$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json) Hash identifier: ls+bvWK6HOuAmZRQ7Y2bOnd9mqIb46o6rLpBc0LQwGw= Subject key identifier: 10:20:CC:B6:E7:0F:1D:36:15:09:F6:95:1B:82:33:76:BC:A2:CD:1E Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft Manifest number: 44 Signing time: Fri 11 Apr 2025 06:41:44 +0000 Manifest this update: Fri 11 Apr 2025 06:41:44 +0000 Manifest next update: Fri 18 Apr 2025 06:41:44 +0000 Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: uWpHUiG/yzkt0VoFgv54/cW6MnCCuWaeOKg1Lpu+7kU=) 2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Validity Not Before: Apr 11 06:41:44 2025 GMT Not After : Apr 18 06:41:44 2025 GMT Subject: CN=67f8b9a8-4f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:53:1f:57:cb:96:1e:d4:93:5b:bb:fb:f3:83: 2d:66:d1:e7:b8:0b:6a:8f:8b:0f:ea:3f:bb:3b:45: 7b:4e:c1:d1:02:f6:f3:76:31:b2:76:26:9c:2c:52: 11:0d:37:38:6c:ae:12:df:f5:30:50:19:b5:50:bc: ab:3b:9b:4e:07:0a:a1:af:90:4a:b9:b4:ef:d3:3e: 5d:a0:67:f3:5b:d7:0b:c1:b4:5b:42:29:20:37:63: 8a:5c:15:71:89:95:25:5f:a4:de:97:ab:7b:71:42: 81:70:05:aa:db:4f:2e:9b:a9:79:2f:42:5c:0f:bd: 6b:bc:bc:cd:c0:77:b9:8d:38:67:c8:bb:ee:f0:73: f5:56:fb:dd:50:da:1f:c0:1c:52:6b:83:b6:49:85: 2e:2c:3a:e6:98:5d:88:0e:51:e1:e1:c1:45:87:29: 72:f2:06:52:bc:62:3b:18:0e:45:87:3a:b0:06:1f: df:d9:b3:e0:3f:9e:b5:68:f7:3c:dc:32:1a:85:b3: 68:8a:39:1e:3b:3a:9c:58:b6:ae:48:a7:1b:b1:f9: 31:44:b9:29:54:f2:ff:7f:8c:ce:57:42:8c:35:b8: 96:ee:70:60:09:86:6f:9b:58:03:39:bf:b4:6c:f8: 94:f6:3d:a3:4e:00:28:eb:21:3f:b7:4c:a0:f7:5d: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:20:CC:B6:E7:0F:1D:36:15:09:F6:95:1B:82:33:76:BC:A2:CD:1E X509v3 Authority Key Identifier: keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:79:b8:d4:3a:63:8f:cd:e6:8c:38:86:ff:b0:43:2d:4e:64: a3:07:b5:8c:de:81:bb:cf:94:f8:d5:20:bc:c8:07:50:e4:c4: d1:a5:84:8b:03:fa:6e:0a:49:89:a1:1a:12:79:36:72:6b:0a: c0:00:0c:81:f7:ad:62:94:ff:d8:7d:68:04:a7:f1:cc:95:19: 46:32:5a:2e:ea:97:e2:4c:fc:96:7e:98:a7:d2:29:0e:90:b5: 73:3d:16:94:45:1e:d8:83:4d:ed:00:3f:a0:48:16:e9:96:25: e6:25:67:50:89:3c:f0:5e:61:35:f4:06:a7:a1:d5:89:81:9c: a0:29:80:3f:98:a4:8d:e9:fb:9b:47:67:cb:92:ea:7c:36:79: e1:a9:e8:ff:27:9a:a2:fe:de:5c:30:f1:cb:27:ba:a2:7b:06: dd:a3:8b:8b:88:20:be:b6:76:05:60:aa:7b:0d:b0:f4:10:c0: dd:00:e1:7c:50:cd:96:cf:ac:cc:60:27:2d:35:1a:91:95:e0: 2c:bd:d7:40:a1:72:aa:b0:c7:2a:f9:25:f7:bd:67:0e:b4:2f: 98:44:67:fb:18:93:46:1c:99:13:38:76:6d:8b:01:4f:22:17: 7f:21:15:a0:a4:82:b0:0d:64:24:54:fe:4b:db:32:88:ab:18: 42:4e:6e:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0 MzI2RDlEMzAeFw0yNTA0MTEwNjQxNDRaFw0yNTA0MTgwNjQxNDRaMBgxFjAUBgNV BAMTDTY3ZjhiOWE4LTRmMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrUx9Xy5Ye1JNbu/vzgy1m0ee4C2qPiw/qP7s7RXtOwdEC9vN2MbJ2JpwsUhEN NzhsrhLf9TBQGbVQvKs7m04HCqGvkEq5tO/TPl2gZ/Nb1wvBtFtCKSA3Y4pcFXGJ lSVfpN6Xq3txQoFwBarbTy6bqXkvQlwPvWu8vM3Ad7mNOGfIu+7wc/VW+91Q2h/A HFJrg7ZJhS4sOuaYXYgOUeHhwUWHKXLyBlK8YjsYDkWHOrAGH9/Zs+A/nrVo9zzc MhqFs2iKOR47OpxYtq5Ipxux+TFEuSlU8v9/jM5XQow1uJbucGAJhm+bWAM5v7Rs +JT2PaNOACjrIT+3TKD3XUZxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUECDMtucP HTYVCfaVG4IzdryizR4wHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEh5uNQ6Y4/N5ow4hv+wQy1OZKMHtYzegbvPlPjVILzIB1DkxNGlhIsD +m4KSYmhGhJ5NnJrCsAADIH3rWKU/9h9aASn8cyVGUYyWi7ql+JM/JZ+mKfSKQ6Q tXM9FpRFHtiDTe0AP6BIFumWJeYlZ1CJPPBeYTX0Bqeh1YmBnKApgD+YpI3p+5tH Z8uS6nw2eeGp6P8nmqL+3lww8csnuqJ7Bt2ji4uIIL62dgVgqnsNsPQQwN0A4XxQ zZbPrMxgJy01GpGV4Cy910Chcqqwxyr5Jfe9Zw60L5hEZ/sYk0YcmRM4dm2LAU8i F38hFaCkgrANZCRU/kvbMoirGEJObrc= -----END CERTIFICATE-----Generated at Sat Apr 12 17:16:07 2025 by rpki-client