$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: l2HklP5JShAsZG+8bO/pkRKh8nbuqLTug+t/WUAtT6s= Subject key identifier: BA:9F:9F:AC:8D:27:51:98:D7:7D:E7:2F:1B:3B:76:98:68:76:A2:73 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0D88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0D73 Signing time: Wed 02 Apr 2025 18:02:12 +0000 Manifest this update: Wed 02 Apr 2025 18:02:12 +0000 Manifest next update: Wed 09 Apr 2025 18:02:12 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: fhI/UnH6GQaF6XFCA4bmb9zIIZGuH+jqOb1VNm90jSk=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: ei37UEPvAyJIPiR8lkdojLtbKQiKoaBSIPUwB8sha18=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: dbAsxfzu6f+yImX351fMIh4a0dyPHR7GYgrAqsT4PFg=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: KL8aICS0aayuRpdlvbYehEzSsatkO3Hs+QAJl8XQUok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529 Validity Not Before: Apr 2 18:02:12 2025 GMT Not After : Apr 9 18:02:12 2025 GMT Subject: CN=67ed7ba4-4d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:31:8b:ff:d2:6a:c6:6c:3a:86:7f:6f:20: 21:db:ee:9b:6d:cf:d6:46:6b:56:06:f4:72:0c:ef: 09:db:f1:07:c3:79:9e:c8:6d:0f:10:d3:68:5a:9b: a6:f8:66:6c:14:53:c3:ac:86:a6:ca:8e:9c:02:ce: b2:ac:4f:40:37:2c:36:12:f5:fb:f6:ca:f6:59:f5: 88:a1:8b:fc:0e:31:69:17:a8:53:9c:a7:e5:24:15: b6:8e:28:3d:9d:3c:fe:b3:7a:b7:0d:98:d9:1f:0f: a9:20:7e:28:46:f2:3f:91:40:a2:80:f0:32:62:68: fa:a6:58:b7:ac:00:43:b3:e8:59:b1:aa:50:6a:6b: 06:0a:f3:7c:07:d2:29:f6:2a:d2:84:bc:91:e1:ff: 66:78:94:14:f2:fb:ee:2d:1f:a0:73:bf:13:fe:0a: 68:9c:a7:c1:21:38:c5:5d:62:db:e0:3b:cd:e8:f7: 8f:ca:4f:df:80:06:a9:24:a7:df:cf:e5:d2:38:4d: ee:5c:a0:bd:cc:17:33:a0:60:c0:81:a0:b5:da:6a: cc:99:27:c8:c7:fd:08:33:28:f2:e0:db:6f:7b:5e: f1:e2:cb:f8:f2:94:a0:56:2e:3e:4f:b6:95:68:5c: c7:82:63:1d:fc:d8:83:41:26:dc:19:51:00:1a:14: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:9F:AC:8D:27:51:98:D7:7D:E7:2F:1B:3B:76:98:68:76:A2:73 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:9e:94:51:2c:58:8b:75:45:fb:d0:2f:7d:1e:27:08:9b: 19:fc:4e:ec:7b:19:c8:9f:89:fc:84:99:25:f9:5b:f6:31:99: 7a:33:f5:eb:33:6e:91:00:0d:d7:3b:be:68:5c:b9:ea:11:d8: ab:94:fd:5d:40:38:e6:95:b4:15:f2:4e:92:d4:da:fc:75:64: 49:65:3d:78:a3:db:2f:82:18:ce:5c:e7:d9:42:06:66:ff:01: a5:b5:89:31:85:f7:ce:1b:2b:e7:ff:30:a8:da:03:05:2b:da: 1b:43:9c:b5:35:e5:0c:37:aa:1f:ae:7b:22:7b:44:dd:fd:82: a9:e3:77:73:3d:5f:7b:66:14:f5:0d:97:62:ef:8e:74:ac:bd: 77:7f:21:4b:d0:8a:fb:04:97:ea:bd:3d:66:ea:dc:d4:62:a3: b6:7c:30:b4:9e:6b:33:50:72:75:cd:4c:70:42:e7:38:1d:f3: bc:8a:8b:e4:5a:13:a6:8e:aa:78:06:50:5a:d4:c5:eb:f0:ac: 38:3b:dd:f6:11:da:70:d2:69:e2:b8:76:65:65:7d:55:11:45: 87:cd:e8:ab:d4:f3:f3:28:58:00:d7:52:06:78:1c:97:36:9f: fc:9b:1d:91:22:69:ff:44:d6:f8:83:11:af:ae:e9:02:37:34: 63:42:e0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwNDAyMTgwMjEyWhcNMjUwNDA5MTgwMjEyWjAYMRYwFAYD VQQDEw02N2VkN2JhNC00ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYYxi//SasZsOoZ/byAh2+6bbc/WRmtWBvRyDO8J2/EHw3meyG0PENNoWpum +GZsFFPDrIamyo6cAs6yrE9ANyw2EvX79sr2WfWIoYv8DjFpF6hTnKflJBW2jig9 nTz+s3q3DZjZHw+pIH4oRvI/kUCigPAyYmj6pli3rABDs+hZsapQamsGCvN8B9Ip 9irShLyR4f9meJQU8vvuLR+gc78T/gponKfBITjFXWLb4DvN6PePyk/fgAapJKff z+XSOE3uXKC9zBczoGDAgaC12mrMmSfIx/0IMyjy4Ntve17x4sv48pSgVi4+T7aV aFzHgmMd/NiDQSbcGVEAGhSpBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqfn6yN J1GY133nLxs7dphodqJzMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdwp6UUSxYi3VF+9AvfR4nCJsZ/E7sexnIn4n8hJkl+Vv2MZl6M/Xr M26RAA3XO75oXLnqEdirlP1dQDjmlbQV8k6S1Nr8dWRJZT14o9svghjOXOfZQgZm /wGltYkxhffOGyvn/zCo2gMFK9obQ5y1NeUMN6ofrnsie0Td/YKp43dzPV97ZhT1 DZdi7450rL13fyFL0Ir7BJfqvT1m6tzUYqO2fDC0nmszUHJ1zUxwQuc4HfO8iovk WhOmjqp4BlBa1MXr8Kw4O932Edpw0mniuHZlZX1VEUWHzeir1PPzKFgA11IGeByX Np/8mx2RImn/RNb4gxGvrukCNzRjQuBw -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:03 2025 by rpki-client