$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: y/hN4+wsNl92OVfT1HxH5iyW0OqHeJ8U2jx2aHesMZc= Subject key identifier: BF:59:37:E2:8E:CB:D8:91:5D:8B:8A:E5:EB:34:28:47:EB:89:32:F7 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1AD7 Signing time: Tue 08 Apr 2025 16:19:15 +0000 Manifest this update: Tue 08 Apr 2025 16:19:14 +0000 Manifest next update: Tue 15 Apr 2025 16:19:14 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: 0N/XkOKMAmFBtSPstDC2m1KDlbeek1/wNY+q2pC2iYM=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: fZ4rzQw+k1I7EBhPTcblakdeeuKhaVvBsWtldnvXI0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6881 (0x1ae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D Validity Not Before: Apr 8 16:19:14 2025 GMT Not After : Apr 15 16:19:14 2025 GMT Subject: CN=67f54c82-31d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:77:09:3d:0a:d9:65:a3:96:3d:ce:d1:45: 41:fc:1b:ce:44:2a:45:0d:61:87:65:58:71:2a:d2: dc:a0:1c:9b:8a:77:ef:4a:5d:a1:62:e5:f1:28:76: 4a:7c:ae:98:d3:7a:0e:26:32:2f:b5:5a:a0:75:53: 6d:bc:a1:ea:ff:1c:95:01:73:a4:d7:da:02:2a:e7: a2:60:11:0d:ab:53:91:70:ef:da:dd:aa:23:f6:b6: 3b:d8:1d:58:0b:44:ff:41:1c:32:29:a9:44:6f:fe: aa:dc:58:2e:ff:6d:44:88:3b:09:8b:20:5a:07:d3: 00:9e:4b:47:ee:18:88:af:22:ae:89:0f:1d:da:a5: 4a:54:ab:b3:53:2e:7c:0b:c7:8f:8e:03:dd:f3:3c: 16:66:f1:ee:32:62:d9:66:2f:ad:1e:1c:e6:df:8a: 33:79:a1:b0:66:86:62:a8:10:53:d3:30:19:f7:92: 52:34:af:44:17:5d:6d:c3:28:49:dd:e5:91:42:1f: ad:4a:bb:10:4d:ab:9e:32:f3:b9:8a:6b:de:16:8b: c5:40:31:30:cb:b0:93:64:ec:83:af:6b:0a:47:ee: 3e:af:d1:47:90:bb:80:24:9d:d9:51:73:f4:93:82: 65:bf:e8:60:e1:33:80:33:25:8c:a0:45:0e:8b:e7: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:37:E2:8E:CB:D8:91:5D:8B:8A:E5:EB:34:28:47:EB:89:32:F7 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e4:c5:5c:47:3f:e6:8d:c4:2f:56:50:50:86:72:22:20:71: 02:62:fb:fe:14:9e:a3:f3:bf:d5:d4:3d:40:2b:a6:f6:10:b1: c9:94:55:9c:6d:60:94:18:b6:6f:7e:69:8c:62:24:d7:26:59: 01:02:92:88:d5:5e:70:9f:eb:d3:0b:5c:b7:9c:ec:d4:db:ee: e8:38:f9:66:5c:ec:9c:0e:27:66:ef:04:47:cc:30:04:39:30: 6e:69:97:93:9c:29:21:f9:59:7f:c5:4e:f0:6f:7a:7f:40:14: 7d:66:00:54:d2:92:45:5d:ab:07:ca:a6:f7:54:d7:53:ef:da: 12:fd:b8:05:5e:24:96:c2:60:87:56:bd:6a:41:5f:13:a6:a3: d6:a9:e3:cd:cd:4e:da:89:a8:17:a9:a6:45:82:e1:6f:1c:85: 16:eb:66:05:2c:ae:2e:d1:4f:06:00:f0:4c:4f:13:9a:b8:3d: eb:3b:c5:6e:f7:d7:a9:10:bb:54:42:36:24:07:53:a6:5e:b4: 83:9d:a2:b6:9e:9b:7e:90:18:d6:4f:30:07:fc:f1:71:48:cf: 12:42:30:f8:56:c4:bf:87:b2:61:37:0d:6e:42:50:26:b9:02: 0c:4a:05:51:ab:bf:b0:39:f0:28:8c:40:e7:fa:c4:f2:11:45: c7:35:98:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUwNDA4MTYxOTE0WhcNMjUwNDE1MTYxOTE0WjAYMRYwFAYD VQQDEw02N2Y1NGM4Mi0zMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm093CT0K2WWjlj3O0UVB/BvORCpFDWGHZVhxKtLcoBybinfvSl2hYuXxKHZK fK6Y03oOJjIvtVqgdVNtvKHq/xyVAXOk19oCKueiYBENq1ORcO/a3aoj9rY72B1Y C0T/QRwyKalEb/6q3Fgu/21EiDsJiyBaB9MAnktH7hiIryKuiQ8d2qVKVKuzUy58 C8ePjgPd8zwWZvHuMmLZZi+tHhzm34ozeaGwZoZiqBBT0zAZ95JSNK9EF11twyhJ 3eWRQh+tSrsQTaueMvO5imveFovFQDEwy7CTZOyDr2sKR+4+r9FHkLuAJJ3ZUXP0 k4Jlv+hg4TOAMyWMoEUOi+ea9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9ZN+KO y9iRXYuK5es0KEfriTL3MB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt5MVcRz/mjcQvVlBQhnIiIHECYvv+FJ6j87/V1D1AK6b2ELHJlFWc bWCUGLZvfmmMYiTXJlkBApKI1V5wn+vTC1y3nOzU2+7oOPlmXOycDidm7wRHzDAE OTBuaZeTnCkh+Vl/xU7wb3p/QBR9ZgBU0pJFXasHyqb3VNdT79oS/bgFXiSWwmCH Vr1qQV8TpqPWqePNzU7aiagXqaZFguFvHIUW62YFLK4u0U8GAPBMTxOauD3rO8Vu 99epELtUQjYkB1OmXrSDnaK2npt+kBjWTzAH/PFxSM8SQjD4VsS/h7JhNw1uQlAm uQIMSgVRq7+wOfAojEDn+sTyEUXHNZjS -----END CERTIFICATE-----Generated at Wed Apr 9 05:51:55 2025 by rpki-client