$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: FdTECiqhPniQaAfgY79JsvsYaDV5LOdEzsvpR/HU8t4= Subject key identifier: 6B:87:9C:7E:D8:B7:E3:54:A7:34:EE:61:7C:E0:24:76:FD:03:41:29 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01C1 Signing time: Thu 17 Apr 2025 02:08:05 +0000 Manifest this update: Thu 17 Apr 2025 02:08:04 +0000 Manifest next update: Thu 24 Apr 2025 02:08:04 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: 1zUtHhtwy3K/iD78ClBoPU8nmmX7c7+gBLH6Zb/k1ns=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: EGxldo7AGw1cFMotW1VKii2ay/EqR5jKmsG9yMQNqRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Apr 17 02:08:04 2025 GMT Not After : Apr 24 02:08:04 2025 GMT Subject: CN=68006285-5c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:aa:2a:a7:8f:c4:48:ec:09:3f:24:ad:83: 3a:c3:44:86:80:d7:aa:54:c3:c1:0f:33:03:7b:91: e6:60:97:8e:64:36:ec:51:6e:53:dd:c2:77:1f:6b: 5c:0c:55:ce:0a:17:76:9d:47:76:14:47:55:40:da: c1:12:be:b9:93:18:8d:59:01:dd:0f:48:a6:9d:43: cc:c6:70:fa:73:20:98:41:ba:9d:78:85:08:e8:b8: e9:12:68:3c:18:8c:5c:ae:4f:07:ca:77:97:02:64: 6f:32:10:bf:c6:8d:89:b5:36:ba:40:f9:5e:4c:c4: b5:d0:dd:49:fb:8d:be:03:96:27:c4:67:80:fb:19: 66:27:00:de:21:cc:d4:3f:b1:9b:bd:79:c2:28:68: 88:b7:ea:f2:24:12:1b:83:c2:43:90:65:6a:6e:36: 95:16:3b:8e:95:d2:fd:5c:25:21:0a:c1:11:5c:93: 7d:9c:8c:76:b5:e1:51:97:bb:fc:7a:53:0c:1f:14: e2:95:18:1a:25:bc:c3:9e:8e:e7:15:4e:dc:48:3e: 30:20:75:e8:b4:7c:7a:00:3d:ab:e3:ff:e4:03:fd: 4a:7a:e8:f2:01:71:dc:66:0e:72:74:9c:dc:8a:0a: 05:19:cb:7d:e8:24:97:a5:ba:f7:76:52:23:e7:b2: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:87:9C:7E:D8:B7:E3:54:A7:34:EE:61:7C:E0:24:76:FD:03:41:29 X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:c4:cb:e7:90:e3:03:bf:ca:cd:f1:57:9b:0f:e1:57:dd: 9e:92:7b:93:b1:28:8a:fe:98:c7:c0:0a:ad:d9:0d:79:6f:07: 73:d4:8b:16:8a:13:33:4d:5b:70:e7:31:aa:39:18:11:a6:3c: 0c:49:ab:1c:ce:e5:79:6c:92:31:5a:96:98:8e:70:83:cf:ff: 92:1e:5c:6f:a6:6c:52:f3:03:63:58:a8:f7:ed:61:94:68:02: b7:63:fd:c1:b5:32:e7:9e:50:ae:4f:77:07:b2:5e:ed:40:43: cf:35:8f:36:8c:74:78:fd:02:1c:f9:8e:ad:8f:16:e9:c0:6a: 3d:88:c5:16:35:09:32:f0:45:32:0a:3d:25:fa:3f:f8:93:dd: 95:f3:90:55:e3:c0:72:4e:82:00:0b:27:e7:98:19:a5:2f:d6: 11:b6:67:15:af:37:79:99:99:e2:b7:0e:c1:af:4a:8b:15:b3: e0:3a:63:b8:5e:e6:b2:0f:c3:f3:00:f6:5d:9d:3b:2c:48:40: f4:fd:95:fe:b4:f6:4a:4a:06:45:5b:b7:2d:d6:45:b5:dc:31: 17:54:dd:c9:92:85:cb:ce:04:f3:04:49:67:61:5e:66:5c:dc: ed:52:8e:12:f6:c4:b9:6c:49:51:9b:32:bc:29:af:28:f1:88: 7b:e8:e9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwNDE3MDIwODA0WhcNMjUwNDI0MDIwODA0WjAYMRYwFAYD VQQDEw02ODAwNjI4NS01YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/eqKqePxEjsCT8krYM6w0SGgNeqVMPBDzMDe5HmYJeOZDbsUW5T3cJ3H2tc DFXOChd2nUd2FEdVQNrBEr65kxiNWQHdD0imnUPMxnD6cyCYQbqdeIUI6LjpEmg8 GIxcrk8HyneXAmRvMhC/xo2JtTa6QPleTMS10N1J+42+A5YnxGeA+xlmJwDeIczU P7GbvXnCKGiIt+ryJBIbg8JDkGVqbjaVFjuOldL9XCUhCsERXJN9nIx2teFRl7v8 elMMHxTilRgaJbzDno7nFU7cSD4wIHXotHx6AD2r4//kA/1KeujyAXHcZg5ydJzc igoFGct96CSXpbr3dlIj57IjRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuHnH7Y t+NUpzTuYXzgJHb9A0EpMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6wsTL55DjA7/KzfFXmw/hV92eknuTsSiK/pjHwAqt2Q15bwdz1IsW ihMzTVtw5zGqORgRpjwMSasczuV5bJIxWpaYjnCDz/+SHlxvpmxS8wNjWKj37WGU aAK3Y/3BtTLnnlCuT3cHsl7tQEPPNY82jHR4/QIc+Y6tjxbpwGo9iMUWNQky8EUy Cj0l+j/4k92V85BV48ByToIACyfnmBmlL9YRtmcVrzd5mZnitw7Br0qLFbPgOmO4 XuayD8PzAPZdnTssSED0/ZX+tPZKSgZFW7ct1kW13DEXVN3JkoXLzgTzBElnYV5m XNztUo4S9sS5bElRmzK8Ka8o8Yh76Om4 -----END CERTIFICATE-----Generated at Fri Apr 18 17:08:34 2025 by rpki-client