$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json) Hash identifier: 49WxNtN8Y/Yk3iPil3EoWzZTpcSIolF/1IR0U3Z0TS8= Subject key identifier: 6E:24:2F:3A:CA:0D:BD:61:CC:56:F4:4D:D0:95:1F:3D:B3:E9:23:61 Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft Manifest number: 26 Signing time: Sat 29 Mar 2025 07:08:07 +0000 Manifest this update: Sat 29 Mar 2025 07:08:07 +0000 Manifest next update: Sat 05 Apr 2025 07:08:07 +0000 Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: p+hFI+Qwn9jagP0GLai5MjphrmPYe06blQgdqgKeCrE=) 2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CC3 Validity Not Before: Mar 29 07:08:07 2025 GMT Not After : Apr 5 07:08:07 2025 GMT Subject: CN=67e79c57-44f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:58:71:9e:53:97:36:05:6f:04:8b:6c:a7: b8:f1:44:6f:fb:77:54:c2:14:5a:ec:17:e5:cd:2f: 5b:4e:05:4a:8c:e7:f8:20:29:d3:97:21:41:08:a0: 00:3e:a9:57:6e:44:c3:59:f4:49:95:06:71:77:16: 76:f8:54:3e:34:63:f3:63:54:27:3d:63:f2:45:70: 15:32:37:5d:31:71:4a:65:9a:81:d8:26:c5:8c:a5: d8:43:3b:8e:26:c1:57:d9:74:92:45:ff:cc:54:07: c8:df:e7:74:4a:fa:0a:a5:e4:71:57:21:9f:a2:4e: 83:3d:ac:4a:2d:a4:38:8e:38:27:29:33:08:a9:a8: 59:7a:d8:64:5b:80:93:2b:84:89:f6:9a:d0:c3:ad: 81:38:24:21:b8:88:2e:65:1f:88:ce:b1:67:96:23: 77:8b:7b:2e:a3:c9:2f:5d:58:40:f1:9f:8d:7e:92: 32:03:66:71:b4:0d:7c:fc:ff:aa:be:a2:fc:8b:ba: 21:96:bc:09:bd:6a:65:99:6e:d4:53:72:f7:7b:e1: fb:ee:7c:53:87:ca:3f:46:96:bc:05:61:e6:bd:77: e6:12:df:9b:fd:c3:b8:e0:33:42:d3:6d:1c:67:5e: 7e:b6:7a:76:9b:5e:a3:ff:8c:95:5e:36:c8:3a:68: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:2F:3A:CA:0D:BD:61:CC:56:F4:4D:D0:95:1F:3D:B3:E9:23:61 X509v3 Authority Key Identifier: keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6c:5b:0b:4e:45:e9:a4:33:b8:4d:49:6a:a3:cc:d2:e1:2a: 34:a8:01:36:2e:ac:58:47:81:29:10:88:6d:f3:34:97:e7:a8: b0:9b:a5:ab:b2:e4:3c:9f:b1:58:9a:4c:81:b7:39:1b:64:ab: 3f:ac:2b:05:6f:2d:1b:00:fe:ab:6a:6c:e9:28:12:20:67:81: 90:f4:e0:aa:1c:ce:63:05:11:cf:0a:e8:e4:1c:68:b7:bb:42: 03:b9:73:f6:2d:41:21:b5:0f:bd:bb:4c:21:e5:2e:ff:f5:83: b3:78:08:49:83:d3:43:a9:5f:e3:4a:a7:4c:a0:02:d9:35:ee: 4c:72:14:94:a7:09:29:a5:ba:80:5b:c9:2b:7f:64:72:62:00: 14:ae:6c:cc:b7:e1:05:75:67:5e:b8:5d:dd:4b:97:c1:c0:ea: b1:d7:c3:3d:d8:e2:92:30:90:9d:e3:96:ac:56:1c:e7:f3:25: 12:0a:e0:1f:8e:7e:4d:0e:09:5f:7c:6e:19:11:4e:01:08:f1: 0b:95:e0:c4:fb:df:22:26:71:76:c9:e3:13:f8:e5:bc:c5:e5: d2:86:09:4e:8e:00:7e:84:33:6f:92:7b:82:61:8b:bf:cd:ca: 0b:ca:ff:03:67:82:fa:94:0c:40:09:d7:2e:90:e3:f6:c6:d8: 15:ca:c8:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OENDMzExMC8GA1UEBRMoQzkxNkFFNUE5NTIwQjVGNjc2N0U3OUM5MTVBRkExQkY2 RTQ5MTg5OTAeFw0yNTAzMjkwNzA4MDdaFw0yNTA0MDUwNzA4MDdaMBgxFjAUBgNV BAMTDTY3ZTc5YzU3LTQ0ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn9lhxnlOXNgVvBItsp7jxRG/7d1TCFFrsF+XNL1tOBUqM5/ggKdOXIUEIoAA+ qVduRMNZ9EmVBnF3Fnb4VD40Y/NjVCc9Y/JFcBUyN10xcUplmoHYJsWMpdhDO44m wVfZdJJF/8xUB8jf53RK+gql5HFXIZ+iToM9rEotpDiOOCcpMwipqFl62GRbgJMr hIn2mtDDrYE4JCG4iC5lH4jOsWeWI3eLey6jyS9dWEDxn41+kjIDZnG0DXz8/6q+ ovyLuiGWvAm9amWZbtRTcvd74fvufFOHyj9GlrwFYea9d+YS35v9w7jgM0LTbRxn Xn62enabXqP/jJVeNsg6aFfzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbiQvOsoN vWHMVvRN0JUfPbPpI2EwHwYDVR0jBBgwFoAUyRauWpUgtfZ2fnnJFa+hv25JGJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Q0MzL0VEREEzNkUyRDcy MzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJhdVdwVWd0ZloyZm5uSkZhLWh2MjVKR0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Q0MzL0VEREEzNkUyRDcyMzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZa MmZubkpGYS1odjI1SkdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItsWwtORemkM7hNSWqjzNLhKjSoATYurFhHgSkQiG3zNJfnqLCbpauy 5DyfsViaTIG3ORtkqz+sKwVvLRsA/qtqbOkoEiBngZD04KoczmMFEc8K6OQcaLe7 QgO5c/YtQSG1D727TCHlLv/1g7N4CEmD00OpX+NKp0ygAtk17kxyFJSnCSmluoBb ySt/ZHJiABSubMy34QV1Z164Xd1Ll8HA6rHXwz3Y4pIwkJ3jlqxWHOfzJRIK4B+O fk0OCV98bhkRTgEI8QuV4MT73yImcXbJ4xP45bzF5dKGCU6OAH6EM2+Se4Jhi7/N ygvK/wNngvqUDEAJ1y6Q4/bG2BXKyE4= -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:33 2025 by rpki-client