$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: n3+PE+kUw98shhIVd5GmlOtXCjRMdn3ALqBnbjOpytw= Subject key identifier: A8:6E:67:1F:51:C3:DB:F4:76:15:D8:50:8D:4C:1D:B8:62:F2:D2:A7 Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 045F Signing time: Wed 16 Apr 2025 23:48:50 +0000 Manifest this update: Wed 16 Apr 2025 23:48:49 +0000 Manifest next update: Wed 23 Apr 2025 23:48:49 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: 283+hLmMb7ohox9gYtOJp4T/W0tpHLMO4X9DsElU3CQ=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: Apr 16 23:48:49 2025 GMT Not After : Apr 23 23:48:49 2025 GMT Subject: CN=680041e2-b9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:d9:e9:cd:0f:0c:2b:4c:d2:95:a6:2b:65: ea:ec:23:80:96:0b:38:66:b8:74:81:b5:0a:b6:67: 88:ee:ff:70:31:08:a8:d4:14:ce:d7:7f:b4:87:60: 10:bb:9e:2b:a7:f3:6a:c1:ef:b2:63:3a:fd:4b:b7: a0:09:c4:b4:09:38:c7:fc:98:23:7b:c7:1f:f5:f0: 8b:ce:9a:4e:8a:76:bd:ea:55:1e:25:28:8b:f9:ae: a0:62:ee:74:0e:0b:f3:aa:a4:aa:5e:28:d5:20:05: 09:33:54:8e:21:b2:3e:e9:24:12:46:ae:b2:fe:7c: 55:c7:e3:7c:21:ca:54:c7:60:af:54:9d:a5:cf:b8: 45:1e:cc:12:b2:73:7a:f6:18:34:07:d1:d7:4b:61: 7b:95:ad:12:8c:db:29:81:dd:18:a9:80:ef:00:a8: bd:46:2d:43:82:d3:62:28:4b:d1:60:5c:6a:ec:a9: 17:01:db:82:07:4a:5b:ba:4c:be:db:5c:88:ed:e7: 69:38:19:72:90:0d:bf:60:c5:d6:6c:9f:d8:2a:b1: f4:25:31:b7:98:a0:3a:aa:8c:b9:be:14:8c:78:de: a5:0f:bf:bb:76:3f:c4:b1:47:bc:74:44:9d:d9:61: a7:d7:bc:ce:6f:44:9b:e2:51:32:10:6d:b5:4a:58: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:67:1F:51:C3:DB:F4:76:15:D8:50:8D:4C:1D:B8:62:F2:D2:A7 X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b1:bd:46:10:3c:ce:88:78:db:c9:21:b5:19:4a:d4:e0:30: 51:31:32:ea:26:2a:ac:52:6d:de:f0:5d:a5:6a:68:66:23:a9: ff:78:0b:8c:a0:11:37:2b:01:14:d2:c4:26:16:0d:10:a4:41: 5a:fd:96:83:e0:a4:0f:50:ac:d7:2f:9b:a9:4b:ff:2a:0b:db: 6c:f4:05:85:1d:76:21:be:5e:cf:a9:0b:87:35:29:84:3f:bb: d6:31:8e:d3:4b:2f:ad:b6:11:03:b8:b8:d6:35:1f:42:8d:bd: 02:0c:c3:3d:4c:21:8f:b7:74:74:f0:15:4f:9f:ad:f8:07:fe: 7e:91:73:18:86:7e:6b:92:97:dc:b2:21:ea:07:ae:aa:e0:45: b7:71:b4:82:f5:57:ed:34:f3:9b:2e:01:1a:35:28:ad:9d:e2: 7f:95:8d:93:1f:1a:3b:6f:24:b6:a2:f4:a5:e2:da:52:79:fb: 15:3c:bc:df:d3:d5:19:51:56:fe:69:11:ec:b0:bd:07:12:8b: be:cd:ab:58:c8:c3:fe:34:e4:24:db:4e:16:64:53:5a:da:22: f4:38:8e:ab:d6:d3:18:57:07:a7:8f:5d:e1:f1:1a:90:11:cc: 60:46:d1:8a:9b:65:9d:16:56:5d:d7:e8:6f:b9:0c:8d:fe:4e: b7:e9:f8:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUwNDE2MjM0ODQ5WhcNMjUwNDIzMjM0ODQ5WjAYMRYwFAYD VQQDEw02ODAwNDFlMi1iOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK3Z6c0PDCtM0pWmK2Xq7COAlgs4Zrh0gbUKtmeI7v9wMQio1BTO13+0h2AQ u54rp/Nqwe+yYzr9S7egCcS0CTjH/Jgje8cf9fCLzppOina96lUeJSiL+a6gYu50 DgvzqqSqXijVIAUJM1SOIbI+6SQSRq6y/nxVx+N8IcpUx2CvVJ2lz7hFHswSsnN6 9hg0B9HXS2F7la0SjNspgd0YqYDvAKi9Ri1DgtNiKEvRYFxq7KkXAduCB0pbuky+ 21yI7edpOBlykA2/YMXWbJ/YKrH0JTG3mKA6qoy5vhSMeN6lD7+7dj/EsUe8dESd 2WGn17zOb0Sb4lEyEG21SlgvtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhuZx9R w9v0dhXYUI1MHbhi8tKnMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCosb1GEDzOiHjbySG1GUrU4DBRMTLqJiqsUm3e8F2lamhmI6n/eAuM oBE3KwEU0sQmFg0QpEFa/ZaD4KQPUKzXL5upS/8qC9ts9AWFHXYhvl7PqQuHNSmE P7vWMY7TSy+tthEDuLjWNR9Cjb0CDMM9TCGPt3R08BVPn634B/5+kXMYhn5rkpfc siHqB66q4EW3cbSC9VftNPObLgEaNSitneJ/lY2THxo7byS2ovSl4tpSefsVPLzf 09UZUVb+aRHssL0HEou+zatYyMP+NOQk204WZFNa2iL0OI6r1tMYVwenj13h8RqQ EcxgRtGKm2WdFlZd1+hvuQyN/k636fh1 -----END CERTIFICATE-----Generated at Thu Apr 17 12:02:49 2025 by rpki-client