$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: 6hff3ahDWcxx9K2fUSOloFtll9gVuHXvx+V8rfStHYs= Subject key identifier: AD:EB:08:75:BF:0E:8B:D4:B0:F6:88:67:7E:3A:A3:49:75:83:9F:0D Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 2F Signing time: Thu 03 Apr 2025 07:05:12 +0000 Manifest this update: Thu 03 Apr 2025 07:05:12 +0000 Manifest next update: Thu 10 Apr 2025 07:05:11 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: pgtNuX5gRtF8PE38vSDpEBUO9dSg+wNTm4DMqJYLypw=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: U1IGaFhELlQWY/Ln876qk8JzJ3sNkyrrUJbwE+5NxYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491 Validity Not Before: Apr 3 07:05:12 2025 GMT Not After : Apr 10 07:05:11 2025 GMT Subject: CN=67ee3328-3046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:48:f7:0c:5a:1f:f2:be:cf:76:4f:f0:2b: 0b:84:32:29:75:60:e9:10:5d:b9:e2:05:c4:ef:c6: 13:87:59:40:43:5e:fd:95:3b:1b:ee:d2:9f:b5:a7: 7c:96:d3:73:71:a7:f5:15:76:ac:7f:a5:03:0a:52: 6a:ab:5a:c0:11:e8:c3:fc:84:1c:b4:a9:6a:21:23: 12:7e:ea:87:70:15:2c:a1:90:b2:ae:31:d8:9a:da: dd:7e:86:7b:e1:af:54:68:b6:3f:3b:22:85:d6:b2: 6a:da:4e:b0:48:5f:4b:f9:9c:41:3d:c4:a1:2d:cb: 6d:1e:95:be:03:cc:30:34:38:a5:67:db:5e:ea:3d: 32:53:62:df:c0:da:9a:4f:68:ad:8a:40:74:64:df: 74:32:36:c7:35:cf:ff:a7:bb:1a:b9:fc:1e:6c:d5: bf:45:6b:79:e4:10:30:39:91:fd:3d:d7:48:ae:5a: 4c:f6:93:59:a3:b9:0a:be:85:8f:d5:17:97:ed:78: 1a:c2:b1:95:dc:7f:cc:73:ef:4d:98:5f:02:90:f4: c5:f3:32:a1:e4:1d:4f:6c:38:87:a7:7a:a5:7d:83: c9:dd:6a:77:0f:cb:54:8c:c5:c5:1c:5d:d2:49:89: d4:cb:31:a1:5a:07:58:fc:ee:73:09:ae:5b:ce:1c: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EB:08:75:BF:0E:8B:D4:B0:F6:88:67:7E:3A:A3:49:75:83:9F:0D X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:29:b7:28:87:9e:bd:88:94:5e:57:dd:e7:a1:6d:9a:2b:8d: 79:8f:41:af:85:22:43:c6:e1:f7:4f:d1:1f:ee:eb:4b:bd:32: d8:cc:b1:f6:72:cd:41:0b:1b:ee:9b:d0:87:8b:e8:b9:3c:9f: 7e:85:d8:69:e1:ac:6a:90:a3:e0:30:f0:cd:77:99:eb:6a:61: b4:99:d7:7a:49:71:a5:d9:af:d1:f0:00:6a:c2:31:43:0e:dd: 30:dc:e5:b8:4b:d4:f7:9a:6b:23:3a:23:6f:1b:38:a6:3c:83: a4:47:96:78:45:37:5c:aa:d9:b6:42:d7:84:d4:59:48:25:14: 6f:90:40:16:ac:57:96:df:82:7f:e0:79:b7:d0:aa:41:d0:18: 56:84:2b:21:f5:51:bc:d7:e9:45:41:99:ff:69:2b:64:e9:a7: 78:1c:73:9d:04:b6:2d:2f:b8:6e:a2:c3:c9:da:1f:ce:75:25: 28:72:47:61:62:6e:82:5e:25:ee:dc:34:85:cb:b6:69:02:f8: 2e:00:29:53:6d:db:b0:87:8e:b8:8c:b0:68:11:11:82:b1:19: 20:a7:e0:27:4d:b9:71:30:a1:a3:e7:e3:02:80:b5:2b:d2:ad: 47:8d:d5:e4:de:0d:b3:1c:51:9e:da:50:c3:45:38:99:fe:90: 1d:c3:51:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODQ5MTExMC8GA1UEBRMoNjFGOEM3RUJBN0I1NUU3MUIyRTZCMTc3NDA5MTQyNTFE ODhDRjBBNjAeFw0yNTA0MDMwNzA1MTJaFw0yNTA0MTAwNzA1MTFaMBgxFjAUBgNV BAMTDTY3ZWUzMzI4LTMwNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIAUj3DFof8r7Pdk/wKwuEMil1YOkQXbniBcTvxhOHWUBDXv2VOxvu0p+1p3yW 03Nxp/UVdqx/pQMKUmqrWsAR6MP8hBy0qWohIxJ+6odwFSyhkLKuMdia2t1+hnvh r1Rotj87IoXWsmraTrBIX0v5nEE9xKEty20elb4DzDA0OKVn217qPTJTYt/A2ppP aK2KQHRk33QyNsc1z/+nuxq5/B5s1b9Fa3nkEDA5kf0910iuWkz2k1mjuQq+hY/V F5fteBrCsZXcf8xz702YXwKQ9MXzMqHkHU9sOIeneqV9g8ndancPy1SMxcUcXdJJ idTLMaFaB1j87nMJrlvOHDrzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUresIdb8O i9Sw9ohnfjqjSXWDnw0wHwYDVR0jBBgwFoAUYfjH66e1XnGy5rF3QJFCUdiM8KYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NDkxLzYwREE1M0ZBREZB NTExRUY4QkQ0OUY4N0M0RjlBRTAyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZqSDY2ZTFYbkd5NXJGM1FKRkNVZGlNOEtZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NDkxLzYwREE1M0ZBREZBNTExRUY4QkQ0OUY4N0M0RjlBRTAyL1lmakg2NmUxWG5H eTVyRjNRSkZDVWRpTThLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4ptyiHnr2IlF5X3eehbZorjXmPQa+FIkPG4fdP0R/u60u9MtjMsfZy zUELG+6b0IeL6Lk8n36F2GnhrGqQo+Aw8M13metqYbSZ13pJcaXZr9HwAGrCMUMO 3TDc5bhL1PeaayM6I28bOKY8g6RHlnhFN1yq2bZC14TUWUglFG+QQBasV5bfgn/g ebfQqkHQGFaEKyH1UbzX6UVBmf9pK2Tpp3gcc50Eti0vuG6iw8naH851JShyR2Fi boJeJe7cNIXLtmkC+C4AKVNt27CHjriMsGgREYKxGSCn4CdNuXEwoaPn4wKAtSvS rUeN1eTeDbMcUZ7aUMNFOJn+kB3DURE= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:58 2025 by rpki-client