$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft File: yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json) Hash identifier: UNSm3kHRXIDJR4gY3u7oirjqAy5rOvPlb49lT2Ttgs8= Subject key identifier: 74:D1:2D:6B:C3:42:4E:1B:17:5D:83:4A:18:EC:C6:FE:0A:0B:7C:B7 Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft Manifest number: 0B8A Signing time: Fri 04 Apr 2025 19:07:21 +0000 Manifest this update: Fri 04 Apr 2025 19:07:21 +0000 Manifest next update: Fri 11 Apr 2025 19:07:21 +0000 Files and hashes: 1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: PrlvT7St/99aR8nQGxEanMbrDUHgSBlu/66DlLy4RK0=) 2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: 7Qe+vax7U/UHiyHvcC0/AHUYcYPgeOOrxsZUaqeqXZg=) 3: 20748896236511EABCF20E10C4F9AE02.roa (hash: WBHTJ02r7No790rbFdZPQ4e1Vkcdj+CzlNb+ihLNe2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919040F Validity Not Before: Apr 4 19:07:21 2025 GMT Not After : Apr 11 19:07:21 2025 GMT Subject: CN=67f02de9-0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:9e:11:da:1a:4c:8f:a0:0e:8e:3c:e2:13: 21:aa:38:2f:89:31:7e:dd:9b:3f:6d:57:9c:7b:52: 01:06:56:7d:18:90:d9:ed:04:1e:c1:51:4c:30:e0: a4:ab:ec:5b:90:09:0e:a5:45:98:c9:64:75:84:aa: 73:bd:43:0d:c9:53:ff:ed:d7:f6:3e:6a:5a:6e:67: 5d:b5:8b:60:1c:f7:c9:4e:3e:be:34:9e:71:31:8a: 37:c2:5e:b6:ee:f7:be:fc:5c:31:e3:0d:09:58:ed: 14:7f:04:bf:04:59:69:06:1f:44:5e:c9:16:a0:47: 5f:f3:7c:69:7c:d9:11:9c:8c:1c:2f:09:ee:ae:36: c8:72:41:1a:7d:52:6a:6f:10:5a:b9:fb:a8:fa:25: fd:2f:53:bd:03:7c:e8:55:8c:4d:a6:b8:c7:08:86: 26:54:54:12:2c:01:58:db:70:78:52:30:2a:1e:73: 9c:2a:c3:3b:99:29:ca:9b:28:d4:22:13:17:08:d4: 1a:ce:9c:fd:8e:ce:28:a8:ba:28:1b:fa:a3:9d:e8: e5:52:af:cc:39:23:9f:a3:6c:55:da:be:f6:87:f4: dd:f0:10:05:23:e7:51:71:62:05:1c:46:bc:ea:4f: 30:a8:73:4c:e5:77:84:e7:8c:9f:1c:89:2c:76:b5: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D1:2D:6B:C3:42:4E:1B:17:5D:83:4A:18:EC:C6:FE:0A:0B:7C:B7 X509v3 Authority Key Identifier: keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e8:17:b5:b7:e2:e0:ea:be:af:d6:5b:a9:ea:bf:15:26:09: 7b:5c:47:69:4d:eb:93:b7:78:5f:2b:b2:16:e6:68:62:1c:76: d8:9b:46:77:ca:90:49:0a:4a:5f:bc:de:a6:b4:98:1f:d9:59: a7:94:bd:95:44:17:8b:ee:49:fa:3b:92:c8:70:23:65:4d:ba: 1c:82:da:dd:8c:92:21:5a:2b:ec:e6:fa:a7:6b:a8:ae:2d:d6: 43:f8:3e:4c:98:14:93:b0:de:de:00:3b:17:a3:a5:41:c3:66: fa:ce:c8:c1:13:03:d0:4a:83:60:b0:a7:6c:35:70:4c:cb:95: c4:21:1e:d0:bd:02:c7:f0:36:7a:7e:4f:b8:24:81:af:42:74: 5d:c2:e3:73:a9:e0:97:ea:ca:0f:82:54:b0:5d:2a:df:28:8a: d1:51:29:51:72:52:6e:d4:65:4b:cf:ae:7d:f3:4a:67:67:0a: 31:22:a6:69:73:ab:f7:d3:df:02:be:23:81:e4:56:de:b4:07: 6e:58:b5:9e:3c:a9:16:6a:e3:33:10:fa:2a:37:b9:fb:fc:d5: 3f:cf:1d:ad:cc:2e:b1:19:9c:ca:aa:17:8c:94:e9:83:61:9b: 87:40:93:de:18:e9:66:54:44:e4:73:10:a0:f5:62:eb:d6:60: 79:85:5b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0MEYxMTAvBgNVBAUTKEM4RkNDQ0M0QkU4OThBQTkyMDY3MTM2NkEwRkQ3OTUz MjlFOTIwMUQwHhcNMjUwNDA0MTkwNzIxWhcNMjUwNDExMTkwNzIxWjAYMRYwFAYD VQQDEw02N2YwMmRlOS0wZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJaeEdoaTI+gDo484hMhqjgviTF+3Zs/bVece1IBBlZ9GJDZ7QQewVFMMOCk q+xbkAkOpUWYyWR1hKpzvUMNyVP/7df2PmpabmddtYtgHPfJTj6+NJ5xMYo3wl62 7ve+/Fwx4w0JWO0UfwS/BFlpBh9EXskWoEdf83xpfNkRnIwcLwnurjbIckEafVJq bxBaufuo+iX9L1O9A3zoVYxNprjHCIYmVFQSLAFY23B4UjAqHnOcKsM7mSnKmyjU IhMXCNQazpz9js4oqLooG/qjnejlUq/MOSOfo2xV2r72h/Td8BAFI+dRcWIFHEa8 6k8wqHNM5XeE54yfHIksdrVbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTRLWvD Qk4bF12DShjsxv4KC3y3MB8GA1UdIwQYMBaAFMj8zMS+iYqpIGcTZqD9eVMp6SAd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQwRi83MDdCN0I4MDIz NjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlxa2daeE5tb1AxNVV5bnBJ QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lQek14TDZKaXFrZ1p4Tm1vUDE1VXlucElCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQwRi83MDdCN0I4MDIzNjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlx a2daeE5tb1AxNVV5bnBJQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp6Be1t+Lg6r6v1lup6r8VJgl7XEdpTeuTt3hfK7IW5mhiHHbYm0Z3 ypBJCkpfvN6mtJgf2VmnlL2VRBeL7kn6O5LIcCNlTbocgtrdjJIhWivs5vqna6iu LdZD+D5MmBSTsN7eADsXo6VBw2b6zsjBEwPQSoNgsKdsNXBMy5XEIR7QvQLH8DZ6 fk+4JIGvQnRdwuNzqeCX6soPglSwXSrfKIrRUSlRclJu1GVLz65980pnZwoxIqZp c6v3098CviOB5FbetAduWLWePKkWauMzEPoqN7n7/NU/zx2tzC6xGZzKqheMlOmD YZuHQJPeGOlmVETkcxCg9WLr1mB5hVuZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:57 2025 by rpki-client