$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json) Hash identifier: +l4SwLGCaL4sbrb0ZtvH2vLxSQkIybtNCM5z7uBZSTQ= Subject key identifier: BA:AF:8C:08:86:5D:5C:4D:96:33:14:5D:3D:C6:F3:7A:F4:30:DF:1F Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft Manifest number: 1AE3 Signing time: Fri 04 Apr 2025 16:22:10 +0000 Manifest this update: Fri 04 Apr 2025 16:22:10 +0000 Manifest next update: Fri 11 Apr 2025 16:22:10 +0000 Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: FN+t6QZ5vUgsBM8heXu4/iSK3Z2i2SN3vnu1kjc2mvs=) 2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: Jv1d6fF3qu1qMz0c/kGUVQ3xOsIZk2UWH2dC2+4vagE=) 3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: hMIakiTTivB+fRa4Rnc2jL//XFH58YMCoj5LWIbNoBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6927 (0x1b0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3 Validity Not Before: Apr 4 16:22:10 2025 GMT Not After : Apr 11 16:22:10 2025 GMT Subject: CN=67f00732-ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:21:30:c0:58:bb:86:42:e1:e4:43:1e:e5: 3c:2f:13:2b:4c:f3:1d:d2:59:25:18:9a:b8:e5:b1: aa:24:c4:b3:81:f0:0f:5e:36:74:64:f5:e8:44:cf: 92:14:ab:b5:e5:54:70:88:c4:70:d4:a5:10:22:48: bd:a1:07:e8:38:6a:22:dd:2d:97:57:e6:72:1c:fa: 66:ef:34:0c:8d:33:06:32:5e:70:24:af:16:c8:fd: f5:9a:9f:e2:da:ec:57:c1:cf:9d:92:15:58:26:06: 4b:e3:7a:2c:c8:80:ae:80:7d:5f:ce:e0:68:4f:18: 89:ed:70:a1:e6:38:34:1c:d7:53:a6:22:40:3d:f0: 92:bb:52:d5:74:db:10:20:06:8e:1f:67:34:97:fc: e4:a0:0b:cc:85:08:5a:18:f4:90:93:3d:52:54:d7: a4:2a:b3:28:1a:d3:c2:4b:2c:15:ef:83:d6:38:20: 45:be:dd:13:37:b1:28:29:ab:9e:d8:79:e8:40:9e: 72:a1:cb:94:bf:fd:11:14:4f:51:9d:82:cb:41:93: 71:63:5d:71:51:4c:1e:f1:94:33:9f:d6:1e:29:31: fd:18:5d:ba:07:62:89:8c:a0:97:01:f2:4b:69:ff: 1c:6c:34:3b:5e:66:78:58:52:13:65:d0:ca:2c:b6: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:8C:08:86:5D:5C:4D:96:33:14:5D:3D:C6:F3:7A:F4:30:DF:1F X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0e:e8:01:9f:ed:74:c7:ae:99:7f:e5:7d:40:19:83:74:6a: ad:cf:09:34:c4:5c:60:81:d8:90:a8:3d:72:13:c1:8d:6f:fd: 94:34:51:bf:b7:fc:56:7d:70:3d:a5:62:70:03:7c:b1:a5:73: 5a:57:89:0c:9f:1c:ae:6a:a7:90:0e:ab:67:de:5f:05:cf:b7: e1:58:83:1f:0c:c9:86:92:27:82:ae:4b:41:99:3f:e7:6f:3e: 9f:58:51:a3:c2:df:03:e9:55:e5:56:ff:d2:0c:54:23:42:5c: 0e:dd:2f:ed:de:aa:2d:ed:9d:67:ca:67:7c:25:81:95:36:f4: 67:8c:c8:44:50:5a:c4:b4:c5:d2:bc:2a:6a:73:b3:a1:98:3e: 1b:39:ed:dc:63:61:c3:dc:80:99:69:25:0a:38:1b:9b:70:0a: 9d:a4:90:54:fe:88:53:46:5b:83:bc:f8:b4:bd:0d:ef:61:e3: cc:b1:ac:71:d7:cd:04:21:62:1c:52:a9:1c:57:40:cf:4f:b3: 66:cc:2d:50:2c:70:95:78:dd:8c:4b:a9:eb:c0:b0:40:79:3b: 7e:91:d2:66:c1:fe:ed:14:16:74:76:b1:7a:67:ea:8e:8a:2b: 67:ce:bf:8b:3b:1f:8f:8d:9e:3a:19:bf:e3:f3:73:92:1e:6f: 5a:cb:f8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjUwNDA0MTYyMjEwWhcNMjUwNDExMTYyMjEwWjAYMRYwFAYD VQQDEw02N2YwMDczMi1mZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eIhMMBYu4ZC4eRDHuU8LxMrTPMd0lklGJq45bGqJMSzgfAPXjZ0ZPXoRM+S FKu15VRwiMRw1KUQIki9oQfoOGoi3S2XV+ZyHPpm7zQMjTMGMl5wJK8WyP31mp/i 2uxXwc+dkhVYJgZL43osyICugH1fzuBoTxiJ7XCh5jg0HNdTpiJAPfCSu1LVdNsQ IAaOH2c0l/zkoAvMhQhaGPSQkz1SVNekKrMoGtPCSywV74PWOCBFvt0TN7EoKaue 2HnoQJ5yocuUv/0RFE9RnYLLQZNxY11xUUwe8ZQzn9YeKTH9GF26B2KJjKCXAfJL af8cbDQ7XmZ4WFITZdDKLLbvewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqvjAiG XVxNljMUXT3G83r0MN8fMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0NCMy8xREI3OTgzQzI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05 S1Y5WGlFY3FhaENxUDc3M0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7DugBn+10x66Zf+V9QBmDdGqtzwk0xFxggdiQqD1yE8GNb/2UNFG/ t/xWfXA9pWJwA3yxpXNaV4kMnxyuaqeQDqtn3l8Fz7fhWIMfDMmGkieCrktBmT/n bz6fWFGjwt8D6VXlVv/SDFQjQlwO3S/t3qot7Z1nymd8JYGVNvRnjMhEUFrEtMXS vCpqc7OhmD4bOe3cY2HD3ICZaSUKOBubcAqdpJBU/ohTRluDvPi0vQ3vYePMsaxx 180EIWIcUqkcV0DPT7NmzC1QLHCVeN2MS6nrwLBAeTt+kdJmwf7tFBZ0drF6Z+qO iitnzr+LOx+PjZ46Gb/j83OSHm9ay/jo -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:15 2025 by rpki-client