$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: 2W2c0CUt07RFMBPFLzndveOj7cEJKbEuyC91qYCgYY0= Subject key identifier: B5:2B:EB:EF:79:17:3C:77:58:83:06:FF:8A:A5:CC:43:DA:11:E9:DF Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: E7 Signing time: Sat 05 Apr 2025 04:43:17 +0000 Manifest this update: Sat 05 Apr 2025 04:43:16 +0000 Manifest next update: Sat 12 Apr 2025 04:43:16 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: oEpqURXSykrH9nBPhaIW4QZhTPWgH/gQfuzYaAFbmGM=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526 Validity Not Before: Apr 5 04:43:16 2025 GMT Not After : Apr 12 04:43:16 2025 GMT Subject: CN=67f0b4e5-7e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:4f:74:a1:f3:40:07:f9:f9:4a:db:d5:9c: 09:5e:19:42:50:05:e3:25:85:d4:0f:94:77:aa:0d: 08:1e:71:27:24:0c:5a:19:71:71:7e:e0:6e:4c:ae: dd:26:f7:57:49:b5:25:81:a4:0c:1b:56:c1:fb:db: f8:4d:56:c7:31:12:fc:09:89:e8:2a:0c:de:67:a1: 7a:c0:d8:fa:d6:8c:2d:d4:c5:1e:99:d0:81:93:c3: aa:01:51:3f:e7:21:69:5a:ed:26:aa:cc:b4:a1:ca: fe:c9:11:bf:7e:fa:d2:f4:ff:da:a9:8d:84:1b:de: 56:0f:52:cf:e5:d3:71:e2:a8:04:02:83:91:eb:d6: ca:39:01:0f:3a:86:dd:a8:52:2b:59:3a:12:08:b7: 07:34:7d:d7:1d:71:e5:cb:55:39:54:07:1e:c0:55: 24:ec:8f:02:06:24:28:a7:d2:9a:29:ed:08:bf:0b: 0d:8f:31:c6:00:f3:a9:33:b6:81:1c:99:17:ec:5a: a0:20:e7:e6:e2:2a:58:fa:b8:26:ef:cc:e1:96:81: ed:a8:dd:3a:cc:5b:7b:64:e4:58:2c:20:f0:5a:de: a8:30:c8:55:05:46:df:5e:5d:83:1c:65:cd:1a:c3: 5e:ce:52:b2:4b:82:89:5c:ca:10:c8:84:47:95:3c: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:EB:EF:79:17:3C:77:58:83:06:FF:8A:A5:CC:43:DA:11:E9:DF X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ba:32:16:4c:33:e6:d5:02:f0:39:89:09:93:0f:b6:ff:d0: b9:4d:eb:5b:ec:38:dc:18:9b:95:fc:46:3a:52:6e:7b:a2:86: 9d:be:b8:85:05:4f:35:d0:d7:f1:60:9e:3d:ba:df:eb:8a:d6: 28:d6:a5:5d:6f:98:d0:7e:86:14:7c:dd:c0:14:a5:4f:9c:91: 70:ae:7c:e8:22:63:f6:54:28:da:c5:ab:b8:ed:11:3a:b8:75: 15:cf:82:ad:9d:0e:1b:62:47:bd:3b:b2:5d:d7:19:f5:41:c0: 38:bb:ab:fa:1b:26:41:1d:2b:8d:53:68:52:9e:90:15:b9:70: 8e:47:9a:81:f0:85:ed:8e:7e:86:c1:80:62:69:51:91:c3:c4: 0d:85:c5:b4:10:7c:3a:21:08:ab:c8:e7:45:25:fe:62:5f:76: ad:fc:a5:a8:f8:d2:2c:44:59:39:81:3d:96:a4:4f:43:ec:2d: 29:6d:0c:1d:1e:92:32:3e:da:16:94:a8:ac:80:4f:e6:8d:13: c5:09:d2:c7:51:80:d1:c1:83:d3:d1:d0:9d:2d:2b:d1:10:3a: bb:45:9d:e5:2f:0c:a8:7f:f2:6e:e5:c9:b1:bc:bf:6d:3a:9f: 2c:b1:9e:56:bd:50:df:3f:bf:c1:4c:ef:ad:09:d6:09:38:1d: 17:19:bc:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwNDA1MDQ0MzE2WhcNMjUwNDEyMDQ0MzE2WjAYMRYwFAYD VQQDEw02N2YwYjRlNS03ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSVPdKHzQAf5+Urb1ZwJXhlCUAXjJYXUD5R3qg0IHnEnJAxaGXFxfuBuTK7d JvdXSbUlgaQMG1bB+9v4TVbHMRL8CYnoKgzeZ6F6wNj61owt1MUemdCBk8OqAVE/ 5yFpWu0mqsy0ocr+yRG/fvrS9P/aqY2EG95WD1LP5dNx4qgEAoOR69bKOQEPOobd qFIrWToSCLcHNH3XHXHly1U5VAcewFUk7I8CBiQop9KaKe0IvwsNjzHGAPOpM7aB HJkX7FqgIOfm4ipY+rgm78zhloHtqN06zFt7ZORYLCDwWt6oMMhVBUbfXl2DHGXN GsNezlKyS4KJXMoQyIRHlTylDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUr6+95 Fzx3WIMG/4qlzEPaEenfMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAujIWTDPm1QLwOYkJkw+2/9C5Tetb7DjcGJuV/EY6Um57ooadvriF BU810NfxYJ49ut/ritYo1qVdb5jQfoYUfN3AFKVPnJFwrnzoImP2VCjaxau47RE6 uHUVz4KtnQ4bYke9O7Jd1xn1QcA4u6v6GyZBHSuNU2hSnpAVuXCOR5qB8IXtjn6G wYBiaVGRw8QNhcW0EHw6IQiryOdFJf5iX3at/KWo+NIsRFk5gT2WpE9D7C0pbQwd HpIyPtoWlKisgE/mjRPFCdLHUYDRwYPT0dCdLSvREDq7RZ3lLwyof/Ju5cmxvL9t Op8ssZ5WvVDfP7/BTO+tCdYJOB0XGbyT -----END CERTIFICATE-----Generated at Sun Apr 6 02:26:21 2025 by rpki-client