$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: 0vwY0JKxe2RcG0n4HWwU8T5Kbt3ZqVC4UFgbv/4GivI= Subject key identifier: 87:85:49:1F:5D:47:C1:9E:63:FD:30:B4:9A:10:09:E7:DD:35:04:46 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 012A Signing time: Sat 31 May 2025 04:15:23 +0000 Manifest this update: Sat 31 May 2025 04:15:22 +0000 Manifest next update: Sat 07 Jun 2025 04:15:22 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: p7Kx7M10slav1OBwIEG1l+ZCh7xYoHwR0C/FdnFqIMA=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: May 31 04:15:22 2025 GMT Not After : Jun 7 04:15:22 2025 GMT Subject: CN=683a825a-76ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:66:90:71:1a:88:eb:50:b5:c4:3b:8d:de: da:29:63:96:de:73:d6:90:1c:8b:a5:c3:50:af:7f: 4a:b4:11:6d:0b:db:7c:dd:0a:2b:b1:53:9d:9f:4b: 94:77:25:9b:b5:ef:89:e8:8b:07:d5:8c:75:c8:d4: b7:3f:91:14:01:dd:80:75:65:26:13:fa:27:47:d3: b1:f1:5a:4f:fc:0c:0e:6b:59:8c:7a:3f:9f:52:5f: 9f:43:be:0a:76:df:fd:b2:dd:05:c4:fb:7f:ce:c7: c4:59:41:da:3b:c1:19:ab:e4:12:4a:fa:d3:57:28: e7:b3:4a:54:68:b0:df:0a:74:fc:0b:27:36:df:26: 39:0d:3e:db:2c:2a:5a:78:67:1b:c8:db:97:3e:7e: e1:df:d1:1d:70:af:e8:83:ff:db:d7:85:bc:01:20: 9a:74:32:4f:22:ca:0a:13:8e:f7:9b:fa:29:5e:5d: 50:a5:64:8b:14:40:7b:f4:06:b0:41:ed:8f:7d:e0: e0:20:60:2b:b1:ed:17:ee:5e:b1:a3:15:a8:b8:b1: 10:e4:74:f8:88:13:e2:37:a1:70:d4:6e:15:0b:2b: de:45:30:dd:f6:c2:18:fd:59:ed:7a:94:0f:c2:13: b7:41:e8:4b:70:23:80:ed:26:9d:09:18:3e:18:c8: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:49:1F:5D:47:C1:9E:63:FD:30:B4:9A:10:09:E7:DD:35:04:46 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:0d:16:99:75:51:33:df:e8:dd:58:4a:63:59:bc:68:a7: a7:d7:c0:d2:6d:fd:48:29:82:1d:2a:f6:4f:bb:66:1d:8d:43: 05:91:8c:a7:5b:bc:ea:ed:89:2c:75:7d:83:fe:31:ae:1f:9d: c3:7c:a0:5b:25:42:42:93:a9:60:39:9d:29:69:14:53:87:04: 26:31:17:a9:df:47:e1:2e:89:40:7f:5c:28:a2:46:b3:b6:4b: 4b:16:b4:35:62:11:7b:1b:cd:aa:bd:55:5e:32:d9:e4:be:d8: 4b:32:28:7d:c0:1d:4b:5c:df:6a:a0:41:27:76:b0:ab:d2:5c: cf:dc:b2:89:48:6c:a3:dc:a5:a4:ae:1e:90:b6:ab:5f:f1:3f: e1:6d:31:cb:50:38:33:4f:0d:1c:86:20:a2:0b:8a:37:04:80: 51:cd:60:70:81:e4:ba:ee:99:9a:4a:b1:4e:83:1c:27:fd:c6: 4a:08:d9:37:76:46:51:0f:45:93:db:78:00:96:90:28:36:c2: 1e:48:43:60:cb:95:ba:d9:e8:91:d3:5c:c6:59:4f:f4:2c:90: d3:1e:48:cb:3b:34:61:1c:f4:18:2c:c5:ac:89:fb:5e:4c:fb: ed:a5:2f:bc:1c:fa:8d:58:1d:df:57:1b:22:8a:b1:68:b5:65: 3b:71:bd:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwNTMxMDQxNTIyWhcNMjUwNjA3MDQxNTIyWjAYMRYwFAYD VQQDEw02ODNhODI1YS03NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/RmkHEaiOtQtcQ7jd7aKWOW3nPWkByLpcNQr39KtBFtC9t83QorsVOdn0uU dyWbte+J6IsH1Yx1yNS3P5EUAd2AdWUmE/onR9Ox8VpP/AwOa1mMej+fUl+fQ74K dt/9st0FxPt/zsfEWUHaO8EZq+QSSvrTVyjns0pUaLDfCnT8Cyc23yY5DT7bLCpa eGcbyNuXPn7h39EdcK/og//b14W8ASCadDJPIsoKE473m/opXl1QpWSLFEB79Aaw Qe2PfeDgIGArse0X7l6xoxWouLEQ5HT4iBPiN6Fw1G4VCyveRTDd9sIY/VntepQP whO3QehLcCOA7SadCRg+GMjWJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeFSR9d R8GeY/0wtJoQCefdNQRGMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCyg0WmXVRM9/o3VhKY1m8aKen18DSbf1IKYIdKvZPu2YdjUMFkYyn W7zq7YksdX2D/jGuH53DfKBbJUJCk6lgOZ0paRRThwQmMRep30fhLolAf1wookaz tktLFrQ1YhF7G82qvVVeMtnkvthLMih9wB1LXN9qoEEndrCr0lzP3LKJSGyj3KWk rh6Qtqtf8T/hbTHLUDgzTw0chiCiC4o3BIBRzWBwgeS67pmaSrFOgxwn/cZKCNk3 dkZRD0WT23gAlpAoNsIeSENgy5W62eiR01zGWU/0LJDTHkjLOzRhHPQYLMWsifte TPvtpS+8HPqNWB3fVxsiirFotWU7cb36 -----END CERTIFICATE-----Generated at Sat May 31 17:23:38 2025 by rpki-client