$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: oMZ88UNSgfR5ejUb/OLV/dHwhAkxVt9FIZ5eLdOZWhE= Subject key identifier: B8:BE:4C:C8:F5:4A:90:AB:B2:4D:3B:E3:51:F0:64:04:98:CF:4F:C0 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 3478 Signing time: Fri 04 Apr 2025 14:25:08 +0000 Manifest this update: Fri 04 Apr 2025 14:25:07 +0000 Manifest next update: Fri 11 Apr 2025 14:25:07 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: 39zSdS+r1rjrE9plwjfIt6+ylTG0JTU/8LUK4PwvnxY=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: kJqH6bqpSJ3//AJ26qCXwZ2NcL1mcLntx12yKeJv6z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742 Validity Not Before: Apr 4 14:25:07 2025 GMT Not After : Apr 11 14:25:07 2025 GMT Subject: CN=67efebc3-dc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:77:dc:8c:86:26:5e:93:ee:99:9a:0b:34: ff:b9:db:ef:40:d1:95:1b:94:f2:e1:4c:c1:d5:a7: df:d7:67:ce:cc:5d:9c:8e:89:f4:86:82:4f:e3:b6: 83:24:fd:46:e2:b7:3e:36:ae:ba:51:17:d6:35:a3: eb:11:08:47:34:e1:bd:dd:4c:6f:af:a8:1f:14:47: 60:88:ee:63:2b:47:1e:b1:13:1f:65:72:22:bb:0a: e3:93:c2:4c:f9:3b:3f:03:fc:9c:f7:9e:a0:2a:8d: d7:2a:49:6a:4a:9c:dd:ad:5c:43:0a:b0:54:e8:75: 8f:0f:00:35:6e:a5:2b:69:b8:02:81:67:fe:e0:2f: c5:bf:80:d8:bd:65:64:cd:e1:b6:24:2c:05:72:96: 58:85:76:38:14:67:ec:40:3a:94:e3:77:e9:4b:86: 9a:69:bf:81:42:a6:82:0f:bd:e1:91:22:33:c4:19: 8a:0f:2e:b4:da:56:d5:3e:25:2b:98:1b:d8:ee:57: ea:b1:80:77:62:ab:9e:ad:b9:ae:c0:0f:e6:6f:be: 83:89:a0:b0:24:4d:c1:b9:f0:b8:3b:49:da:b1:d5: 0d:3d:46:1e:06:db:6c:da:41:3c:81:95:a9:42:32: 82:46:de:01:03:c0:d2:28:13:08:eb:99:e0:eb:7d: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BE:4C:C8:F5:4A:90:AB:B2:4D:3B:E3:51:F0:64:04:98:CF:4F:C0 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:14:b0:09:af:fe:ac:22:04:3c:02:c8:92:54:67:a8:60:35: 46:b7:25:75:71:e3:f6:20:8c:49:62:d6:77:fb:91:ac:ba:e1: 12:af:13:12:db:c0:2f:48:d4:be:27:52:cd:aa:0a:ca:55:1d: 78:05:fb:8d:ac:da:b6:10:5c:da:0d:61:a0:63:0a:7e:de:24: 71:7d:f9:02:87:d4:e6:8c:45:7c:72:5e:4a:7c:63:b4:48:56: 12:82:78:2d:0b:4b:f7:92:2a:09:a1:6a:7b:86:a8:58:14:bd: 27:6d:d7:20:03:64:2f:da:d2:d0:fd:76:28:a6:f7:e3:81:cf: f3:d6:34:bd:c7:00:13:43:53:b7:d2:e3:bf:9a:2e:3e:09:47: 16:63:57:1a:6d:5e:a8:a1:b6:15:35:08:b6:0c:04:d3:42:fe: 7d:d0:69:b1:23:0e:7c:5a:a7:92:50:16:cc:b3:4a:52:45:03: 8f:3d:c3:79:75:2b:c0:a6:c6:e0:61:fa:c3:c1:d1:2c:87:0d: 3d:f7:c5:06:c3:31:b5:65:74:03:d5:6b:72:51:76:a7:07:12: 8a:a7:60:a7:89:a5:79:3e:81:7c:03:0b:57:87:1f:f7:5f:4a: 35:72:93:04:5d:84:0f:31:eb:bf:da:ac:85:dc:96:e6:c4:ed: d7:e0:b8:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUwNDA0MTQyNTA3WhcNMjUwNDExMTQyNTA3WjAYMRYwFAYD VQQDEw02N2VmZWJjMy1kYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSl33IyGJl6T7pmaCzT/udvvQNGVG5Ty4UzB1aff12fOzF2cjon0hoJP47aD JP1G4rc+Nq66URfWNaPrEQhHNOG93Uxvr6gfFEdgiO5jK0cesRMfZXIiuwrjk8JM +Ts/A/yc956gKo3XKklqSpzdrVxDCrBU6HWPDwA1bqUrabgCgWf+4C/Fv4DYvWVk zeG2JCwFcpZYhXY4FGfsQDqU43fpS4aaab+BQqaCD73hkSIzxBmKDy602lbVPiUr mBvY7lfqsYB3YquerbmuwA/mb76DiaCwJE3BufC4O0nasdUNPUYeBtts2kE8gZWp QjKCRt4BA8DSKBMI65ng633bpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi+TMj1 SpCrsk0741HwZASYz0/AMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoFLAJr/6sIgQ8AsiSVGeoYDVGtyV1ceP2IIxJYtZ3+5GsuuESrxMS 28AvSNS+J1LNqgrKVR14BfuNrNq2EFzaDWGgYwp+3iRxffkCh9TmjEV8cl5KfGO0 SFYSgngtC0v3kioJoWp7hqhYFL0nbdcgA2Qv2tLQ/XYopvfjgc/z1jS9xwATQ1O3 0uO/mi4+CUcWY1cabV6oobYVNQi2DATTQv590GmxIw58WqeSUBbMs0pSRQOPPcN5 dSvApsbgYfrDwdEshw0998UGwzG1ZXQD1WtyUXanBxKKp2CniaV5PoF8AwtXhx/3 X0o1cpMEXYQPMeu/2qyF3JbmxO3X4Lj1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:53 2025 by rpki-client