$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: vLGUHDACQD7KXlX7TxbEsQcj+fE0/OGHGTjTs07nARo= Subject key identifier: 3A:70:8C:10:D5:2F:4B:27:DA:31:2C:AB:85:9C:ED:38:53:66:23:A6 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03B6 Signing time: Tue 15 Apr 2025 00:23:04 +0000 Manifest this update: Tue 15 Apr 2025 00:23:04 +0000 Manifest next update: Tue 22 Apr 2025 00:23:04 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: nsI5cuDaPTMdkd3/VSlhT1mi5hKYS3NFY2pWFacsegQ=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Apr 15 00:23:04 2025 GMT Not After : Apr 22 00:23:04 2025 GMT Subject: CN=67fda6e8-76c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:56:e5:03:3b:bc:b2:c6:de:b5:b1:47:a8: c0:1f:be:e0:0a:79:f9:9b:e8:32:21:9c:65:cd:b3: c5:cf:03:7b:87:91:36:ef:d4:26:14:ae:fa:79:75: f6:2f:65:bc:ee:eb:8e:63:c4:ad:5c:88:b1:ed:5c: 22:2a:f9:72:c4:90:84:e7:f0:27:95:e9:48:56:a4: f7:9c:56:50:e8:60:9f:68:84:54:04:0e:bc:92:38: 57:3f:d0:ee:47:c8:ec:2b:5b:59:5b:44:64:66:3f: 16:28:80:68:f7:f9:79:32:6e:f5:bc:94:9e:75:6d: 4d:4b:c3:8d:40:6b:01:fd:fe:1b:84:82:54:5a:fe: de:6b:cc:7c:d9:dd:63:ce:77:ba:fe:b0:0a:79:5d: 8c:d6:d0:76:5b:e1:33:bc:4c:0a:a7:db:c9:1d:ff: 32:18:84:0c:6e:7d:71:1f:98:26:32:6a:be:74:0e: f5:05:29:24:33:14:d2:d9:ef:c3:b0:e0:23:86:49: 88:34:2c:9e:ab:51:b0:12:1b:a3:40:06:23:5a:88: bb:80:d7:b6:0a:48:b9:47:95:f8:11:c3:bc:59:ee: 81:54:bd:a2:3f:6a:07:b9:36:18:fb:6a:86:c4:80: e7:cb:ca:db:5f:f8:a1:d8:29:e0:9b:4e:4b:a1:f7: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:8C:10:D5:2F:4B:27:DA:31:2C:AB:85:9C:ED:38:53:66:23:A6 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c2:85:52:df:79:45:da:b5:67:54:60:03:80:f2:64:88:92: 04:61:80:81:fc:9b:27:b3:c5:9d:8d:0a:d9:9e:48:5b:58:39: 17:b6:b9:aa:c6:4d:c6:5c:e9:b7:5d:da:99:c9:6d:21:be:ff: 7c:59:51:d4:04:36:5b:ff:98:e3:5e:1e:27:c2:dd:f7:98:23: b6:fe:a7:71:19:27:f8:9d:c6:3a:c6:01:9f:98:c5:0d:e5:48: 7b:77:bd:80:7a:7d:39:0b:00:bd:7e:ab:19:58:b4:c2:20:2a: 91:d4:21:39:4a:d4:f8:60:d9:b5:07:d8:6b:96:99:55:ac:ed: 14:08:a3:30:88:4c:fe:4d:aa:3d:30:fb:7a:25:80:1b:8a:49: c0:0b:27:d2:ae:03:c0:b0:5e:bf:a6:86:7a:2e:83:0e:75:56: 8d:70:dd:73:46:4e:68:03:1e:29:c5:30:27:70:05:97:56:5f: 4b:c8:fb:d6:dd:d4:97:d4:42:c6:2e:8d:c1:12:59:44:24:66: 3c:ee:cb:96:ca:e1:10:ac:97:36:92:a5:4a:30:72:42:d1:ed: 36:20:ce:50:7f:ee:ef:40:b1:b3:85:62:a6:4c:cc:18:96:84: 47:92:05:f8:1e:f2:ef:64:2c:eb:00:78:2e:fc:51:5a:61:2e: cd:29:10:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNDE1MDAyMzA0WhcNMjUwNDIyMDAyMzA0WjAYMRYwFAYD VQQDEw02N2ZkYTZlOC03NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLlW5QM7vLLG3rWxR6jAH77gCnn5m+gyIZxlzbPFzwN7h5E279QmFK76eXX2 L2W87uuOY8StXIix7VwiKvlyxJCE5/AnlelIVqT3nFZQ6GCfaIRUBA68kjhXP9Du R8jsK1tZW0RkZj8WKIBo9/l5Mm71vJSedW1NS8ONQGsB/f4bhIJUWv7ea8x82d1j zne6/rAKeV2M1tB2W+EzvEwKp9vJHf8yGIQMbn1xH5gmMmq+dA71BSkkMxTS2e/D sOAjhkmINCyeq1GwEhujQAYjWoi7gNe2Cki5R5X4EcO8We6BVL2iP2oHuTYY+2qG xIDny8rbX/ih2Cngm05Lofcy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpwjBDV L0sn2jEsq4Wc7ThTZiOmMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUwoVS33lF2rVnVGADgPJkiJIEYYCB/Jsns8WdjQrZnkhbWDkXtrmq xk3GXOm3XdqZyW0hvv98WVHUBDZb/5jjXh4nwt33mCO2/qdxGSf4ncY6xgGfmMUN 5Uh7d72Aen05CwC9fqsZWLTCICqR1CE5StT4YNm1B9hrlplVrO0UCKMwiEz+Tao9 MPt6JYAbiknACyfSrgPAsF6/poZ6LoMOdVaNcN1zRk5oAx4pxTAncAWXVl9LyPvW 3dSX1ELGLo3BEllEJGY87suWyuEQrJc2kqVKMHJC0e02IM5Qf+7vQLGzhWKmTMwY loRHkgX4HvLvZCzrAHgu/FFaYS7NKRBq -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:04 2025 by rpki-client