$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: 1BUuc/JPsEZ0zPMQQZ9LZEPvtG/qgZY4O5uNwZ707Ec= Subject key identifier: 27:4C:03:B1:3E:9C:DB:62:17:11:9F:4A:C9:BA:76:D7:A9:02:00:8C Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 03E9 Signing time: Thu 03 Apr 2025 00:32:00 +0000 Manifest this update: Thu 03 Apr 2025 00:32:00 +0000 Manifest next update: Thu 10 Apr 2025 00:32:00 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: TVp61+FDCkkRJ/9xFGpBjb0mwxxj9kL/CoJ77nwsRpU=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8 Validity Not Before: Apr 3 00:32:00 2025 GMT Not After : Apr 10 00:32:00 2025 GMT Subject: CN=67edd700-a4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:f0:81:55:3e:ed:8f:72:8c:54:ec:28:67: 8f:b5:dd:d5:25:53:0a:e5:c6:49:09:75:1a:fa:73: f0:c6:4b:fe:f7:88:58:f5:14:50:28:67:be:8f:53: a6:40:8a:52:a3:a0:63:78:6a:bc:45:bb:5d:ef:7e: f3:c9:be:d1:7d:4b:1a:71:12:6a:ba:df:ec:4e:a1: 23:19:ec:31:73:2b:d1:2d:e3:30:d8:2c:14:9e:be: 83:60:40:79:a0:c8:65:03:d9:e4:a2:92:4e:55:c5: ec:90:10:ee:09:32:b5:1a:9a:94:27:27:5c:1c:bc: ac:36:80:2e:a8:25:63:15:fe:46:3a:70:19:c2:15: 28:14:3b:5a:66:24:18:1c:d8:48:94:ad:a8:7f:b0: 0b:a6:9d:bf:49:1e:d5:9b:e6:a5:8d:de:8f:3b:17: 3f:4e:33:8a:2a:b4:ac:57:b1:92:e2:9f:a6:fc:87: 9e:5e:11:44:1b:0e:92:2d:82:d1:c8:be:54:2c:02: 51:26:56:ce:a1:8b:1a:df:cc:b5:bc:09:85:1f:4c: 04:2d:4c:cf:65:47:cf:9d:41:9e:61:f9:75:27:8d: 37:fa:24:94:c2:ca:40:19:fc:db:56:c7:80:98:f2: 4c:c8:e7:73:48:a9:f6:89:a3:37:16:ee:98:41:61: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4C:03:B1:3E:9C:DB:62:17:11:9F:4A:C9:BA:76:D7:A9:02:00:8C X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:92:0a:9a:17:f5:82:b6:19:1c:8b:89:d1:f9:56:b2:88: 8b:eb:f8:6a:77:c1:59:fd:12:ce:f2:11:ce:93:63:a4:7d:1c: 0e:74:d8:2c:fc:cb:c5:cf:f4:db:07:43:a9:f5:76:0a:2f:bc: 80:21:0c:f1:ca:7f:14:5d:68:d4:fb:23:d7:db:59:7d:78:26: aa:3d:11:68:58:58:6c:17:09:2d:91:55:e9:6c:5b:bb:1b:c8: 6e:7f:75:55:8b:97:c1:cd:a7:5c:9a:e8:6b:2f:51:be:6c:66: 8f:9b:b5:d8:ed:dc:f6:73:f5:04:0a:7e:ba:f8:af:54:93:de: 10:18:2a:7c:bf:cc:44:42:fc:9a:12:65:85:67:a6:4f:15:d1: d5:af:46:37:16:63:1b:67:e6:a7:93:7a:cb:17:58:d1:67:16: f9:77:7e:08:bc:c5:37:e6:da:3e:34:eb:fd:09:67:cf:42:ec: c3:c2:c1:5e:db:38:60:0a:41:6a:55:1d:4e:75:8a:97:8d:80: d9:e1:17:94:f4:82:1b:76:0d:52:6e:5e:a0:a0:ce:99:8e:fd: a0:3c:51:cd:73:59:d3:c6:43:72:77:79:ec:da:ad:ee:ca:2d: 57:a7:93:a8:b8:b1:11:9a:35:29:00:f4:5e:73:0b:3e:92:66: 40:7f:5b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwNDAzMDAzMjAwWhcNMjUwNDEwMDAzMjAwWjAYMRYwFAYD VQQDEw02N2VkZDcwMC1hNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcnwgVU+7Y9yjFTsKGePtd3VJVMK5cZJCXUa+nPwxkv+94hY9RRQKGe+j1Om QIpSo6BjeGq8Rbtd737zyb7RfUsacRJqut/sTqEjGewxcyvRLeMw2CwUnr6DYEB5 oMhlA9nkopJOVcXskBDuCTK1GpqUJydcHLysNoAuqCVjFf5GOnAZwhUoFDtaZiQY HNhIlK2of7ALpp2/SR7Vm+aljd6POxc/TjOKKrSsV7GS4p+m/IeeXhFEGw6SLYLR yL5ULAJRJlbOoYsa38y1vAmFH0wELUzPZUfPnUGeYfl1J403+iSUwspAGfzbVseA mPJMyOdzSKn2iaM3Fu6YQWE1ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdMA7E+ nNtiFxGfSsm6dtepAgCMMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1JIKmhf1grYZHIuJ0flWsoiL6/hqd8FZ/RLO8hHOk2OkfRwOdNgs /MvFz/TbB0Op9XYKL7yAIQzxyn8UXWjU+yPX21l9eCaqPRFoWFhsFwktkVXpbFu7 G8huf3VVi5fBzadcmuhrL1G+bGaPm7XY7dz2c/UECn66+K9Uk94QGCp8v8xEQvya EmWFZ6ZPFdHVr0Y3FmMbZ+ank3rLF1jRZxb5d34IvMU35to+NOv9CWfPQuzDwsFe 2zhgCkFqVR1OdYqXjYDZ4ReU9IIbdg1Sbl6goM6Zjv2gPFHNc1nTxkNyd3ns2q3u yi1Xp5OouLERmjUpAPRecws+kmZAf1uD -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:41 2025 by rpki-client