$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: aelJyOH4UOOQ35pNrnFKNg9dwo98VHjb5SOmDQFjZvE= Subject key identifier: 86:00:17:FA:D4:1B:92:DE:A1:0A:1E:88:92:C3:37:30:B8:B4:AD:5F Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 2D Signing time: Thu 03 Apr 2025 06:56:45 +0000 Manifest this update: Thu 03 Apr 2025 06:56:45 +0000 Manifest next update: Thu 10 Apr 2025 06:56:45 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: dDkVMrUbhhBMQ24mIgaQ1t9kdXcp7xki7di9dDz+pmk=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: PeoexpeZuhtxvOaSUXuGABP7Es0mdREYJbAZJzL28uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B Validity Not Before: Apr 3 06:56:45 2025 GMT Not After : Apr 10 06:56:45 2025 GMT Subject: CN=67ee312d-9baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:d7:df:e3:38:46:ba:7a:01:13:40:15:9f: e6:84:a9:d4:f7:d8:6c:5c:17:58:02:65:47:d5:73: 01:e8:ea:0d:69:62:97:24:f7:43:e2:58:e2:18:9f: 33:27:72:5c:d1:41:13:b2:08:49:2d:f4:48:17:3d: 94:67:75:cf:4e:de:cd:35:86:0b:75:f1:d0:da:b9: c5:95:e4:43:95:e2:c3:75:69:86:9f:23:21:25:bf: a8:5f:cb:25:cf:ad:59:44:1c:18:8b:ff:e0:92:f9: 51:ad:ec:37:7b:42:ed:00:8e:6b:a8:f6:25:58:cc: 98:c9:25:51:b8:cd:20:1c:76:21:7b:ac:8c:39:6c: 1c:a5:46:ff:f2:a8:0a:29:d7:5e:14:f7:55:b1:44: c0:55:d1:7e:63:e9:22:dc:4a:b8:c7:b9:af:5f:09: ef:df:e9:f9:fd:07:b9:60:30:17:24:57:cc:7f:95: dc:24:c9:31:e8:0f:85:ac:8e:c0:33:7c:03:9f:ba: b2:19:fd:68:a6:1a:9e:58:59:ba:34:8e:d4:20:e5: 05:19:20:0a:e7:85:de:0f:f6:98:5d:39:41:6d:ff: c4:b9:3b:a8:6a:52:5f:b5:03:60:c9:59:ff:80:06: b9:61:e3:dc:c4:fe:a4:11:c8:9c:71:14:9a:e6:6d: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:17:FA:D4:1B:92:DE:A1:0A:1E:88:92:C3:37:30:B8:B4:AD:5F X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:18:70:9e:44:00:50:b1:63:77:8d:03:a4:51:04:c2:70:cf: c4:2e:2a:a1:ae:04:a7:e7:b2:de:11:8e:18:67:1b:3f:b2:71: 4d:ef:0a:bf:ea:de:0c:a3:71:58:a6:7d:f2:1b:02:f4:e1:bc: 0f:3b:22:83:0f:b5:17:c1:d0:b8:ba:83:e1:2a:87:ff:da:d8: e5:9d:df:7e:d4:fe:f5:bc:33:0f:f9:c8:6a:6c:1f:b3:90:c6: f8:a0:05:47:34:63:f4:53:62:2d:f9:c8:e9:5b:e1:5c:7c:39: df:1a:87:2f:38:62:67:98:8f:1c:1e:d1:2d:23:9c:87:d5:65: f1:a3:2d:c0:56:5b:31:8c:c9:00:5d:8e:52:ce:1f:64:cd:98: be:94:62:1f:40:fc:60:07:9f:f4:11:33:f5:49:39:6a:75:05: 4a:64:f3:d4:f6:a6:f9:c4:e8:1b:36:0b:f8:f2:af:6c:cd:d4: d4:93:34:3f:d8:fc:5b:7b:54:a2:a6:a0:d4:83:f0:2f:0a:ce: 8a:b2:04:97:df:12:b1:54:95:a8:97:12:f5:ea:04:b7:7b:87: b4:0c:59:b1:af:e0:af:29:bb:51:2e:75:4d:0f:23:61:64:e0: bb:9c:0b:3f:89:b3:d8:30:8f:10:fa:72:ba:fe:f1:73:97:63: f3:b4:b1:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0I0QjExMC8GA1UEBRMoQzg3N0NERjIyRDI1QjZFMzNGQzVFNDk1QkU1NUU1OUQw QTk0OTg3RTAeFw0yNTA0MDMwNjU2NDVaFw0yNTA0MTAwNjU2NDVaMBgxFjAUBgNV BAMTDTY3ZWUzMTJkLTliYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCssdff4zhGunoBE0AVn+aEqdT32GxcF1gCZUfVcwHo6g1pYpck90PiWOIYnzMn clzRQROyCEkt9EgXPZRndc9O3s01hgt18dDaucWV5EOV4sN1aYafIyElv6hfyyXP rVlEHBiL/+CS+VGt7Dd7Qu0Ajmuo9iVYzJjJJVG4zSAcdiF7rIw5bBylRv/yqAop 114U91WxRMBV0X5j6SLcSrjHua9fCe/f6fn9B7lgMBckV8x/ldwkyTHoD4WsjsAz fAOfurIZ/WimGp5YWbo0jtQg5QUZIArnhd4P9phdOUFt/8S5O6hqUl+1A2DJWf+A Brlh49zE/qQRyJxxFJrmbVLzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhgAX+tQb kt6hCh6IksM3MLi0rV8wHwYDVR0jBBgwFoAUyHfN8i0ltuM/xeSVvlXlnQqUmH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QjRCL0UxNTZBMDRDQ0Yz ODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1I NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUhmTjhpMGx0dU1feGVTVnZsWGxuUXFVbUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QjRCL0UxNTZBMDRDQ0YzODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVN X3hlU1Z2bFhsblFxVW1INC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQYcJ5EAFCxY3eNA6RRBMJwz8QuKqGuBKfnst4RjhhnGz+ycU3vCr/q 3gyjcVimffIbAvThvA87IoMPtRfB0Li6g+Eqh//a2OWd337U/vW8Mw/5yGpsH7OQ xvigBUc0Y/RTYi35yOlb4Vx8Od8ahy84YmeYjxwe0S0jnIfVZfGjLcBWWzGMyQBd jlLOH2TNmL6UYh9A/GAHn/QRM/VJOWp1BUpk89T2pvnE6Bs2C/jyr2zN1NSTND/Y /Ft7VKKmoNSD8C8KzoqyBJffErFUlaiXEvXqBLd7h7QMWbGv4K8pu1EudU0PI2Fk 4LucCz+Js9gwjxD6crr+8XOXY/O0sUQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:55 2025 by rpki-client