$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft File: YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json) Hash identifier: 1AaX9EZ4OBuK8xd+swbQsFRrs8s7T+7libK8OpGXJYs= Subject key identifier: 09:5F:CE:CC:75:67:84:16:C5:97:C2:4E:0C:5F:36:14:4F:0A:29:68 Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD Certificate issuer: /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft Manifest number: 0124 Signing time: Thu 03 Apr 2025 03:54:49 +0000 Manifest this update: Thu 03 Apr 2025 03:54:49 +0000 Manifest next update: Thu 10 Apr 2025 03:54:49 +0000 Files and hashes: 1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: Dt2D6HpsT9debhB1JdZKCkHBIEB+5UsbwENRsEI8eIk=) 2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: JF98gdzocH1/AV+95pGblYdfL1FxgXSJftaTSJva7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C2B Validity Not Before: Apr 3 03:54:49 2025 GMT Not After : Apr 10 03:54:49 2025 GMT Subject: CN=67ee0689-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:25:96:5a:1e:4f:d2:9a:6b:b9:ac:6c:9d:00: af:fc:95:3b:ed:33:0b:1c:8b:ac:5d:62:61:ef:20: d7:b2:33:d5:53:4f:fe:c0:90:d3:58:71:77:c0:12: b4:fc:51:8d:99:c7:c6:fb:71:0e:84:31:2b:bf:fd: 2a:e2:7a:62:b3:a6:93:22:19:8b:92:a4:ba:e3:42: 8e:a3:f5:52:b2:69:09:6c:fb:5a:ff:5b:1c:94:d5: 05:4f:03:52:b9:09:b3:fd:c7:36:eb:ea:49:aa:c4: 65:51:c6:d7:01:19:21:65:99:11:74:59:e5:70:62: 55:4d:0c:43:ba:ef:f9:f0:60:eb:bc:cc:42:6f:e6: d4:fd:97:ea:68:57:6c:5d:bb:40:b7:25:0e:1f:2b: d3:d0:7e:6e:d1:55:86:dc:24:9d:7b:ee:fe:5f:f4: 75:4a:d6:a8:62:eb:63:91:39:db:76:63:c5:30:e0: 4c:24:07:2a:17:bb:08:2c:06:7c:d4:78:8f:64:19: 48:43:43:3a:f9:c2:29:76:18:f3:5f:44:0a:15:86: 4a:d6:c6:7d:b1:80:12:56:2a:53:2b:a0:c1:8f:0a: dc:6d:a5:63:c6:ac:70:79:7d:dd:b2:99:03:d7:f9: c3:42:b6:0c:d2:64:78:f6:14:28:ac:c3:34:07:3e: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:CE:CC:75:67:84:16:C5:97:C2:4E:0C:5F:36:14:4F:0A:29:68 X509v3 Authority Key Identifier: keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d5:f7:44:a8:71:7e:ce:10:4c:16:f9:c1:56:12:cf:d3:1f: c4:73:76:45:b1:41:ff:76:c1:4f:98:1e:8c:c4:78:3d:bc:1d: 36:cf:b1:98:5c:87:2e:77:0a:8f:64:26:c4:26:f0:47:45:6b: 08:82:6a:2d:d1:0a:8f:d6:f9:c8:cb:68:77:0a:d0:00:75:9c: 91:f1:76:fb:16:32:eb:0d:75:bb:c6:b9:52:4a:8f:72:b6:a8: a9:5a:f2:33:db:cc:b2:c4:8c:56:ef:6b:9d:d2:92:ff:4f:93: e8:a0:1a:0c:48:6f:68:11:7a:e9:03:58:76:80:06:f4:db:a0: ef:16:48:5d:0f:16:c4:77:39:f8:5e:7e:6d:a9:f3:0b:3c:5d: a1:86:ed:d7:cb:c5:c2:12:36:df:2e:62:6f:e9:56:b2:32:ec: 0c:2c:41:f2:a3:f9:14:4f:5e:4a:45:4f:56:b3:5e:f5:0d:9c: 9e:2e:53:5b:ed:f6:ee:a0:db:58:46:f0:2a:ad:05:74:98:af: da:61:04:cd:85:2c:46:c1:c5:00:be:77:de:e0:f3:25:8b:9f: ec:15:99:f3:38:f5:57:f0:2c:52:b6:99:b7:1b:98:9a:19:cd: 07:e5:3a:5b:4d:fe:9e:d3:df:03:42:05:d6:a0:4f:57:86:ed: 15:2e:bf:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5 RTFFMkY5Q0QwHhcNMjUwNDAzMDM1NDQ5WhcNMjUwNDEwMDM1NDQ5WjAYMRYwFAYD VQQDEw02N2VlMDY4OS0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yWWWh5P0ppruaxsnQCv/JU77TMLHIusXWJh7yDXsjPVU0/+wJDTWHF3wBK0 /FGNmcfG+3EOhDErv/0q4npis6aTIhmLkqS640KOo/VSsmkJbPta/1sclNUFTwNS uQmz/cc26+pJqsRlUcbXARkhZZkRdFnlcGJVTQxDuu/58GDrvMxCb+bU/ZfqaFds XbtAtyUOHyvT0H5u0VWG3CSde+7+X/R1StaoYutjkTnbdmPFMOBMJAcqF7sILAZ8 1HiPZBlIQ0M6+cIpdhjzX0QKFYZK1sZ9sYASVipTK6DBjwrcbaVjxqxweX3dspkD 1/nDQrYM0mR49hQorMM0Bz4zywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlfzsx1 Z4QWxZfCTgxfNhRPCiloMB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho UVpBNFVyaGpJdy1lSGktYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw1fdEqHF+zhBMFvnBVhLP0x/Ec3ZFsUH/dsFPmB6MxHg9vB02z7GY XIcudwqPZCbEJvBHRWsIgmot0QqP1vnIy2h3CtAAdZyR8Xb7FjLrDXW7xrlSSo9y tqipWvIz28yyxIxW72ud0pL/T5PooBoMSG9oEXrpA1h2gAb026DvFkhdDxbEdzn4 Xn5tqfMLPF2hhu3Xy8XCEjbfLmJv6VayMuwMLEHyo/kUT15KRU9Ws171DZyeLlNb 7fbuoNtYRvAqrQV0mK/aYQTNhSxGwcUAvnfe4PMli5/sFZnzOPVX8CxStpm3G5ia Gc0H5TpbTf6e098DQgXWoE9Xhu0VLr9R -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:52 2025 by rpki-client