$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: IMWkmE8eAeaB8Rob3dzAcg70CRRIXcSvqgXOay6Q1oY= Subject key identifier: 0E:B9:BB:24:C1:F8:CE:0A:BF:71:97:78:60:79:7F:12:99:1D:95:1D Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 03B7 Signing time: Thu 17 Apr 2025 00:18:37 +0000 Manifest this update: Thu 17 Apr 2025 00:18:36 +0000 Manifest next update: Thu 24 Apr 2025 00:18:36 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: XrzTxNdRgtj0jm89ocxQ6+/6p8OYwL6oJUOQcon4neI=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: DMjc7YHOd4HbtoNtunrW+QIJNydNWPoTGiKSwQ+/yhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Apr 17 00:18:36 2025 GMT Not After : Apr 24 00:18:36 2025 GMT Subject: CN=680048dc-5440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:3a:41:3a:c1:da:95:f1:55:74:4f:3f:66: 27:20:3f:39:fc:c3:1a:ac:f2:d8:80:5c:71:7c:da: a2:a7:5f:64:37:d3:33:75:19:48:5a:b4:0b:74:64: be:ee:29:33:ed:d5:0e:c7:64:4e:8d:5b:94:1c:ae: d7:9e:77:ce:84:76:cf:34:f5:31:95:1b:f7:bc:c7: 22:6f:0a:a1:fb:28:ca:d5:d0:0c:06:b3:86:a8:22: 71:78:9a:5f:84:7f:3f:6f:be:1a:aa:28:93:61:ea: 17:57:e4:70:19:67:f4:1d:67:99:4e:2c:4b:f3:46: 98:a7:a7:56:cf:d0:48:00:53:92:f0:3f:5a:c3:d5: 6b:a8:ee:fe:aa:68:00:64:03:3f:2d:33:45:8a:c6: de:c8:14:ec:ad:5f:28:c3:ca:75:a5:7b:50:f7:20: 80:6c:b9:6a:e4:72:bb:81:59:ac:0c:dc:b6:1f:06: 3f:1e:5a:61:a7:11:e9:f9:23:39:58:8d:f6:9a:6a: 0d:4f:da:50:8c:75:ac:d1:fc:d6:57:c4:ee:93:ae: 22:2e:20:af:ad:86:c0:59:db:7f:16:6f:d6:a6:31: cf:7e:d8:18:e6:4c:55:41:c1:37:ac:a6:84:fa:6f: 09:2b:c6:cc:e8:57:b3:56:e1:27:f5:0b:95:86:41: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:BB:24:C1:F8:CE:0A:BF:71:97:78:60:79:7F:12:99:1D:95:1D X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:32:c2:eb:3d:a6:c4:a4:ef:df:4f:d2:b9:11:18:51:72:05: 68:b4:07:b5:64:8d:7c:49:1a:b6:fd:3a:18:a9:e1:28:32:7f: 43:4e:1f:bb:aa:8f:5f:ea:64:43:d7:d6:cb:ec:6e:ee:a3:14: 03:b1:10:a1:42:1c:11:4a:4e:94:1a:92:50:a5:c0:14:12:84: b7:b3:66:1d:31:fb:e0:6a:3e:d9:b1:92:2b:e5:a5:70:51:46: 72:96:bf:c3:52:8a:b6:3e:21:10:69:d9:04:8e:e3:e5:17:17: 1b:ff:49:94:ad:96:59:c2:a2:67:c6:74:40:cb:82:28:72:5b: 52:5c:d5:1c:79:23:98:af:ff:12:b4:36:0d:c1:d1:ab:84:8f: 53:1a:8d:49:77:89:2f:10:98:6f:a1:84:84:64:d9:d3:80:a0: d4:17:99:ab:20:1c:35:f2:37:77:92:b5:08:05:70:01:e0:af: 30:ce:99:ba:65:e2:29:cf:c3:b0:ff:66:98:1d:70:cc:a1:42: 85:8f:f3:25:f0:34:27:c2:83:75:e3:0e:8c:9e:15:13:4d:03: 29:d4:78:45:de:22:f6:8f:10:66:22:77:d6:f7:2f:68:ab:6b: f0:e5:5d:dc:04:db:58:bf:d4:0c:63:e3:bc:14:f7:a9:f7:7c: 0e:01:24:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUwNDE3MDAxODM2WhcNMjUwNDI0MDAxODM2WjAYMRYwFAYD VQQDEw02ODAwNDhkYy01NDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujc6QTrB2pXxVXRPP2YnID85/MMarPLYgFxxfNqip19kN9MzdRlIWrQLdGS+ 7ikz7dUOx2ROjVuUHK7XnnfOhHbPNPUxlRv3vMcibwqh+yjK1dAMBrOGqCJxeJpf hH8/b74aqiiTYeoXV+RwGWf0HWeZTixL80aYp6dWz9BIAFOS8D9aw9VrqO7+qmgA ZAM/LTNFisbeyBTsrV8ow8p1pXtQ9yCAbLlq5HK7gVmsDNy2HwY/HlphpxHp+SM5 WI32mmoNT9pQjHWs0fzWV8Tuk64iLiCvrYbAWdt/Fm/WpjHPftgY5kxVQcE3rKaE +m8JK8bM6FezVuEn9QuVhkGVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA65uyTB +M4Kv3GXeGB5fxKZHZUdMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDMsLrPabEpO/fT9K5ERhRcgVotAe1ZI18SRq2/ToYqeEoMn9DTh+7 qo9f6mRD19bL7G7uoxQDsRChQhwRSk6UGpJQpcAUEoS3s2YdMfvgaj7ZsZIr5aVw UUZylr/DUoq2PiEQadkEjuPlFxcb/0mUrZZZwqJnxnRAy4IocltSXNUceSOYr/8S tDYNwdGrhI9TGo1Jd4kvEJhvoYSEZNnTgKDUF5mrIBw18jd3krUIBXAB4K8wzpm6 ZeIpz8Ow/2aYHXDMoUKFj/Ml8DQnwoN14w6MnhUTTQMp1HhF3iL2jxBmInfW9y9o q2vw5V3cBNtYv9QMY+O8FPep93wOASSo -----END CERTIFICATE-----Generated at Thu Apr 17 11:19:46 2025 by rpki-client