$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: 0jL1e3YK7iXRYz/SUYttSOiXdKxyskHRFOA5YYFF0iM= Subject key identifier: D8:CA:CE:1D:36:55:80:9C:54:B0:A2:DC:76:25:C4:BC:8A:1D:97:7F Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 0103 Signing time: Sat 05 Apr 2025 04:30:06 +0000 Manifest this update: Sat 05 Apr 2025 04:30:06 +0000 Manifest next update: Sat 12 Apr 2025 04:30:06 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: yEgoSFw8rRxsIkEl7wnHzmy8lUOkErvzBvNeSMd0Ze8=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261 Validity Not Before: Apr 5 04:30:06 2025 GMT Not After : Apr 12 04:30:06 2025 GMT Subject: CN=67f0b1ce-1585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:10:52:81:0f:03:06:3a:1b:f1:d8:86:13: 21:97:2c:45:c8:1c:25:67:c3:64:4e:1d:ab:87:03: 4c:35:dd:49:5b:43:31:2d:b1:fb:e0:2d:8a:fd:b2: 11:1c:3d:47:51:b6:1b:15:a2:9e:3c:e5:c2:1d:29: 84:e2:71:82:83:6a:89:71:d2:e0:78:08:95:1c:00: b6:b8:25:80:ed:01:88:3f:02:84:c9:2a:8f:6f:f5: 4e:f1:7f:bb:a3:6e:54:ca:8c:cb:d5:37:21:42:bd: d0:1d:30:d6:fe:d2:cb:49:ff:3f:34:5d:b9:05:fc: 03:96:6e:3b:a9:6c:e0:0a:3c:1f:8f:bf:7a:53:d6: 03:35:68:70:e3:65:a9:36:39:cc:7b:f8:09:0a:a6: 31:9f:1b:80:67:30:81:3c:bb:b5:d5:65:57:be:fd: 23:2a:e2:28:c3:bc:99:03:24:80:c4:8a:32:67:b4: 2c:41:47:a3:83:e3:59:20:92:f4:1d:68:3c:2a:c2: b5:f1:66:2b:80:bd:9d:77:4b:ba:5d:8c:51:d4:94: 05:0b:1e:e2:8e:7d:26:69:3b:99:2b:4a:36:5d:2e: 12:d4:9b:28:74:78:ef:34:d7:73:2f:fb:fa:1d:45: b4:7b:98:6a:aa:41:71:09:fb:05:d4:c9:50:e2:e7: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:CE:1D:36:55:80:9C:54:B0:A2:DC:76:25:C4:BC:8A:1D:97:7F X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:47:46:8e:be:42:ac:80:6a:a3:64:b7:89:74:79:e0:c5:15: 19:68:ca:99:e8:29:a8:03:f6:59:90:6f:d0:16:39:55:c3:ab: e5:67:94:4d:ee:a3:73:0f:ca:eb:d0:fa:1e:40:3d:08:5c:f1: 02:91:69:22:4f:72:55:13:d5:5f:7f:51:38:82:86:ec:73:69: 21:f4:1d:52:b7:3a:03:65:c7:54:25:a2:f2:51:9a:41:74:9f: e1:8c:c5:f4:ae:a2:1d:b4:8c:21:15:60:aa:0a:7b:fe:a7:be: 13:32:88:44:32:35:a4:c7:0e:e2:fb:f6:1e:59:f8:12:d7:53: 2a:e0:d2:d9:2e:82:b8:e7:47:96:06:65:c8:b9:8e:35:18:7f: 19:ba:fe:2b:1f:ed:af:96:c9:ed:e8:32:ec:f5:a6:5e:1c:e3: ee:f6:93:b9:6e:93:9f:59:2a:2c:31:be:d1:ad:8e:ac:91:7f: d2:1e:e8:33:b3:a7:37:e5:eb:2a:7f:3f:18:4a:99:cc:ed:9d: 22:db:22:92:0c:71:5e:d2:ed:c9:6e:7d:4f:44:02:b2:8f:17: 2b:55:49:86:f6:72:63:15:00:7c:de:30:44:83:dd:e8:bf:e0: 2d:a9:3d:1f:a6:94:97:c2:61:c7:bb:3a:dd:d5:d8:cc:df:5f: 6b:45:41:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjUwNDA1MDQzMDA2WhcNMjUwNDEyMDQzMDA2WjAYMRYwFAYD VQQDEw02N2YwYjFjZS0xNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7cQUoEPAwY6G/HYhhMhlyxFyBwlZ8NkTh2rhwNMNd1JW0MxLbH74C2K/bIR HD1HUbYbFaKePOXCHSmE4nGCg2qJcdLgeAiVHAC2uCWA7QGIPwKEySqPb/VO8X+7 o25UyozL1TchQr3QHTDW/tLLSf8/NF25BfwDlm47qWzgCjwfj796U9YDNWhw42Wp NjnMe/gJCqYxnxuAZzCBPLu11WVXvv0jKuIow7yZAySAxIoyZ7QsQUejg+NZIJL0 HWg8KsK18WYrgL2dd0u6XYxR1JQFCx7ijn0maTuZK0o2XS4S1JsodHjvNNdzL/v6 HUW0e5hqqkFxCfsF1MlQ4uf09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjKzh02 VYCcVLCi3HYlxLyKHZd/MB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHR0aOvkKsgGqjZLeJdHngxRUZaMqZ6CmoA/ZZkG/QFjlVw6vlZ5RN 7qNzD8rr0PoeQD0IXPECkWkiT3JVE9Vff1E4gobsc2kh9B1StzoDZcdUJaLyUZpB dJ/hjMX0rqIdtIwhFWCqCnv+p74TMohEMjWkxw7i+/YeWfgS11Mq4NLZLoK450eW BmXIuY41GH8Zuv4rH+2vlsnt6DLs9aZeHOPu9pO5bpOfWSosMb7RrY6skX/SHugz s6c35esqfz8YSpnM7Z0i2yKSDHFe0u3Jbn1PRAKyjxcrVUmG9nJjFQB83jBEg93o v+AtqT0fppSXwmHHuzrd1djM319rRUFI -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:02 2025 by rpki-client