$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: T+myTqBXLC5BSVrQJnz70OPzFKS69GzOw0JHERmj9so= Subject key identifier: 75:39:46:4A:F1:A6:76:3C:6C:52:A7:E1:40:47:5B:71:C9:52:F2:F2 Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 025D Signing time: Sat 29 Mar 2025 02:02:24 +0000 Manifest this update: Sat 29 Mar 2025 02:02:23 +0000 Manifest next update: Sat 05 Apr 2025 02:02:23 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: Ky/lxJ/Shluv9q0Sk4v0tfCrmUHT8aYSMp9MY1v+5Ss=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: zleKsAQ/UII/VAR0ip3wb38fmNdnLl5jIKA7jKftYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914 Validity Not Before: Mar 29 02:02:23 2025 GMT Not After : Apr 5 02:02:23 2025 GMT Subject: CN=67e754b0-862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:3b:22:dc:06:b2:3e:dd:d1:63:89:67:02: 67:e1:20:17:e7:b9:e0:0a:e3:5e:7d:cd:7c:39:c7: a0:52:95:7d:28:6b:23:b2:d2:f0:85:ff:ba:22:43: dc:6c:bb:d7:82:41:30:73:0a:dd:18:13:d2:94:6f: 4b:0f:21:22:c7:e5:23:a3:85:d5:6c:88:22:34:1c: 2c:f9:a4:c6:c4:2e:14:f8:e2:73:52:2e:7f:36:99: 55:45:ca:28:57:28:f7:2b:da:d2:1d:6d:76:cb:02: 2f:80:23:07:56:70:11:a7:8a:20:31:d3:9f:ff:38: eb:44:ab:2a:80:16:29:54:70:53:a0:f6:23:82:fe: 94:8a:6d:df:64:5b:08:af:32:c2:c3:b5:5d:0d:35: cd:e8:43:bc:c8:6f:06:05:9d:33:19:99:2f:68:78: 79:3f:ec:49:61:ae:52:9c:8c:cc:71:f9:88:d1:48: e2:cb:65:4b:b7:05:ce:aa:6c:63:20:2b:48:9e:f3: 57:c5:48:24:55:6a:0b:5d:38:aa:43:0a:b4:61:48: ce:7f:3d:2d:ac:ac:56:f4:5f:a1:0d:ae:91:33:6a: 00:ba:a3:01:4c:93:ee:a6:85:24:3d:a7:b2:a9:80: f9:d6:dd:57:9d:2c:4e:71:05:9f:62:71:f3:ff:0a: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:46:4A:F1:A6:76:3C:6C:52:A7:E1:40:47:5B:71:C9:52:F2:F2 X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:f7:0e:4e:79:ae:3c:c4:2a:2d:fc:13:b9:5c:f9:2a:fc:98: 73:3f:9e:f9:5e:c3:a9:97:4d:15:87:eb:e4:a6:03:11:10:43: f0:11:a0:26:c5:8c:de:dd:c1:bb:b1:6f:b2:3e:3e:fb:14:6d: fb:39:46:44:31:9a:4e:06:98:80:46:86:55:41:60:b4:a1:c6: 3f:89:d7:0a:a6:a4:13:eb:12:8a:8f:b6:3b:e1:e6:86:02:1b: cf:75:a5:63:a1:7e:69:50:05:e4:f5:c0:81:62:db:7e:8e:15: 42:b1:2d:85:19:ca:32:e4:e7:cc:fe:c2:a5:5f:66:e1:d9:af: 5b:d5:5c:8c:f4:4b:f0:61:27:68:c5:92:db:00:6c:6b:03:c5: 44:5d:94:16:e1:0a:be:c0:1d:cc:28:a4:7f:66:a9:c4:6a:5e: 03:56:90:f9:c7:c6:ec:2a:29:6f:d2:19:0e:4d:85:14:d8:cd: 38:7e:e3:9b:02:41:e7:5f:c5:98:b5:ee:53:c7:8f:8b:de:89: 6f:8a:16:88:75:75:3d:d4:32:fb:62:d4:fe:50:1e:b5:a5:64: 4e:72:41:d2:73:75:36:2f:44:c3:24:e7:f7:54:1f:01:3a:13: 2a:7f:4f:50:e4:ab:46:71:d9:97:9d:18:7d:1b:53:ff:e8:c9: cb:22:49:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUwMzI5MDIwMjIzWhcNMjUwNDA1MDIwMjIzWjAYMRYwFAYD VQQDEw02N2U3NTRiMC04NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAI7ItwGsj7d0WOJZwJn4SAX57ngCuNefc18OcegUpV9KGsjstLwhf+6IkPc bLvXgkEwcwrdGBPSlG9LDyEix+Ujo4XVbIgiNBws+aTGxC4U+OJzUi5/NplVRcoo Vyj3K9rSHW12ywIvgCMHVnARp4ogMdOf/zjrRKsqgBYpVHBToPYjgv6Uim3fZFsI rzLCw7VdDTXN6EO8yG8GBZ0zGZkvaHh5P+xJYa5SnIzMcfmI0Ujiy2VLtwXOqmxj ICtInvNXxUgkVWoLXTiqQwq0YUjOfz0trKxW9F+hDa6RM2oAuqMBTJPupoUkPaey qYD51t1XnSxOcQWfYnHz/wpK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU5Rkrx pnY8bFKn4UBHW3HJUvLyMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE9w5Oea48xCot/BO5XPkq/JhzP575XsOpl00Vh+vkpgMREEPwEaAm xYze3cG7sW+yPj77FG37OUZEMZpOBpiARoZVQWC0ocY/idcKpqQT6xKKj7Y74eaG AhvPdaVjoX5pUAXk9cCBYtt+jhVCsS2FGcoy5OfM/sKlX2bh2a9b1VyM9EvwYSdo xZLbAGxrA8VEXZQW4Qq+wB3MKKR/ZqnEal4DVpD5x8bsKilv0hkOTYUU2M04fuOb AkHnX8WYte5Tx4+L3olvihaIdXU91DL7YtT+UB61pWROckHSc3U2L0TDJOf3VB8B OhMqf09Q5KtGcdmXnRh9G1P/6MnLIkm4 -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:31 2025 by rpki-client