$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: KgBt51GHzSpllQqMiQuaEfITOJY/MUdPOUSLQyGRqAY= Subject key identifier: CB:0B:DD:40:94:EE:CB:EF:5A:18:D3:7C:CC:69:5A:2C:CB:FB:BD:43 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 0149 Signing time: Thu 17 Apr 2025 03:32:11 +0000 Manifest this update: Thu 17 Apr 2025 03:32:11 +0000 Manifest next update: Thu 24 Apr 2025 03:32:11 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: rMNKEqUWoieuugScFKsTIboQ7BXpybm7uBbNTUMsYIc=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Apr 17 03:32:11 2025 GMT Not After : Apr 24 03:32:11 2025 GMT Subject: CN=6800763b-b250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:22:ac:04:45:3e:04:03:65:67:b9:26:4f: cb:c2:91:a9:e1:d1:1a:e2:36:66:3b:3f:e3:46:c9: fe:02:23:ae:e0:52:20:93:0b:92:8e:15:19:12:e4: 3a:71:bb:47:04:a0:ea:9a:99:12:13:53:09:f9:36: 90:ef:f4:df:d9:08:4d:f1:3d:9d:c7:8b:20:44:f0: 2d:a6:f0:cf:7b:a9:a6:75:e8:d2:af:75:6a:72:d1: e6:63:ae:e0:d1:3c:81:82:2e:7d:ec:ad:89:d4:23: 02:09:8e:c5:37:8f:80:d3:8b:7b:02:0a:b1:61:f8: b7:4c:a9:4b:ea:f9:70:d3:c5:fa:01:81:53:b4:59: f5:31:dc:fd:db:6a:7c:98:83:11:47:7c:f4:4b:d9: c9:a7:53:0e:9e:07:9d:6e:9c:34:c0:00:eb:63:2f: 1f:44:06:6c:1e:49:96:d7:24:a7:ee:a8:d8:72:41: f2:0c:4b:9c:be:da:3e:2a:99:fc:c1:58:f5:48:fe: 75:8c:85:f0:1c:3d:9e:71:18:f8:ba:b6:96:49:a3: 2d:64:e7:ff:bb:e6:d2:78:82:56:76:53:9d:ee:60: ad:d6:67:75:90:88:91:40:91:2c:bb:b0:72:12:da: 86:fe:81:53:5e:6c:d0:2d:4d:b5:dd:88:17:f9:cf: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:DD:40:94:EE:CB:EF:5A:18:D3:7C:CC:69:5A:2C:CB:FB:BD:43 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:00:64:65:aa:96:86:de:3e:95:68:2e:62:f4:4b:7e:07:09: b0:2c:93:ad:54:c4:92:f6:d3:65:13:23:9a:b9:6b:31:1e:a5: 9e:f6:b6:88:f8:3a:59:3d:32:18:f4:5a:b8:9c:88:f7:46:69: 1b:51:d9:80:a0:c2:3f:e2:df:42:12:6f:0e:84:c8:91:18:8c: 1b:cb:6f:98:e1:9c:0a:cc:df:95:df:c0:46:7f:9a:0b:71:e1: 16:c7:e9:54:a8:89:08:77:d8:f0:1d:26:40:76:20:a2:f6:db: 4c:8f:aa:0a:2b:db:47:f7:b6:f8:a0:66:3e:2b:7e:61:4e:95: 4b:e0:ec:b1:c8:7b:4c:05:0d:1c:21:d4:1a:12:35:83:e6:17: f7:61:ea:ce:80:49:79:a2:59:23:3b:0b:cd:51:de:d7:34:10: c1:1b:f0:7c:58:0e:f6:33:df:23:42:00:ad:7b:b8:bf:95:a4: d5:52:d2:90:7d:23:fb:c9:ca:5b:57:69:76:ec:3f:ba:54:39: 91:52:91:4a:12:ae:21:23:b6:68:25:f8:b3:d4:d6:66:6c:36: 97:f7:36:df:32:4b:46:e6:d9:fb:65:4d:a4:36:83:da:54:a4: b5:65:1f:09:02:c0:d6:34:49:55:86:50:78:d4:23:52:46:a7: e2:29:96:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUwNDE3MDMzMjExWhcNMjUwNDI0MDMzMjExWjAYMRYwFAYD VQQDEw02ODAwNzYzYi1iMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0QirARFPgQDZWe5Jk/LwpGp4dEa4jZmOz/jRsn+AiOu4FIgkwuSjhUZEuQ6 cbtHBKDqmpkSE1MJ+TaQ7/Tf2QhN8T2dx4sgRPAtpvDPe6mmdejSr3VqctHmY67g 0TyBgi597K2J1CMCCY7FN4+A04t7AgqxYfi3TKlL6vlw08X6AYFTtFn1Mdz922p8 mIMRR3z0S9nJp1MOngedbpw0wADrYy8fRAZsHkmW1ySn7qjYckHyDEucvto+Kpn8 wVj1SP51jIXwHD2ecRj4uraWSaMtZOf/u+bSeIJWdlOd7mCt1md1kIiRQJEsu7By EtqG/oFTXmzQLU213YgX+c+0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsL3UCU 7svvWhjTfMxpWizL+71DMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzAGRlqpaG3j6VaC5i9Et+BwmwLJOtVMSS9tNlEyOauWsxHqWe9raI +DpZPTIY9Fq4nIj3RmkbUdmAoMI/4t9CEm8OhMiRGIwby2+Y4ZwKzN+V38BGf5oL ceEWx+lUqIkId9jwHSZAdiCi9ttMj6oKK9tH97b4oGY+K35hTpVL4OyxyHtMBQ0c IdQaEjWD5hf3YerOgEl5olkjOwvNUd7XNBDBG/B8WA72M98jQgCte7i/laTVUtKQ fSP7ycpbV2l27D+6VDmRUpFKEq4hI7ZoJfiz1NZmbDaX9zbfMktG5tn7ZU2kNoPa VKS1ZR8JAsDWNElVhlB41CNSRqfiKZYW -----END CERTIFICATE-----Generated at Sat Apr 19 04:47:13 2025 by rpki-client