$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: jv1F1+cE4TGZtxJ1d3BEdXFm3ZcsfMjas2Mgm8F2lyE= Subject key identifier: 28:29:AB:8F:F7:0F:A9:4F:79:12:BF:22:38:99:2B:E0:C8:6C:B6:1B Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 0997 Signing time: Fri 28 Mar 2025 20:19:39 +0000 Manifest this update: Fri 28 Mar 2025 20:19:39 +0000 Manifest next update: Fri 04 Apr 2025 20:19:39 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: ulm3Z3RTMe8+R+ou8U0+Rckb9D5YB2l5Zn0qzZkE89c=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488 Validity Not Before: Mar 28 20:19:39 2025 GMT Not After : Apr 4 20:19:39 2025 GMT Subject: CN=67e7045b-cc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:4e:ae:cd:07:39:ec:3e:4c:b6:85:bb:77: 04:d1:03:52:6f:0c:4c:d0:af:68:f9:f7:d2:24:b4: 81:e1:92:4b:64:9f:ea:96:0b:18:87:17:47:48:0a: 9a:d2:54:ef:02:e1:af:9a:d1:ff:ea:bf:2e:40:78: 4a:f6:d4:53:16:50:d5:14:c6:1f:25:9b:e9:33:19: bd:8d:8c:6b:36:6b:1d:3f:ae:2b:99:20:7d:d1:69: e6:aa:08:fd:9c:38:14:45:f1:50:3e:86:6e:18:75: 2f:77:40:77:59:91:72:c6:cc:5a:37:87:b4:25:ad: a9:36:17:0b:d6:2e:f8:3e:de:9c:d2:07:bc:8a:1a: 41:70:cb:47:ac:61:15:cb:e6:aa:3a:1f:1b:dc:10: 83:11:b1:f2:96:c7:64:98:dd:6e:14:d8:78:04:d5: ce:49:5c:d3:c3:c6:60:f1:bd:37:c5:0c:8f:45:36: 03:54:5d:4e:5b:4e:2c:94:1a:12:fe:3c:89:15:2f: 92:5b:f7:a4:6f:79:83:84:5d:c9:5d:68:0f:cc:23: be:16:12:09:c3:cf:ee:6f:62:f9:cf:f3:a1:69:7e: 35:8a:08:73:28:ad:2d:37:39:ee:da:fe:7a:6e:86: 2b:64:91:2a:ea:1f:ed:41:1d:b1:36:ea:d0:42:4f: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:29:AB:8F:F7:0F:A9:4F:79:12:BF:22:38:99:2B:E0:C8:6C:B6:1B X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:79:0c:59:15:d7:e2:da:14:db:ec:01:b2:95:46:3c:9d:d9: e6:83:2d:c0:1a:69:2c:3e:de:25:d2:ea:26:db:3a:cb:8f:e3: b9:27:4b:0d:8d:fb:a3:74:26:e9:2a:34:f9:4c:dc:90:ef:10: df:ad:4e:13:7d:77:28:e7:2b:55:c5:d3:6f:d4:61:d2:74:d8: 93:9d:24:17:e7:ff:ae:8e:4f:8d:20:00:a8:1e:da:07:22:65: bc:8b:b2:b6:61:69:a5:78:20:ab:91:79:6a:a5:db:aa:57:f7: aa:bf:bc:3f:75:d5:6c:1c:5b:80:a0:bd:8f:36:f5:0d:46:0d: ec:0b:d5:7e:fb:b1:c3:d3:ec:c3:62:a3:80:fb:6a:fd:d7:33: 7d:48:61:79:7a:49:2d:b6:d5:ee:37:6a:9a:1c:ea:45:c7:68: 4a:85:ec:19:86:ab:c9:11:19:39:63:c9:b8:82:34:93:a6:16: 04:14:8d:23:dd:28:aa:5a:38:50:14:62:ca:bd:13:29:e0:12: d5:17:63:7c:c0:05:22:4c:ec:af:3b:ce:19:43:e7:83:69:64: 85:34:3a:84:15:58:9f:c3:7a:6a:23:2d:80:a0:83:11:cf:e6: b8:3b:6f:6b:36:25:f8:ad:a3:49:3b:58:cf:48:a6:44:d9:0d: e0:88:ac:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUwMzI4MjAxOTM5WhcNMjUwNDA0MjAxOTM5WjAYMRYwFAYD VQQDEw02N2U3MDQ1Yi1jYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZROrs0HOew+TLaFu3cE0QNSbwxM0K9o+ffSJLSB4ZJLZJ/qlgsYhxdHSAqa 0lTvAuGvmtH/6r8uQHhK9tRTFlDVFMYfJZvpMxm9jYxrNmsdP64rmSB90Wnmqgj9 nDgURfFQPoZuGHUvd0B3WZFyxsxaN4e0Ja2pNhcL1i74Pt6c0ge8ihpBcMtHrGEV y+aqOh8b3BCDEbHylsdkmN1uFNh4BNXOSVzTw8Zg8b03xQyPRTYDVF1OW04slBoS /jyJFS+SW/ekb3mDhF3JXWgPzCO+FhIJw8/ub2L5z/OhaX41ighzKK0tNznu2v56 boYrZJEq6h/tQR2xNurQQk+nHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgpq4/3 D6lPeRK/IjiZK+DIbLYbMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBweQxZFdfi2hTb7AGylUY8ndnmgy3AGmksPt4l0uom2zrLj+O5J0sN jfujdCbpKjT5TNyQ7xDfrU4TfXco5ytVxdNv1GHSdNiTnSQX5/+ujk+NIACoHtoH ImW8i7K2YWmleCCrkXlqpduqV/eqv7w/ddVsHFuAoL2PNvUNRg3sC9V++7HD0+zD YqOA+2r91zN9SGF5ekktttXuN2qaHOpFx2hKhewZhqvJERk5Y8m4gjSTphYEFI0j 3SiqWjhQFGLKvRMp4BLVF2N8wAUiTOyvO84ZQ+eDaWSFNDqEFVifw3pqIy2AoIMR z+a4O29rNiX4raNJO1jPSKZE2Q3giKwe -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client