:69:8f:c0:14:0e:de:8f:4c:8b: 81:ff:56:96:6a:62:b1:b8:ab:60:26:5e:f7:39:e4: 49:d3:12:b0:33:a7:42:80:34:7c:c0:a1:d0:01:3f: 08:80:66:7b:cd:54:62:5e:96:92:ee:b5:cc:c6:1a: 86:c1:ac:8f:9d:d9:e9:7b:84:a6:d4:11:93:b1:b6: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F9:72:1A:F2:9D:91:D4:B6:05:AB:7C:02:76:93:C1:EE:48:63:45 X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e4:f8:9a:16:72:c5:57:27:c5:a4:59:25:4b:a7:40:8b:21: a2:f4:04:31:e1:94:e4:50:c9:5c:ba:75:48:b9:78:38:61:3f: fa:d9:7c:f2:1c:1b:f9:03:ca:3e:2a:b4:7e:fb:38:0c:b9:e0: ec:5e:e6:6a:64:37:8c:66:3d:ca:38:01:c8:4d:b4:25:8d:85: c4:5a:f6:48:9a:99:15:eb:01:06:75:7a:2d:a7:2b:f3:44:fe: 17:18:7e:33:71:85:11:1a:d6:aa:01:0a:ff:23:30:99:7c:92: c7:dd:f1:1d:43:d7:93:bd:1e:76:ff:20:13:33:bb:c7:72:d9: 07:11:e8:81:ea:c5:82:83:41:56:17:0e:a3:5f:fd:52:46:9d: 49:d7:17:0e:0b:f3:03:1b:3a:43:72:e5:56:1c:a1:34:5c:ed: c2:8d:25:d8:fe:3a:91:08:bc:04:43:54:a0:23:c6:db:2c:ea: a2:ef:13:92:e6:0c:87:ec:ea:c0:27:19:e4:ff:bc:1b:5c:7a: f7:4f:8a:1d:64:33:c4:34:b1:55:99:f5:19:ae:00:0b:e4:70: 3c:8e:c5:0a:18:01:e0:8d:38:0b:06:7e:00:2c:0d:3c:df:ed: 48:c5:79:58:0c:b9:a6:e7:d2:ed:69:dc:bb:de:88:ab:da:a2: a7:59:b8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUwNDAyMTk1MTUwWhcNMjUwNDA5MTk1MTUwWjAYMRYwFAYD VQQDEw02N2VkOTU1Ni0yMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxCnJmh3xt2FWJ4J/J/djX70Nn/6vpUmfYsSJysIXUDXkQwWmiC6/w/EDrI3 yQu94ajCw1V53CgOqqZO8Bf+E1io901BrjhzgAsKoBceVMhP/WAXNdWaYT9aI3F7 yXUEhpDvUI3GkellKqnMs006tPi4wSt2yJ6RmZyrPodgRJGysiS1qsRNV05BXxQ1 4398zIjJRJjIOJ4KcnS4n/4QzZeRpGmcJG39x2hYSpKHUe93Pp3tHH6dNEtpj8AU Dt6PTIuB/1aWamKxuKtgJl73OeRJ0xKwM6dCgDR8wKHQAT8IgGZ7zVRiXpaS7rXM xhqGwayPndnpe4Sm1BGTsbbJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL5chry nZHUtgWrfAJ2k8HuSGNFMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB5PiaFnLFVyfFpFklS6dAiyGi9AQx4ZTkUMlcunVIuXg4YT/62Xzy HBv5A8o+KrR++zgMueDsXuZqZDeMZj3KOAHITbQljYXEWvZImpkV6wEGdXotpyvz RP4XGH4zcYURGtaqAQr/IzCZfJLH3fEdQ9eTvR52/yATM7vHctkHEeiB6sWCg0FW Fw6jX/1SRp1J1xcOC/MDGzpDcuVWHKE0XO3CjSXY/jqRCLwEQ1SgI8bbLOqi7xOS 5gyH7OrAJxnk/7wbXHr3T4odZDPENLFVmfUZrgAL5HA8jsUKGAHgjTgLBn4ALA08 3+1IxXlYDLmm59Ltady73oir2qKnWbgS -----END CERTIFICATE-----Generated at Fri Apr 4 21:11:19 2025 by rpki-client