$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: PT5gTH09jXy5cV6VFgMmrBPp8xHfr5rkxqd+OoEN6Rs= Subject key identifier: 11:74:DF:E6:9D:24:22:AE:AB:75:B6:94:35:0D:EF:2E:FB:C9:A6:61 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 0145 Signing time: Thu 03 Apr 2025 03:35:10 +0000 Manifest this update: Thu 03 Apr 2025 03:35:10 +0000 Manifest next update: Thu 10 Apr 2025 03:35:10 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: khJ/EwicHjvJIN3sW6H5FygZX3Q5oOcs3VH6wzyQF+s=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969 Validity Not Before: Apr 3 03:35:10 2025 GMT Not After : Apr 10 03:35:10 2025 GMT Subject: CN=67ee01ee-cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:5c:32:68:13:23:97:94:21:7c:a7:95:92: 37:89:1c:88:a1:d1:94:2b:52:3a:34:f0:12:64:73: e7:07:d5:6f:b3:a6:3a:18:75:67:b9:24:1b:e9:e9: d9:f8:c0:8f:f8:e9:38:44:44:04:a1:cc:40:7e:b7: 8d:23:d5:76:1e:8f:73:b1:9d:aa:88:0b:74:27:07: 78:5f:7c:e5:f0:7f:5b:23:bc:b7:e9:8b:e8:3e:61: 38:f2:42:73:56:06:9a:fd:64:ea:55:1f:8c:11:29: 23:61:62:41:a8:6f:6a:d7:a9:69:06:9a:c7:5c:12: a6:87:64:16:ff:ef:9e:06:b4:b4:ef:6b:9e:1f:79: 65:43:18:d5:07:0c:a6:18:98:d9:13:81:97:b3:18: 0e:53:bd:21:18:0a:8c:85:fb:78:52:ad:1a:69:e3: 21:a3:1b:19:58:2c:eb:71:b1:ff:79:b6:cd:8b:ec: 3c:a2:74:88:88:54:c8:16:e8:2a:da:7c:71:f6:21: 5d:e5:b4:33:2c:fc:90:14:1c:cd:8e:01:84:41:f9: 18:dd:09:88:cc:2c:3a:c6:32:04:46:3a:ba:48:5f: 8f:4a:ec:18:03:8f:6d:71:da:48:67:74:8a:e3:4b: f9:d3:10:0c:29:09:90:00:b0:6d:4b:bd:71:f4:ce: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:74:DF:E6:9D:24:22:AE:AB:75:B6:94:35:0D:EF:2E:FB:C9:A6:61 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:18:6a:4c:46:75:e5:86:5e:bc:f7:77:ec:ac:0e:1f:01:0e: ce:04:9f:a9:ee:a9:33:06:61:58:00:21:16:19:df:cb:52:9e: fc:05:af:e8:56:12:a6:d6:40:fc:61:b1:36:c3:e1:86:e6:f9: 02:ee:b3:7c:13:e1:20:b3:0f:09:8a:ec:51:2f:83:af:c4:40: ca:64:8a:8e:a4:37:90:f6:94:b0:40:c8:c6:0a:3f:71:ef:97: 5d:7c:62:01:79:a8:2e:6a:24:09:c4:af:cb:23:81:2a:c2:60: f9:ca:9d:1f:15:83:1b:4c:ff:0b:9b:40:dc:d2:1c:af:84:c7: 0b:99:30:81:a9:3b:98:0b:e1:eb:ac:00:39:33:90:15:60:d1: dc:37:fc:f4:3c:6b:80:53:ea:4a:5a:f8:19:db:44:f2:00:2d: 8f:73:40:13:26:08:73:61:c2:81:aa:ac:5a:25:c5:88:81:03: 28:20:58:2e:94:1c:b5:5f:e0:aa:09:0b:f4:4a:c3:5c:5e:34: ad:cc:3e:17:6b:fd:3e:20:82:44:ca:a4:ad:46:ab:b5:56:96: d9:3c:ac:63:fe:33:14:26:f9:d8:d7:24:bf:ce:a0:ff:cb:3a: e9:29:5b:2f:f2:88:e2:b1:5a:bd:07:e6:7c:92:c7:c4:7b:b9: 02:61:9f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwNDAzMDMzNTEwWhcNMjUwNDEwMDMzNTEwWjAYMRYwFAYD VQQDEw02N2VlMDFlZS1jYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvNcMmgTI5eUIXynlZI3iRyIodGUK1I6NPASZHPnB9Vvs6Y6GHVnuSQb6enZ +MCP+Ok4REQEocxAfreNI9V2Ho9zsZ2qiAt0Jwd4X3zl8H9bI7y36YvoPmE48kJz Vgaa/WTqVR+MESkjYWJBqG9q16lpBprHXBKmh2QW/++eBrS072ueH3llQxjVBwym GJjZE4GXsxgOU70hGAqMhft4Uq0aaeMhoxsZWCzrcbH/ebbNi+w8onSIiFTIFugq 2nxx9iFd5bQzLPyQFBzNjgGEQfkY3QmIzCw6xjIERjq6SF+PSuwYA49tcdpIZ3SK 40v50xAMKQmQALBtS71x9M6PYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF03+ad JCKuq3W2lDUN7y77yaZhMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7GGpMRnXlhl6893fsrA4fAQ7OBJ+p7qkzBmFYACEWGd/LUp78Ba/o VhKm1kD8YbE2w+GG5vkC7rN8E+Egsw8JiuxRL4OvxEDKZIqOpDeQ9pSwQMjGCj9x 75ddfGIBeaguaiQJxK/LI4EqwmD5yp0fFYMbTP8Lm0Dc0hyvhMcLmTCBqTuYC+Hr rAA5M5AVYNHcN/z0PGuAU+pKWvgZ20TyAC2Pc0ATJghzYcKBqqxaJcWIgQMoIFgu lBy1X+CqCQv0SsNcXjStzD4Xa/0+IIJEyqStRqu1VpbZPKxj/jMUJvnY1yS/zqD/ yzrpKVsv8ojisVq9B+Z8ksfEe7kCYZ9M -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:30 2025 by rpki-client