$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: 7G9iiAHJyOiVFA+1VemoZXjs/TPL8LpcEDpbJ5RwMxQ= Subject key identifier: 0F:9C:90:5C:35:55:8D:17:ED:4B:D3:4E:96:E7:28:4F:0A:49:41:7E Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 0779 Signing time: Fri 04 Apr 2025 21:34:02 +0000 Manifest this update: Fri 04 Apr 2025 21:34:02 +0000 Manifest next update: Fri 11 Apr 2025 21:34:02 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: tOyjKP0a3n09bPLa/e23dsCmWFNsVbLDQVz+ZfKRDYU=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: 1KOLf59ICzEoI7M2NmFAlaU/cZ0TLw7hfRN8QYgYxBQ=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: d0Xj6/bStnSttx8OgCvX9d1wnUe1SmuLIlk6o50qzOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76 Validity Not Before: Apr 4 21:34:02 2025 GMT Not After : Apr 11 21:34:02 2025 GMT Subject: CN=67f0504a-847a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:e0:d2:65:56:85:1c:5a:de:5f:9c:04:84: c7:92:c6:5d:84:3b:c7:9e:76:ce:03:60:b7:9f:37: e2:d3:d0:37:c5:1b:c0:b6:76:c2:a1:ae:dc:4d:03: 20:41:0d:dc:39:51:55:83:04:65:04:1a:eb:98:13: c2:a3:67:d6:18:9b:44:45:c8:bf:a5:fd:b4:c9:18: 03:2e:12:95:3c:fe:61:4f:f4:2d:96:8b:4b:8f:9c: 6a:3d:2b:28:82:ed:f1:03:2d:df:9e:e7:55:21:fc: 3d:3e:44:10:21:8f:f8:ee:f7:dc:5c:13:9f:ab:a8: 6b:45:b7:69:d5:f1:68:7d:1e:7c:d9:22:2b:d6:b2: 0a:79:db:25:2d:60:e1:a4:d3:ef:29:e0:01:28:da: fd:1c:86:58:53:f7:97:0c:b9:64:2a:de:55:70:cb: db:99:da:84:99:65:1b:3a:7e:ca:7d:79:ae:c3:9d: 41:e1:fe:31:f9:f6:73:99:11:a0:6a:c9:d5:9e:ba: bf:2d:ab:f0:72:cb:c4:75:ca:89:39:0a:c2:bc:06: 4a:d5:40:8d:36:84:12:dd:f1:9f:3b:b6:dd:56:db: 4e:25:fd:4d:cb:a9:14:24:2c:c6:91:bf:cc:29:fc: 6b:1c:8c:0a:82:7a:f7:19:e5:37:8f:42:24:b2:e7: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9C:90:5C:35:55:8D:17:ED:4B:D3:4E:96:E7:28:4F:0A:49:41:7E X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:50:62:15:e6:bf:74:c5:8a:f6:f7:b0:c5:78:3b:3f:bb:2b: 73:91:be:4f:0f:69:38:db:d0:80:19:b7:26:a3:38:12:3e:ab: ee:d1:b8:21:88:48:2a:a5:62:53:47:32:e8:18:af:0d:67:2d: c8:94:48:96:63:21:b0:dd:7f:0d:46:b9:89:53:4c:47:32:5c: 31:9b:25:89:0e:1f:f8:7b:9a:81:76:d2:6c:4d:80:9e:64:9a: 67:2c:4a:2a:7d:0e:0f:19:74:73:b5:61:17:17:5a:0c:ab:f1: 2d:6b:ff:8b:65:f7:ba:f8:78:d6:14:01:cf:f2:32:0e:74:08: 1d:1e:1b:e8:dd:ea:31:12:c8:90:e8:c1:ab:45:c0:1f:7f:51: d8:6e:78:e8:c4:58:79:06:bd:6a:bf:f7:c5:b4:76:ac:25:99: a5:19:04:8f:4b:27:4f:95:91:ea:94:99:73:7f:d8:7d:52:41: 11:26:38:73:a2:5a:3e:d7:45:72:8c:6b:48:e9:27:74:87:66: 25:63:3c:1f:7e:99:50:49:05:86:db:e2:9c:2c:54:c8:bc:cb: 47:90:9e:f7:64:ef:94:4d:ea:8c:9f:55:25:5f:84:26:1b:79: e2:42:b1:f4:30:cf:d4:39:2c:56:d5:37:b6:a3:fd:7c:05:04: 49:16:fb:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjUwNDA0MjEzNDAyWhcNMjUwNDExMjEzNDAyWjAYMRYwFAYD VQQDEw02N2YwNTA0YS04NDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw/g0mVWhRxa3l+cBITHksZdhDvHnnbOA2C3nzfi09A3xRvAtnbCoa7cTQMg QQ3cOVFVgwRlBBrrmBPCo2fWGJtERci/pf20yRgDLhKVPP5hT/QtlotLj5xqPSso gu3xAy3fnudVIfw9PkQQIY/47vfcXBOfq6hrRbdp1fFofR582SIr1rIKedslLWDh pNPvKeABKNr9HIZYU/eXDLlkKt5VcMvbmdqEmWUbOn7KfXmuw51B4f4x+fZzmRGg asnVnrq/LavwcsvEdcqJOQrCvAZK1UCNNoQS3fGfO7bdVttOJf1Ny6kUJCzGkb/M KfxrHIwKgnr3GeU3j0IksufGZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+ckFw1 VY0X7UvTTpbnKE8KSUF+MB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRUGIV5r90xYr297DFeDs/uytzkb5PD2k429CAGbcmozgSPqvu0bgh iEgqpWJTRzLoGK8NZy3IlEiWYyGw3X8NRrmJU0xHMlwxmyWJDh/4e5qBdtJsTYCe ZJpnLEoqfQ4PGXRztWEXF1oMq/Eta/+LZfe6+HjWFAHP8jIOdAgdHhvo3eoxEsiQ 6MGrRcAff1HYbnjoxFh5Br1qv/fFtHasJZmlGQSPSydPlZHqlJlzf9h9UkERJjhz olo+10VyjGtI6Sd0h2YlYzwffplQSQWG2+KcLFTIvMtHkJ73ZO+UTeqMn1UlX4Qm G3niQrH0MM/UOSxW1Te2o/18BQRJFvuO -----END CERTIFICATE-----Generated at Sun Apr 6 16:44:44 2025 by rpki-client