$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: y3zAmP/jqTkAGtAOUEUm+7RKW8A0jgNTYHjla6X8bAw= Subject key identifier: 70:05:31:FE:B0:3B:44:AF:47:1E:2B:56:03:8F:64:A3:8B:6A:C7:B0 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: B7 Signing time: Sat 29 Mar 2025 05:31:22 +0000 Manifest this update: Sat 29 Mar 2025 05:31:21 +0000 Manifest next update: Sat 05 Apr 2025 05:31:21 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: kFzmimvYkk3rqec9TYtcvJ785VmxFZVDIknIfekHxYI=) 2: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098 Validity Not Before: Mar 29 05:31:21 2025 GMT Not After : Apr 5 05:31:21 2025 GMT Subject: CN=67e785aa-4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:1f:8b:28:06:51:cf:86:42:09:2a:a4:b4: 60:16:63:62:30:cf:23:9c:68:f4:85:09:ea:a6:d4: 5c:2f:db:ea:23:6a:f9:ed:00:6c:36:66:8d:ba:23: ae:ac:90:14:8c:64:fe:22:26:9b:e4:db:21:1a:8b: 22:72:cb:dc:81:95:66:dd:25:e3:fc:5b:8e:41:fd: 6d:88:7f:ec:d7:f0:11:a1:5a:85:94:8b:aa:a7:bd: ed:77:3b:32:56:ff:00:d3:c1:17:c1:bf:50:69:cb: a7:f3:89:ea:4e:2b:74:aa:f5:49:0e:4c:ae:5a:ef: 59:46:27:9e:71:ee:27:1e:73:ae:e5:59:f3:81:b2: 60:28:42:e4:a2:ec:d8:fa:cb:99:69:9a:08:e9:de: dd:9c:4a:9e:ce:ae:62:98:91:cf:53:7f:cf:6b:87: b1:45:12:1d:6c:bd:7d:f5:de:76:2b:78:22:2a:c7: 7b:94:60:55:98:ca:26:84:b4:0f:79:d4:6e:c1:31: 6f:34:02:24:c8:ac:99:c3:b3:c7:78:00:9d:38:7b: fe:2c:22:c4:ac:8b:b3:fe:67:48:eb:5f:59:25:3c: 06:a6:22:29:78:a3:96:a8:97:7a:12:83:b9:4b:ab: 67:92:ca:b8:00:ed:c2:aa:c4:1a:b5:89:27:55:64: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:05:31:FE:B0:3B:44:AF:47:1E:2B:56:03:8F:64:A3:8B:6A:C7:B0 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:70:d2:96:6a:77:61:d3:62:ce:ec:5f:52:96:f3:e1:cb:1d: ae:a7:9e:80:43:f3:c2:de:59:68:79:63:e4:cf:4e:66:4c:a9: 5a:0d:61:61:eb:34:d2:21:eb:39:53:a5:bf:49:80:72:a7:14: 61:91:98:54:9f:b8:60:b3:88:a5:51:ac:40:00:76:ac:ab:ab: 02:cc:4a:c1:90:cc:61:7f:b6:1e:18:a5:58:d1:00:75:76:5a: 23:2e:5b:26:3a:5e:de:40:05:00:00:40:80:c8:77:71:c9:d6: f0:24:c3:78:ee:0b:d5:78:9f:b1:24:9b:48:5d:0c:08:92:c7: a7:7c:00:31:09:0c:78:c4:2c:dc:e9:a9:2a:59:93:50:9a:e3: 59:51:25:6b:e1:dc:5f:16:4a:90:f3:ee:25:49:fa:76:1a:ee: 6a:09:ac:ba:e5:cf:e7:9e:f7:5a:18:5d:58:4b:86:95:96:17: 02:f0:b3:e1:9e:98:84:51:ac:31:9b:8d:33:14:77:97:69:3d: a1:15:be:a4:0c:b4:ff:e8:a0:dc:b3:10:11:fc:5a:95:ff:4d: 3e:df:f3:52:1d:63:f9:19:f9:24:0d:6f:27:bf:13:21:76:00: ea:ff:ec:97:bd:20:88:38:9a:db:6e:7a:97:a9:97:6d:71:7d: cc:06:34:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwMzI5MDUzMTIxWhcNMjUwNDA1MDUzMTIxWjAYMRYwFAYD VQQDEw02N2U3ODVhYS00YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymcfiygGUc+GQgkqpLRgFmNiMM8jnGj0hQnqptRcL9vqI2r57QBsNmaNuiOu rJAUjGT+Iiab5NshGosicsvcgZVm3SXj/FuOQf1tiH/s1/ARoVqFlIuqp73tdzsy Vv8A08EXwb9Qacun84nqTit0qvVJDkyuWu9ZRieece4nHnOu5VnzgbJgKELkouzY +suZaZoI6d7dnEqezq5imJHPU3/Pa4exRRIdbL199d52K3giKsd7lGBVmMomhLQP edRuwTFvNAIkyKyZw7PHeACdOHv+LCLErIuz/mdI619ZJTwGpiIpeKOWqJd6EoO5 S6tnksq4AO3CqsQatYknVWQdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAFMf6w O0SvRx4rVgOPZKOLasewMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTcNKWandh02LO7F9SlvPhyx2up56AQ/PC3lloeWPkz05mTKlaDWFh 6zTSIes5U6W/SYBypxRhkZhUn7hgs4ilUaxAAHasq6sCzErBkMxhf7YeGKVY0QB1 dlojLlsmOl7eQAUAAECAyHdxydbwJMN47gvVeJ+xJJtIXQwIksenfAAxCQx4xCzc 6akqWZNQmuNZUSVr4dxfFkqQ8+4lSfp2Gu5qCay65c/nnvdaGF1YS4aVlhcC8LPh npiEUawxm40zFHeXaT2hFb6kDLT/6KDcsxAR/FqV/00+3/NSHWP5GfkkDW8nvxMh dgDq/+yXvSCIOJrbbnqXqZdtcX3MBjQr -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:47 2025 by rpki-client