$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: tYp8i4qIWoLEyj8eRcfeb+W0PbxX4x6+Cj21dQYRTxo= Subject key identifier: 96:01:38:99:C5:DC:98:CF:A5:36:4C:03:EF:68:F3:6D:7A:D4:ED:7B Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: D0 Signing time: Fri 11 Apr 2025 04:57:00 +0000 Manifest this update: Fri 11 Apr 2025 04:57:00 +0000 Manifest next update: Fri 18 Apr 2025 04:57:00 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: OC+lDz2YfP+dQCRGK47gjbKrABO72j97w2F21+Adzz0=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Apr 11 04:57:00 2025 GMT Not After : Apr 18 04:57:00 2025 GMT Subject: CN=67f8a11c-2130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:90:e7:75:f1:02:1b:43:f0:5a:2c:5e:40: eb:ec:af:5f:b5:c6:0d:c4:dd:35:98:4b:6b:63:f7: 0a:de:15:21:0b:87:32:ab:87:b0:0a:d1:c9:45:d6: d3:16:4c:ec:33:98:07:15:04:dd:36:19:74:01:1f: 73:4b:e6:68:ca:08:da:93:11:b4:c4:98:bf:ce:26: 51:71:b2:d1:fb:ba:7a:41:9b:5b:5c:18:aa:f9:32: d1:3c:86:e0:9e:35:38:74:0e:7e:f0:e4:65:16:5f: 52:c5:fe:ff:6f:9c:22:5f:65:f1:68:0f:7a:03:d9: 7c:03:8f:d0:b3:72:f4:6e:5a:30:e6:7f:95:11:39: 2b:96:be:31:26:f3:28:4b:6a:98:11:b0:85:30:37: f6:e6:d0:8c:06:73:ba:9d:d2:1e:e4:0d:ed:50:c8: dd:66:b1:52:2e:e9:78:75:d9:1a:f7:a3:28:42:b2: 0e:08:cb:05:ed:67:5b:97:78:0b:77:33:13:ba:96: 6f:aa:68:7d:66:2b:cf:21:26:bb:a4:90:63:80:5f: e7:f4:5a:f6:de:8e:d3:a1:a0:8c:9d:30:1b:3b:e1: f2:38:f5:39:c5:c3:84:c7:bf:79:32:96:98:b7:1a: fd:7a:60:0a:64:bc:c9:d1:43:16:6e:3f:4d:00:79: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:38:99:C5:DC:98:CF:A5:36:4C:03:EF:68:F3:6D:7A:D4:ED:7B X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d8:8f:cb:46:d9:11:b9:77:29:b4:1b:71:87:88:60:05:7b: 8b:4b:47:91:d9:81:f5:ad:39:23:d3:50:4f:5c:ec:93:40:6f: 58:8c:a0:83:f4:c5:00:d7:61:a0:25:e9:72:3a:8f:d7:11:bd: a3:02:15:f0:ec:f3:37:3a:0e:91:12:04:57:ee:1d:fc:a9:7d: d8:4f:57:3d:92:cf:ea:ef:e0:93:bd:64:e7:ac:14:7b:4a:7d: 62:5c:e7:5c:94:ff:a1:bf:27:37:ed:c8:b6:28:e6:be:99:7a: e7:5e:09:ff:b1:22:13:b0:c4:fc:b0:76:06:da:e9:16:a4:3a: 93:6d:1b:85:91:d6:67:f1:5c:46:46:1b:af:a9:a0:16:58:64: 69:cf:50:6c:4d:02:7b:11:69:09:85:bf:e3:cf:4f:81:71:53: 6e:9e:d7:57:2e:13:af:1d:49:32:c6:08:71:06:f8:b2:ac:10: d2:bc:f6:29:6a:26:07:91:e2:1b:b2:3d:e8:ba:a6:aa:dc:ef: 72:a1:49:ec:a3:ea:10:ec:cd:97:89:1a:06:4e:d0:b3:3a:72: bd:60:29:3a:fa:92:ba:16:61:5c:75:57:18:55:4c:fa:82:32: b8:95:d2:98:0c:bf:10:92:41:07:d1:90:6d:76:d7:91:d7:99: 62:42:f3:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjUwNDExMDQ1NzAwWhcNMjUwNDE4MDQ1NzAwWjAYMRYwFAYD VQQDEw02N2Y4YTExYy0yMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXmQ53XxAhtD8FosXkDr7K9ftcYNxN01mEtrY/cK3hUhC4cyq4ewCtHJRdbT FkzsM5gHFQTdNhl0AR9zS+ZoygjakxG0xJi/ziZRcbLR+7p6QZtbXBiq+TLRPIbg njU4dA5+8ORlFl9Sxf7/b5wiX2XxaA96A9l8A4/Qs3L0blow5n+VETkrlr4xJvMo S2qYEbCFMDf25tCMBnO6ndIe5A3tUMjdZrFSLul4ddka96MoQrIOCMsF7Wdbl3gL dzMTupZvqmh9ZivPISa7pJBjgF/n9Fr23o7ToaCMnTAbO+HyOPU5xcOEx795MpaY txr9emAKZLzJ0UMWbj9NAHlFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYBOJnF 3JjPpTZMA+9o82161O17MB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ2I/LRtkRuXcptBtxh4hgBXuLS0eR2YH1rTkj01BPXOyTQG9YjKCD 9MUA12GgJelyOo/XEb2jAhXw7PM3Og6REgRX7h38qX3YT1c9ks/q7+CTvWTnrBR7 Sn1iXOdclP+hvyc37ci2KOa+mXrnXgn/sSITsMT8sHYG2ukWpDqTbRuFkdZn8VxG RhuvqaAWWGRpz1BsTQJ7EWkJhb/jz0+BcVNuntdXLhOvHUkyxghxBviyrBDSvPYp aiYHkeIbsj3ouqaq3O9yoUnso+oQ7M2XiRoGTtCzOnK9YCk6+pK6FmFcdVcYVUz6 gjK4ldKYDL8QkkEH0ZBtdteR15liQvPD -----END CERTIFICATE-----Generated at Sat Apr 12 19:16:48 2025 by rpki-client