$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: S9pIQ6lqVz7zIDne/vl7k0lwFaOkkWtdGwUkPD2kLNY= Subject key identifier: 13:C3:D4:4C:80:8E:62:92:BF:E9:08:DE:F7:F8:AD:66:6D:1F:90:67 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B3F Signing time: Fri 04 Apr 2025 16:19:45 +0000 Manifest this update: Fri 04 Apr 2025 16:19:45 +0000 Manifest next update: Fri 11 Apr 2025 16:19:45 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: vhcFCmTMOnL9/M+zN2PBMLTY6uEMsIxISxZcq/nM+P0=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: vUCWQOdb7qjvOhdcg4SHMXTM8oTjFBVRvGp114pmqGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6984 (0x1b48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E Validity Not Before: Apr 4 16:19:45 2025 GMT Not After : Apr 11 16:19:45 2025 GMT Subject: CN=67f006a1-3630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:da:0b:96:36:f4:2c:31:ee:38:b0:2e:2a: f4:39:9a:42:51:9d:18:5c:ae:9d:13:80:32:33:b5: 0c:82:40:5c:bf:80:04:2b:b0:64:d9:be:c4:ff:95: 6f:c3:d5:f1:df:d8:5a:57:5a:3a:47:ba:9e:3a:00: 99:9f:05:cf:87:d8:75:e2:19:65:52:1e:1d:f7:4a: 41:8c:f7:2a:c1:56:ff:9a:ff:20:37:75:3e:e0:bc: 6c:28:68:6e:f0:c6:d7:ec:c3:01:04:8d:a1:01:ee: b1:cf:5d:34:20:3a:a9:ba:c8:bc:3e:ed:34:28:28: fe:93:61:a0:38:17:24:f7:11:12:fb:f7:00:c9:82: 30:7e:7f:4e:d7:69:4e:cf:cb:90:ae:98:c8:1d:24: 27:49:a0:aa:7a:f6:a3:45:47:06:55:31:d1:49:9c: b9:a7:2e:f7:ed:96:69:66:5d:73:e0:97:36:5d:20: cc:07:53:12:d6:5c:b5:d0:d2:4b:7a:14:db:45:af: 82:bd:fe:94:91:5d:99:71:54:d9:2a:8b:31:4e:bb: 7c:25:b0:6c:a7:b4:76:f7:a5:56:e3:04:e0:12:ca: c8:58:a0:80:22:60:9e:8d:61:25:4f:a8:65:da:b6: c1:fb:80:66:c0:ee:dc:4e:01:ab:dd:23:9b:76:15: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:D4:4C:80:8E:62:92:BF:E9:08:DE:F7:F8:AD:66:6D:1F:90:67 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3d:c4:11:2b:98:b0:42:a0:43:45:6a:a6:82:52:34:5d:1e: b2:ac:49:c7:82:27:12:e1:3e:1c:d9:e3:e3:f3:66:46:da:7a: 6a:8e:cc:d6:28:96:4a:f1:d0:41:7e:c5:5d:8e:f0:c2:bc:a1: 55:50:fc:b8:6a:09:a0:20:e0:7f:2f:da:db:67:48:87:cf:2a: 5b:16:15:3d:63:38:3f:a7:0f:a7:cc:6b:46:6b:35:99:72:8b: 89:81:e4:58:ea:29:46:18:b1:a9:70:b7:cd:65:41:a7:6f:15: c7:04:15:18:e9:c7:af:97:bb:2f:9d:87:d7:7a:81:c3:14:1d: a5:f5:44:1e:50:7e:09:ba:e8:1f:af:67:f1:99:df:8c:e4:6a: c9:77:8e:d6:bc:40:06:86:40:76:05:9e:bc:cf:2e:11:7c:c8: 89:f2:69:e8:f2:ff:27:cd:27:1e:59:80:78:4f:2d:d7:6e:d6: 78:11:c7:f3:a5:48:53:53:63:8a:7b:35:1e:9c:13:fa:47:f7: 98:70:6d:22:b4:ba:11:4b:35:13:ec:2b:fa:55:33:fb:17:00: 35:cb:ff:cc:af:87:50:1d:5f:93:d7:cb:88:d0:23:3a:64:0f: 69:70:46:2b:54:b9:7d:6f:c3:32:23:ad:06:1f:c8:cb:f9:3f: 0b:64:2b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwNDA0MTYxOTQ1WhcNMjUwNDExMTYxOTQ1WjAYMRYwFAYD VQQDEw02N2YwMDZhMS0zNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpjaC5Y29Cwx7jiwLir0OZpCUZ0YXK6dE4AyM7UMgkBcv4AEK7Bk2b7E/5Vv w9Xx39haV1o6R7qeOgCZnwXPh9h14hllUh4d90pBjPcqwVb/mv8gN3U+4LxsKGhu 8MbX7MMBBI2hAe6xz100IDqpusi8Pu00KCj+k2GgOBck9xES+/cAyYIwfn9O12lO z8uQrpjIHSQnSaCqevajRUcGVTHRSZy5py737ZZpZl1z4Jc2XSDMB1MS1ly10NJL ehTbRa+Cvf6UkV2ZcVTZKosxTrt8JbBsp7R296VW4wTgEsrIWKCAImCejWElT6hl 2rbB+4BmwO7cTgGr3SObdhWlxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPD1EyA jmKSv+kI3vf4rWZtH5BnMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPcQRK5iwQqBDRWqmglI0XR6yrEnHgicS4T4c2ePj82ZG2npqjszW KJZK8dBBfsVdjvDCvKFVUPy4agmgIOB/L9rbZ0iHzypbFhU9Yzg/pw+nzGtGazWZ couJgeRY6ilGGLGpcLfNZUGnbxXHBBUY6cevl7svnYfXeoHDFB2l9UQeUH4Juugf r2fxmd+M5GrJd47WvEAGhkB2BZ68zy4RfMiJ8mno8v8nzSceWYB4Ty3XbtZ4Ecfz pUhTU2OKezUenBP6R/eYcG0itLoRSzUT7Cv6VTP7FwA1y//Mr4dQHV+T18uI0CM6 ZA9pcEYrVLl9b8MyI60GH8jL+T8LZCvj -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:08 2025 by rpki-client