$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: bt7MHWXfrf8pQzfLsinn6OuhirchqEOUYy2T3wGvgNE= Subject key identifier: 7D:2E:38:2F:F9:6F:2D:97:2D:84:83:1A:FF:32:96:D8:B9:69:94:07 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 049A Signing time: Sat 29 Mar 2025 00:14:21 +0000 Manifest this update: Sat 29 Mar 2025 00:14:21 +0000 Manifest next update: Sat 05 Apr 2025 00:14:21 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: 7/rVtW1vdvaA2FSmB1hWL/6VB7pADIRJhaFEi54jMUw=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50 Validity Not Before: Mar 29 00:14:21 2025 GMT Not After : Apr 5 00:14:21 2025 GMT Subject: CN=67e73b5d-cd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:7b:a4:30:c3:fa:35:44:f0:63:6a:4c:09: 89:a0:2e:c3:b7:09:7d:9e:fb:d4:06:cd:b7:7e:e0: 07:9d:82:0c:12:b3:55:12:0a:7e:e5:45:d7:c5:9a: c7:bc:56:55:38:b6:6d:0e:b5:fe:ba:b4:ee:ea:9f: 93:12:f6:2d:5e:81:7c:1b:31:2e:4a:57:ac:25:88: 10:5f:6b:8b:ef:71:b3:48:e2:5c:74:a9:c9:39:ef: 47:3d:b0:fa:34:b4:b6:55:19:e5:45:3e:c1:4a:e4: ab:4d:bb:6f:1b:97:44:f7:64:99:57:c7:95:a3:f3: d2:b3:63:c1:0d:a4:d8:c1:3b:c8:20:00:22:be:d2: 1b:53:14:8b:40:81:d2:fb:09:f0:a3:5f:67:7d:75: a6:8d:9f:f6:ef:e5:c8:9e:6f:67:43:54:2d:e6:f3: c8:f2:3f:ef:46:14:da:f0:f9:03:ad:43:be:c5:55: 4d:76:62:b4:b4:6b:ca:a3:ba:68:d1:7c:3d:ae:db: b5:27:77:4c:34:c9:06:96:8d:13:f2:b3:f3:a9:4b: 5d:0e:b3:0f:9e:20:d5:ea:d4:03:84:63:ce:5f:cf: 64:01:36:b4:f0:98:a9:6d:34:b5:45:8b:90:9f:11: 90:9f:29:63:45:71:dc:ed:d3:87:c4:ac:85:30:59: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2E:38:2F:F9:6F:2D:97:2D:84:83:1A:FF:32:96:D8:B9:69:94:07 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:2c:c3:e0:ea:c3:7a:19:ab:85:dc:ba:12:73:08:b2:24:e0: c7:99:6f:ea:9a:97:de:90:39:8a:a2:72:35:76:33:57:97:25: 3a:c1:92:b9:7e:b9:25:65:d7:21:56:5d:eb:14:db:fa:00:c1: 4f:a9:61:b9:e5:51:5e:17:10:51:34:5e:b8:fc:26:6a:dc:43: f0:53:db:8a:34:02:5d:02:16:6f:d1:d0:11:20:87:0d:a2:02: fc:2c:7b:5e:3b:5b:9c:9d:fa:cc:47:7a:1a:b7:b6:2a:9b:43: 22:5d:5e:02:c9:4a:e9:db:ef:6f:5f:64:f2:03:76:e1:98:25: a9:88:92:f9:a0:3b:81:4a:27:0e:2c:04:5c:3f:93:4d:d5:af: 9a:f7:f6:64:1f:f9:7d:2e:29:2c:e2:0e:2c:8c:06:09:6d:9c: 4b:73:9e:98:b8:f7:99:9c:2b:94:5e:d0:a9:f3:66:64:db:9e: aa:1f:b5:b1:41:01:66:67:46:1a:09:c0:13:81:0e:c8:e9:ac: f4:fe:02:c1:a7:c9:49:07:22:97:3d:16:d0:c3:9d:2c:93:56: 61:12:cd:c8:24:40:f3:77:52:31:02:04:20:28:d1:bd:96:33: 61:47:75:fc:a7:1f:06:47:2f:75:79:6a:99:43:13:06:20:e2: 08:eb:7a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUwMzI5MDAxNDIxWhcNMjUwNDA1MDAxNDIxWjAYMRYwFAYD VQQDEw02N2U3M2I1ZC1jZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jF7pDDD+jVE8GNqTAmJoC7Dtwl9nvvUBs23fuAHnYIMErNVEgp+5UXXxZrH vFZVOLZtDrX+urTu6p+TEvYtXoF8GzEuSlesJYgQX2uL73GzSOJcdKnJOe9HPbD6 NLS2VRnlRT7BSuSrTbtvG5dE92SZV8eVo/PSs2PBDaTYwTvIIAAivtIbUxSLQIHS +wnwo19nfXWmjZ/27+XInm9nQ1Qt5vPI8j/vRhTa8PkDrUO+xVVNdmK0tGvKo7po 0Xw9rtu1J3dMNMkGlo0T8rPzqUtdDrMPniDV6tQDhGPOX89kATa08JipbTS1RYuQ nxGQnyljRXHc7dOHxKyFMFmNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0uOC/5 by2XLYSDGv8ylti5aZQHMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFLMPg6sN6GauF3LoScwiyJODHmW/qmpfekDmKonI1djNXlyU6wZK5 frklZdchVl3rFNv6AMFPqWG55VFeFxBRNF64/CZq3EPwU9uKNAJdAhZv0dARIIcN ogL8LHteO1ucnfrMR3oat7Yqm0MiXV4CyUrp2+9vX2TyA3bhmCWpiJL5oDuBSicO LARcP5NN1a+a9/ZkH/l9Liks4g4sjAYJbZxLc56YuPeZnCuUXtCp82Zk256qH7Wx QQFmZ0YaCcATgQ7I6az0/gLBp8lJByKXPRbQw50sk1ZhEs3IJEDzd1IxAgQgKNG9 ljNhR3X8px8GRy91eWqZQxMGIOII63oD -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:28 2025 by rpki-client