$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: MtreTrDW4tL/Y3tjXm6Jd9xrRrLzgAWj9+Vud2burjw= Subject key identifier: 9C:B2:CA:B8:29:28:3A:1F:75:F9:5A:52:46:25:6A:34:A2:7F:37:47 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D27 Signing time: Fri 04 Apr 2025 18:08:56 +0000 Manifest this update: Fri 04 Apr 2025 18:08:56 +0000 Manifest next update: Fri 11 Apr 2025 18:08:56 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: OKvQluZVQMujDOA/5fHZlAhzk9NX+lydIptCiYCkd/8=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C Validity Not Before: Apr 4 18:08:56 2025 GMT Not After : Apr 11 18:08:56 2025 GMT Subject: CN=67f02038-a7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:b1:a3:53:e3:95:d6:e2:f4:2a:6b:71:bf: 06:56:7b:cb:4d:78:ea:57:2e:dd:58:83:4a:43:0f: 0e:4f:4e:90:09:4c:32:ae:f3:75:92:7a:d0:a1:bf: 34:aa:5b:e3:c5:5a:32:02:26:d6:89:ec:7f:9b:94: 36:20:cb:25:a1:bd:e7:52:15:36:5a:36:e2:9d:9d: bc:79:78:49:ea:2c:ad:d7:39:87:04:6a:94:2a:8f: 31:30:78:36:74:d3:19:3c:1d:e1:32:2d:da:7f:9e: 47:26:b2:06:0d:87:70:b7:97:55:56:72:cf:ce:bf: ab:7b:5a:46:04:35:a5:b9:34:7b:76:4d:88:16:a9: bf:dd:46:e6:78:a7:29:b5:eb:83:2d:e9:21:ee:bb: 1c:85:94:5c:db:fe:ef:11:5e:c8:5d:85:b2:6b:e9: 38:ba:b4:56:4f:e5:ba:ac:92:6b:aa:0b:2d:e9:9e: 19:7c:16:73:58:8e:93:94:55:3f:72:ff:bf:6a:b8: 1e:50:8c:6e:6d:36:a4:e6:b6:64:b1:c2:ae:7b:e7: 10:94:28:9c:6e:07:c3:d6:44:51:4f:3f:22:18:f7: d8:03:f2:9b:0e:79:26:12:46:74:75:91:c6:4f:5a: f5:b9:97:38:c7:5b:d6:a8:b3:04:f2:79:43:2f:60: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B2:CA:B8:29:28:3A:1F:75:F9:5A:52:46:25:6A:34:A2:7F:37:47 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1a:c1:ed:73:99:7b:97:d4:bf:41:e1:6b:ad:d2:5f:82:c8: 41:06:e9:b0:dc:01:55:17:5a:e5:8f:1d:b6:43:e8:37:ef:6f: 99:ed:69:ba:0e:a0:f8:a2:75:fa:23:a6:aa:f4:00:75:b8:06: 50:2c:00:c4:91:97:88:60:56:7f:b4:34:c6:5d:5b:b6:4e:53: 91:bb:b7:0f:b6:4e:e0:01:2d:c7:57:0d:9d:e3:45:99:07:50: 39:da:41:c5:45:19:49:4c:0b:1a:e5:09:60:00:0a:3a:67:8c: 74:09:74:99:f7:bc:a6:e2:b7:ad:75:e2:84:e0:8f:94:1e:6a: 77:45:cf:00:74:dd:1c:38:fa:54:33:6a:75:e9:fe:66:89:8b: b8:f1:23:f5:22:9a:00:96:c2:e5:86:a4:85:a4:f4:54:8c:9e: 50:3c:51:7b:6c:50:46:96:59:a0:79:e7:4f:73:e7:ea:b8:05: c3:33:c4:d3:84:54:fe:5d:66:33:0b:ef:e7:55:06:74:fe:49: 1d:06:b4:e0:8e:d7:2e:bf:f9:b2:87:cb:bf:df:3a:94:58:ee: 2a:fb:ed:33:22:6a:2d:a9:83:f6:38:63:d3:a1:2a:e9:d3:a9: 2a:41:50:ef:1d:83:bb:e8:c8:3e:67:d4:c8:c8:ba:37:76:f2: 64:bf:78:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwNDA0MTgwODU2WhcNMjUwNDExMTgwODU2WjAYMRYwFAYD VQQDEw02N2YwMjAzOC1hN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUqxo1Pjldbi9Cprcb8GVnvLTXjqVy7dWINKQw8OT06QCUwyrvN1knrQob80 qlvjxVoyAibWiex/m5Q2IMslob3nUhU2WjbinZ28eXhJ6iyt1zmHBGqUKo8xMHg2 dNMZPB3hMi3af55HJrIGDYdwt5dVVnLPzr+re1pGBDWluTR7dk2IFqm/3UbmeKcp teuDLekh7rschZRc2/7vEV7IXYWya+k4urRWT+W6rJJrqgst6Z4ZfBZzWI6TlFU/ cv+/argeUIxubTak5rZkscKue+cQlCicbgfD1kRRTz8iGPfYA/KbDnkmEkZ0dZHG T1r1uZc4x1vWqLME8nlDL2D7oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyyyrgp KDofdflaUkYlajSifzdHMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaGsHtc5l7l9S/QeFrrdJfgshBBumw3AFVF1rljx22Q+g372+Z7Wm6 DqD4onX6I6aq9AB1uAZQLADEkZeIYFZ/tDTGXVu2TlORu7cPtk7gAS3HVw2d40WZ B1A52kHFRRlJTAsa5QlgAAo6Z4x0CXSZ97ym4retdeKE4I+UHmp3Rc8AdN0cOPpU M2p16f5miYu48SP1IpoAlsLlhqSFpPRUjJ5QPFF7bFBGllmgeedPc+fquAXDM8TT hFT+XWYzC+/nVQZ0/kkdBrTgjtcuv/myh8u/3zqUWO4q++0zImotqYP2OGPToSrp 06kqQVDvHYO76Mg+Z9TIyLo3dvJkv3jm -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:56 2025 by rpki-client