$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft File: yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json) Hash identifier: X/30q3cOtX3ORYp6DkX32tUB3T+Gt10shSoPLjSoSq4= Subject key identifier: 9E:BC:A2:07:6F:6E:C8:FA:53:EF:50:A5:F2:4A:75:40:01:A4:0C:6E Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E Certificate issuer: /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft Manifest number: 026B Signing time: Tue 15 Apr 2025 01:24:39 +0000 Manifest this update: Tue 15 Apr 2025 01:24:38 +0000 Manifest next update: Tue 22 Apr 2025 01:24:38 +0000 Files and hashes: 1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: x1Acnnff/2qMykAbTyNFWJUxOH7cH+QatxJlGUBpd6I=) 2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: FjhqaYSiBCUDBbMEgbA2g2o60t2rFoI+M1oEk+41mT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Validity Not Before: Apr 15 01:24:38 2025 GMT Not After : Apr 22 01:24:38 2025 GMT Subject: CN=67fdb557-1e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:26:cc:57:cf:98:b5:03:2d:27:6c:b9:19: 58:d8:34:4b:7f:3a:bc:a6:e7:0f:e1:d6:17:73:b9: 1d:93:ff:51:1d:d0:10:f5:fd:12:08:65:17:ce:01: 6a:7d:b7:75:44:c4:61:19:ab:fe:81:b2:bc:00:42: 9c:3a:46:f6:6a:2a:22:39:17:89:38:19:46:be:c7: cf:48:68:95:17:4d:d3:dc:8f:1d:13:47:3b:c4:a5: a7:16:2c:09:21:93:88:66:06:5c:a3:ac:fd:02:f4: 16:28:0c:48:9e:2a:16:6a:cc:e9:14:78:d0:64:37: f1:5b:ae:b4:b8:8c:1e:85:e1:8c:da:1c:50:be:d8: c2:a3:37:ca:45:cc:d9:06:1b:cb:c3:27:09:f2:72: 20:d5:c6:05:9c:d3:9c:8d:97:d3:f6:4e:c1:b3:3d: eb:74:e2:bd:ff:bb:21:7f:ee:af:ff:38:af:99:00: 59:50:04:cc:97:fb:cf:3e:14:90:f0:7e:44:1b:76: 06:2f:d5:46:63:d0:da:a7:a1:fb:53:f7:fd:8e:0b: fd:47:6a:20:38:7d:1b:a9:10:d0:68:74:a5:bd:6c: 49:8d:b8:b2:5a:90:36:4c:24:8b:60:25:0d:59:9b: a6:40:e7:fb:3b:81:59:9f:ea:43:0d:28:b8:36:44: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BC:A2:07:6F:6E:C8:FA:53:EF:50:A5:F2:4A:75:40:01:A4:0C:6E X509v3 Authority Key Identifier: keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:05:4b:91:d6:39:36:77:9d:c8:61:63:e3:5a:9f:e3:76: 83:4d:6a:3e:ba:60:0b:dc:ae:58:59:f9:d6:39:ab:4c:2b:8f: 5f:df:b5:ab:e2:40:4e:38:e4:d9:95:48:44:bc:56:c4:99:6c: d6:a5:71:ba:35:ae:d4:77:7a:99:b9:81:df:97:4c:b0:dc:49: bf:db:90:0c:3c:0c:88:2d:ac:42:63:8f:cc:20:f6:81:22:3b: 1f:e0:61:2d:83:03:f2:7b:32:3c:85:9d:9b:de:85:b6:e0:c0: e1:fc:d6:7a:1d:23:fb:1a:a7:c9:e0:36:24:98:88:ba:2e:f5: 25:c4:32:f0:76:75:d8:83:a4:11:3f:b8:2d:3f:b3:c0:43:63: 20:fd:ac:5c:c5:7e:fe:64:97:34:e4:f3:e0:62:f0:b3:55:14: 46:29:d6:83:86:7e:58:78:e9:03:69:4b:b8:08:5e:68:f1:52: 22:d5:c0:52:5a:b1:18:2a:b9:43:01:1b:36:03:1d:f3:5b:39: 7f:dd:bc:e1:e6:92:07:01:ec:0f:fa:ea:f7:c9:df:2c:4c:a1: 54:be:25:a3:bc:36:f7:38:04:4a:65:e1:86:b6:a1:38:66:86: 1f:9f:1d:45:6d:8c:08:e6:fb:5b:8c:e9:20:31:65:fc:b8:04: 7e:5e:f8:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0N0MxMTAvBgNVBAUTKEM5MzYwRUM5MUVFQzE0QjA3RUQ3OTJGRDNCMEZCQUI3 RkY5RjY0MkUwHhcNMjUwNDE1MDEyNDM4WhcNMjUwNDIyMDEyNDM4WjAYMRYwFAYD VQQDEw02N2ZkYjU1Ny0xZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzUmzFfPmLUDLSdsuRlY2DRLfzq8pucP4dYXc7kdk/9RHdAQ9f0SCGUXzgFq fbd1RMRhGav+gbK8AEKcOkb2aioiOReJOBlGvsfPSGiVF03T3I8dE0c7xKWnFiwJ IZOIZgZco6z9AvQWKAxInioWaszpFHjQZDfxW660uIweheGM2hxQvtjCozfKRczZ BhvLwycJ8nIg1cYFnNOcjZfT9k7Bsz3rdOK9/7shf+6v/zivmQBZUATMl/vPPhSQ 8H5EG3YGL9VGY9Dap6H7U/f9jgv9R2ogOH0bqRDQaHSlvWxJjbiyWpA2TCSLYCUN WZumQOf7O4FZn+pDDSi4NkTHoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ68ogdv bsj6U+9QpfJKdUABpAxuMB8GA1UdIwQYMBaAFMk2Dske7BSwfteS/TsPurf/n2Qu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ3Qy81NzZDQ0QyQTBD NTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZMQi0xNUw5T3ctNnRfLWZa QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUWU95UjdzRkxCLTE1TDlPdy02dF8tZlpDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ3Qy81NzZDQ0QyQTBDNTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZM Qi0xNUw5T3ctNnRfLWZaQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayQVLkdY5NnedyGFj41qf43aDTWo+umAL3K5YWfnWOatMK49f37Wr 4kBOOOTZlUhEvFbEmWzWpXG6Na7Ud3qZuYHfl0yw3Em/25AMPAyILaxCY4/MIPaB Ijsf4GEtgwPyezI8hZ2b3oW24MDh/NZ6HSP7GqfJ4DYkmIi6LvUlxDLwdnXYg6QR P7gtP7PAQ2Mg/axcxX7+ZJc05PPgYvCzVRRGKdaDhn5YeOkDaUu4CF5o8VIi1cBS WrEYKrlDARs2Ax3zWzl/3bzh5pIHAewP+ur3yd8sTKFUviWjvDb3OARKZeGGtqE4 ZoYfnx1FbYwI5vtbjOkgMWX8uAR+Xvg7 -----END CERTIFICATE-----Generated at Tue Apr 15 12:20:38 2025 by rpki-client