$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: sbGBHv6Ns0ypHzUjbVEc4sDHbAqFlvj/pdn1YJdExdc= Subject key identifier: 32:6B:B0:72:81:EC:DC:07:6E:8D:0C:EE:EB:73:C3:E5:9F:AE:22:F0 Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 08D9 Signing time: Thu 10 Apr 2025 20:22:22 +0000 Manifest this update: Thu 10 Apr 2025 20:22:22 +0000 Manifest next update: Thu 17 Apr 2025 20:22:22 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: gu/tLT4uV5GMi2RQn1ipcsI3Wtcl3iTtlATjgesOrB8=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: O0cw5ZT/oguDck4eH6oUOUC8bbwGHUHdEmg/5/+1nls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 20:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Apr 10 20:22:22 2025 GMT Not After : Apr 17 20:22:22 2025 GMT Subject: CN=67f8287e-beab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:92:eb:2a:08:a9:34:eb:b5:2b:b3:eb:da:07: df:98:c3:4d:26:c4:21:b0:39:f7:82:87:aa:d5:32: 19:e7:fe:96:18:7f:50:9f:55:8f:bc:f4:de:78:69: df:27:a4:4b:c6:3b:42:ff:3b:a2:18:87:11:3c:e7: b2:a3:f7:7a:74:ea:e9:09:e2:9b:4a:3e:a4:17:9b: 65:18:28:a5:96:4b:7f:ff:a5:a2:5b:8a:34:6c:b3: 4a:f2:80:dd:1f:28:89:07:4f:91:84:a7:01:90:c7: e9:07:5a:ec:99:ec:a2:42:47:37:7c:79:f9:24:d6: 95:aa:80:de:f2:4b:cc:63:d1:fe:d6:f1:18:85:55: dd:26:53:cf:26:06:e6:ee:0a:13:90:86:94:d8:d6: de:9c:79:48:3c:77:3d:81:d7:80:a1:d2:df:3d:00: 15:5d:48:be:5e:d9:83:82:76:35:96:f8:5d:82:b9: 89:39:ab:e7:80:5b:ff:29:f6:72:77:dc:73:b4:cb: 04:d5:fa:12:9c:b9:8e:c8:50:38:64:f6:6f:9e:68: cb:1a:dd:db:66:d2:53:4e:d0:e0:fe:44:ba:e6:db: b4:d3:17:98:ca:ff:09:8e:c3:44:47:3d:7f:e1:f8: 1e:e7:ef:ef:86:1a:7c:21:08:6b:4a:be:2c:27:53: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6B:B0:72:81:EC:DC:07:6E:8D:0C:EE:EB:73:C3:E5:9F:AE:22:F0 X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1a:93:28:68:77:b1:03:55:3e:62:88:0e:02:13:90:69:67: 7a:f0:bc:e4:a0:ab:12:7d:aa:55:ec:17:3e:01:8b:27:2c:0f: 48:1f:18:64:70:a5:06:cd:9b:c6:16:96:6d:ba:78:5b:41:7d: b8:cf:3f:4c:1c:08:d5:4b:fd:b4:03:52:da:ef:64:15:0e:68: 3f:c5:d7:5a:47:b4:b7:98:8c:26:06:7f:f5:81:ab:13:ac:ea: 2e:c3:e1:7e:06:0c:fe:27:31:81:e2:81:70:23:1d:69:8a:b9: 7a:4c:7b:0c:c0:8f:d5:27:9a:f5:56:7b:36:3a:91:22:a2:c4: fe:31:6a:73:11:20:03:40:b3:2e:4a:6c:a8:e9:c1:78:ca:89: de:51:df:b7:a2:7e:78:0a:d5:d2:f9:74:84:5e:85:91:60:9e: ff:ce:55:58:3c:80:13:a4:eb:a7:aa:16:7d:2d:9d:22:97:d9: 37:c4:bf:92:e2:cd:ab:7a:d0:dd:2f:a2:e4:c0:3c:6b:f1:52: 16:1a:17:fb:87:06:b3:60:45:7a:6f:f1:d9:f7:e2:0f:64:cd: ab:cb:05:04:42:27:c4:19:3b:9b:40:e2:f9:ae:ef:ed:5c:63: 38:e8:78:db:85:3f:f3:ac:ae:13:d1:76:65:14:06:b8:04:35: 19:de:88:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUwNDEwMjAyMjIyWhcNMjUwNDE3MjAyMjIyWjAYMRYwFAYD VQQDEw02N2Y4Mjg3ZS1iZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZLrKgipNOu1K7Pr2gffmMNNJsQhsDn3goeq1TIZ5/6WGH9Qn1WPvPTeeGnf J6RLxjtC/zuiGIcRPOeyo/d6dOrpCeKbSj6kF5tlGCillkt//6WiW4o0bLNK8oDd HyiJB0+RhKcBkMfpB1rsmeyiQkc3fHn5JNaVqoDe8kvMY9H+1vEYhVXdJlPPJgbm 7goTkIaU2NbenHlIPHc9gdeAodLfPQAVXUi+XtmDgnY1lvhdgrmJOavngFv/KfZy d9xztMsE1foSnLmOyFA4ZPZvnmjLGt3bZtJTTtDg/kS65tu00xeYyv8JjsNERz1/ 4fge5+/vhhp8IQhrSr4sJ1Oc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJrsHKB 7NwHbo0M7utzw+WfriLwMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVGpMoaHexA1U+YogOAhOQaWd68LzkoKsSfapV7Bc+AYsnLA9IHxhk cKUGzZvGFpZtunhbQX24zz9MHAjVS/20A1La72QVDmg/xddaR7S3mIwmBn/1gasT rOouw+F+Bgz+JzGB4oFwIx1pirl6THsMwI/VJ5r1Vns2OpEiosT+MWpzESADQLMu Smyo6cF4yoneUd+3on54CtXS+XSEXoWRYJ7/zlVYPIATpOunqhZ9LZ0il9k3xL+S 4s2retDdL6LkwDxr8VIWGhf7hwazYEV6b/HZ9+IPZM2rywUEQifEGTubQOL5ru/t XGM46HjbhT/zrK4T0XZlFAa4BDUZ3oio -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:10 2025 by rpki-client