$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: zV8ArYkmnI82NbaZtY/DTrcA+LzZomufNE3upkr1slo= Subject key identifier: AA:85:30:79:7F:B4:9F:25:51:4B:8B:FF:6E:2D:E4:5C:77:0D:58:FE Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 03DD Signing time: Mon 21 Apr 2025 00:10:42 +0000 Manifest this update: Mon 21 Apr 2025 00:10:42 +0000 Manifest next update: Mon 28 Apr 2025 00:10:42 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: H7Lkgx94aWVWj4FD9lGPk4LHfi2oJU6O2Rh+LaYYzsI=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: j9zT2tbgYHNW+zQe8fJ7BxqX2WRK2n0Np1/48KzCevY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456, serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: Apr 21 00:10:42 2025 GMT Not After : Apr 28 00:10:42 2025 GMT Subject: CN=68058d02-fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:f3:e3:b6:1f:22:56:78:c3:b3:5f:dc:71: 42:e2:56:6b:ca:70:24:94:c4:14:1e:4e:7f:f7:bf: 87:f6:27:61:5f:94:2a:2d:d7:65:05:c9:98:19:49: f3:2a:0d:97:88:c5:c4:c9:d1:00:48:10:9e:3c:36: 1b:b8:4b:cd:6d:4d:14:38:c9:e7:86:dd:fc:a5:5f: 4c:44:9e:cd:76:9a:10:b5:c0:ef:2e:d0:d6:3c:84: b0:5f:3f:ff:a4:83:a3:25:29:07:30:52:49:a0:8d: a5:7c:f5:9b:d8:3e:a0:ee:d7:2d:b3:5d:22:e4:50: 5a:92:44:67:e0:cf:4e:db:5a:15:1c:bb:b7:f2:70: c8:88:5a:3c:4c:74:96:44:da:64:1a:82:5f:13:8e: 9b:f7:93:12:f3:37:05:70:7c:50:67:38:46:0f:cb: 39:36:bc:49:56:b8:6b:b2:bd:36:02:13:a6:0b:8e: 2d:66:c5:86:30:b4:db:a2:5a:51:1a:e2:dc:d6:c5: 37:66:4b:ce:8a:02:e5:0a:3e:34:2c:3d:a5:81:e8: 79:ab:63:7a:6c:71:e0:37:0c:c5:d7:21:13:00:a3: e8:43:e4:a7:11:40:b7:0d:d3:bf:bb:54:cb:37:1b: 51:a6:db:4a:d2:a5:51:4f:76:59:22:b2:23:82:62: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:85:30:79:7F:B4:9F:25:51:4B:8B:FF:6E:2D:E4:5C:77:0D:58:FE X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:28:9f:ff:4b:6f:3d:d0:02:a6:2a:eb:86:0f:dd:5d:4f:fa: 53:fd:d7:96:e5:87:cc:7c:93:ae:b1:02:43:71:f2:90:5d:e5: 07:5f:af:eb:67:86:70:cf:b3:e9:66:57:fb:c3:a7:3e:64:e3: 3f:3f:46:cf:e6:2a:ea:e9:5a:ac:bd:bd:cc:1c:2a:fc:a0:26: e0:a5:1f:c5:5e:4f:45:89:5f:d9:82:03:50:20:41:dd:14:a3: be:f2:a8:0e:78:fe:b2:0e:ea:72:9e:45:4a:d6:fe:45:2d:4c: 75:71:43:b6:93:dc:b7:cc:c0:c8:4d:02:f5:0c:d3:c1:80:7a: 82:90:f6:d0:43:9f:c9:de:9d:c3:4b:14:19:ae:6f:2e:f9:8d: e7:43:d9:86:88:3b:5d:da:2e:f2:8a:d4:36:b0:1f:85:17:bb: 19:0f:97:63:d2:5a:55:dc:d9:4b:10:ed:c7:7f:df:a8:4f:72: f2:18:f5:95:cd:20:3a:62:ed:60:40:42:e6:f4:d2:33:55:b7: 1b:4f:1d:20:c5:93:5b:e5:64:c1:f1:dd:13:4d:9d:f9:17:ca: 6f:1e:f1:50:f8:08:27:e6:d9:0d:0f:87:cc:df:36:7e:69:71: a4:7a:7a:c5:4c:06:a7:15:70:a8:71:14:32:63:c3:3b:e2:78: 87:77:bd:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjUwNDIxMDAxMDQyWhcNMjUwNDI4MDAxMDQyWjAYMRYwFAYD VQQDEw02ODA1OGQwMi1mZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Tz47YfIlZ4w7Nf3HFC4lZrynAklMQUHk5/97+H9idhX5QqLddlBcmYGUnz Kg2XiMXEydEASBCePDYbuEvNbU0UOMnnht38pV9MRJ7NdpoQtcDvLtDWPISwXz// pIOjJSkHMFJJoI2lfPWb2D6g7tcts10i5FBakkRn4M9O21oVHLu38nDIiFo8THSW RNpkGoJfE46b95MS8zcFcHxQZzhGD8s5NrxJVrhrsr02AhOmC44tZsWGMLTbolpR GuLc1sU3ZkvOigLlCj40LD2lgeh5q2N6bHHgNwzF1yETAKPoQ+SnEUC3DdO/u1TL NxtRpttK0qVRT3ZZIrIjgmL20wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqFMHl/ tJ8lUUuL/24t5Fx3DVj+MB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfKJ//S2890AKmKuuGD91dT/pT/deW5YfMfJOusQJDcfKQXeUHX6/r Z4Zwz7PpZlf7w6c+ZOM/P0bP5irq6Vqsvb3MHCr8oCbgpR/FXk9FiV/ZggNQIEHd FKO+8qgOeP6yDupynkVK1v5FLUx1cUO2k9y3zMDITQL1DNPBgHqCkPbQQ5/J3p3D SxQZrm8u+Y3nQ9mGiDtd2i7yitQ2sB+FF7sZD5dj0lpV3NlLEO3Hf9+oT3LyGPWV zSA6Yu1gQELm9NIzVbcbTx0gxZNb5WTB8d0TTZ35F8pvHvFQ+Agn5tkND4fM3zZ+ aXGkenrFTAanFXCocRQyY8M74niHd720 -----END CERTIFICATE-----Generated at Tue Apr 22 00:03:01 2025 by rpki-client