$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: oz19c7ShR4kS0A9mTVDmd3S2MjA5If9etl/dGr/KE9w= Subject key identifier: FA:9B:04:F0:19:16:12:FC:09:FB:D2:91:22:F1:2F:17:72:D5:70:7C Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: 58 Signing time: Fri 11 Apr 2025 06:23:46 +0000 Manifest this update: Fri 11 Apr 2025 06:23:45 +0000 Manifest next update: Fri 18 Apr 2025 06:23:45 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: zRklauIAUwU5giKUQjAnZS/m3Jf73svvVknWWLtpbQs=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Apr 11 06:23:45 2025 GMT Not After : Apr 18 06:23:45 2025 GMT Subject: CN=67f8b572-e97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:65:63:7f:7b:11:fb:d5:be:d5:68:29:1c: df:7a:d8:3a:01:bd:80:7e:84:39:ad:18:cd:40:b7: 1e:d8:b8:93:0b:09:a9:05:fe:1b:1d:1c:d0:85:5a: 41:76:ba:4b:ba:25:72:7f:a8:ca:87:d0:a0:d0:08: d7:44:d2:a4:57:39:4b:fa:a0:b6:9b:c6:d7:a8:1a: b0:b1:89:7e:cc:5c:3f:d5:1c:76:72:64:98:96:e1: 12:e2:93:27:a0:2f:a8:84:6a:3a:67:48:d0:7b:50: 16:a4:bb:89:86:0f:a2:e1:b2:2f:aa:7e:a2:51:68: 4d:98:ba:05:ac:58:91:bb:e9:e5:30:54:f2:37:cc: 60:f8:28:a7:43:be:20:ff:b2:d8:4a:3e:e5:09:e5: a7:3c:03:70:a1:61:e6:83:9b:a2:68:ee:98:da:ed: 49:b7:7a:04:7a:30:fa:ee:94:73:f8:77:65:ca:f9: 66:fb:92:a3:03:a5:3d:23:c8:9d:da:a5:60:68:9b: 15:9f:d5:5e:20:3b:f3:c6:e4:f5:53:e2:8c:17:5b: 18:12:28:b3:d1:4b:a8:9d:8b:34:27:5f:b0:d8:e2: 80:21:99:1f:9d:f2:3f:5a:8c:41:8f:6c:e1:75:0e: 93:b4:11:21:fb:59:67:cf:75:80:68:90:f3:8a:f6: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:04:F0:19:16:12:FC:09:FB:D2:91:22:F1:2F:17:72:D5:70:7C X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a7:08:bc:45:a5:52:98:ad:4f:f5:10:d9:e1:26:c6:a7:0d: 8c:f6:12:5e:f4:f8:fd:4d:dd:73:6e:3d:f8:db:d1:1e:e6:89: 1f:8d:3f:18:62:af:11:c2:52:43:80:ab:6e:1f:84:d9:21:cd: 7e:af:61:48:7d:ac:fe:aa:07:3d:9f:b6:05:f7:01:06:96:71: 77:40:a9:1a:3a:3a:b1:3a:56:51:65:cb:1f:d8:81:cc:9b:f3: 70:68:c4:d0:23:98:bf:ab:72:54:bf:be:31:27:a1:06:3b:bf: c8:96:b7:e0:58:2a:e3:83:66:f9:26:40:4c:35:ec:59:60:16: b8:45:8a:62:a2:05:1e:f7:cf:00:1e:c2:a2:bf:8a:be:50:51: 39:11:38:6d:30:bf:bb:46:ab:6b:b1:21:ee:f2:12:0d:76:9a: c6:8d:b8:f4:7e:ad:d3:6d:e8:b5:49:03:74:b3:11:99:60:9c: 01:09:6d:77:26:3e:e0:f6:f2:84:d8:10:60:7b:81:5f:7e:1f: 74:17:0b:c7:37:a3:e0:2f:d8:77:b8:37:b2:3b:b5:67:ea:e8: c8:61:37:a0:b5:d8:81:8b:b2:80:45:61:94:f6:7f:92:3b:78: df:d2:e6:32:7c:a6:36:58:a7:9e:ae:fa:1e:41:d0:6f:0c:f7: 17:af:c3:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNTA0MTEwNjIzNDVaFw0yNTA0MTgwNjIzNDVaMBgxFjAUBgNV BAMTDTY3ZjhiNTcyLWU5N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFSGVjf3sR+9W+1WgpHN962DoBvYB+hDmtGM1Atx7YuJMLCakF/hsdHNCFWkF2 uku6JXJ/qMqH0KDQCNdE0qRXOUv6oLabxteoGrCxiX7MXD/VHHZyZJiW4RLikyeg L6iEajpnSNB7UBaku4mGD6Lhsi+qfqJRaE2YugWsWJG76eUwVPI3zGD4KKdDviD/ sthKPuUJ5ac8A3ChYeaDm6Jo7pja7Um3egR6MPrulHP4d2XK+Wb7kqMDpT0jyJ3a pWBomxWf1V4gO/PG5PVT4owXWxgSKLPRS6idizQnX7DY4oAhmR+d8j9ajEGPbOF1 DpO0ESH7WWfPdYBokPOK9idzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+psE8BkW EvwJ+9KRIvEvF3LVcHwwHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Nzk0LzczREI3N0QwOTVCRTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJE SjVlbGhGUFpYemxpVnNmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACnCLxFpVKYrU/1ENnhJsanDYz2El70+P1N3XNuPfjb0R7miR+NPxhi rxHCUkOAq24fhNkhzX6vYUh9rP6qBz2ftgX3AQaWcXdAqRo6OrE6VlFlyx/Ygcyb 83BoxNAjmL+rclS/vjEnoQY7v8iWt+BYKuODZvkmQEw17FlgFrhFimKiBR73zwAe wqK/ir5QUTkROG0wv7tGq2uxIe7yEg12msaNuPR+rdNt6LVJA3SzEZlgnAEJbXcm PuD28oTYEGB7gV9+H3QXC8c3o+Av2He4N7I7tWfq6MhhN6C12IGLsoBFYZT2f5I7 eN/S5jJ8pjZYp56u+h5B0G8M9xevw3I= -----END CERTIFICATE-----Generated at Sat Apr 12 17:33:50 2025 by rpki-client