$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: I1ne3tkaP2FKQ/DmgeYnez6Oc7DqG+F+if+QrevcBDc= Subject key identifier: 66:23:F0:02:6C:E4:FD:A8:6D:91:19:92:E0:FB:30:83:4F:25:3C:17 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 5D Signing time: Thu 13 Mar 2025 05:09:09 +0000 Manifest this update: Thu 13 Mar 2025 05:09:09 +0000 Manifest next update: Thu 20 Mar 2025 05:09:09 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: VDSOYEd9+m81lF8I44+95VQOReMHZCOoWPNIv0a9pAc=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5 Validity Not Before: Mar 13 05:09:09 2025 GMT Not After : Mar 20 05:09:09 2025 GMT Subject: CN=67d26875-e745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:72:b3:26:25:e5:54:89:de:e3:a8:a9:48: 05:f7:d9:3d:b3:a9:00:62:d4:16:7a:e2:41:08:a1: 26:28:91:99:cb:4b:d9:e6:63:55:37:bc:d7:9f:cb: ee:60:2b:a6:0f:2f:cf:29:c3:b0:22:5e:a5:d1:06: 93:1e:82:10:58:97:ff:d8:c9:aa:61:e5:99:fe:ee: 8f:85:ad:38:1d:2f:5a:0d:d9:f4:8b:7d:f6:2b:26: c3:20:a4:b7:5d:17:e0:66:39:b9:2c:2c:ba:f4:cc: 0f:a2:90:34:58:53:f8:6e:35:05:1b:d7:99:89:88: 52:e8:df:56:fc:65:2c:ed:19:48:87:e1:a9:8e:22: 3c:16:87:e2:82:9d:46:c8:4c:85:6d:78:29:2e:bf: 07:e1:c8:ee:ed:75:23:20:cc:ff:49:26:23:2f:5d: 5b:ea:f7:52:eb:62:1e:bb:4c:51:a8:39:2b:dd:a0: ac:fa:3d:9e:17:14:24:93:19:23:73:26:cd:c7:6a: 9d:56:04:5f:31:18:b7:ae:f1:64:78:3d:ef:cd:aa: d7:c3:f9:16:42:84:b9:8b:9b:ed:e6:08:d8:26:b9: b0:0d:7b:dd:92:18:86:43:f8:05:91:91:4c:9f:f6: 86:f3:82:c1:61:8e:48:f5:01:0b:71:95:1c:e7:94: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:F0:02:6C:E4:FD:A8:6D:91:19:92:E0:FB:30:83:4F:25:3C:17 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4e:41:d3:39:eb:04:0f:1f:fd:be:37:09:29:94:0f:9a:ff: 69:30:b0:a4:c7:55:73:88:c9:50:a6:a1:6e:1f:97:68:b1:ad: 30:41:dd:41:90:53:de:77:ac:9c:99:a6:d4:aa:c2:bc:eb:1a: d9:ae:98:6d:f7:c9:0a:b8:5f:3c:d6:21:1c:87:10:29:cf:d8: ec:9d:05:c7:d7:eb:cf:59:7c:89:3c:c2:82:81:25:b2:d8:eb: b7:69:13:87:33:80:36:97:19:39:51:14:8d:b0:79:9d:9f:d7: 9a:a2:65:36:4c:07:17:d8:6c:65:88:3a:37:63:27:5b:f5:19: 42:f5:80:40:5f:aa:2d:54:43:dc:bd:a0:40:84:f8:ee:51:ed: 69:c2:51:d8:b2:d2:82:92:1d:f2:ed:a8:a0:c9:91:43:22:20: e6:a3:99:5a:94:de:b4:de:a7:05:53:0a:7c:2e:2f:36:75:53: db:94:3f:c2:b8:e6:cf:7f:5b:46:77:f7:20:61:98:95:ac:d1: 9a:47:fe:e8:61:43:25:7b:b4:0d:c0:dc:d0:45:9c:ce:d5:cc: 3b:18:a4:73:1d:55:85:6c:d3:b3:f5:b5:16:4d:fc:58:3f:92: 89:3b:41:88:70:6d:0d:4a:09:10:c2:07:ed:0a:0f:b1:3c:7c: b2:4d:05:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoQzg0OUMxRjZFQjhEMUIwQjM3OTRCMDYwQzQ5QzVBOUJE NTNBRDRDOTAeFw0yNTAzMTMwNTA5MDlaFw0yNTAzMjAwNTA5MDlaMBgxFjAUBgNV BAMTDTY3ZDI2ODc1LWU3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDALHKzJiXlVIne46ipSAX32T2zqQBi1BZ64kEIoSYokZnLS9nmY1U3vNefy+5g K6YPL88pw7AiXqXRBpMeghBYl//Yyaph5Zn+7o+FrTgdL1oN2fSLffYrJsMgpLdd F+BmObksLLr0zA+ikDRYU/huNQUb15mJiFLo31b8ZSztGUiH4amOIjwWh+KCnUbI TIVteCkuvwfhyO7tdSMgzP9JJiMvXVvq91LrYh67TFGoOSvdoKz6PZ4XFCSTGSNz Js3Hap1WBF8xGLeu8WR4Pe/NqtfD+RZChLmLm+3mCNgmubANe92SGIZD+AWRkUyf 9obzgsFhjkj1AQtxlRznlMRtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZiPwAmzk /ahtkRmS4Pswg08lPBcwHwYDVR0jBBgwFoAUyEnB9uuNGws3lLBgxJxam9U61Mkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0E3MzM3QzZBNzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFN ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveUVuQjl1dU5Hd3MzbExCZ3hKeGFtOVU2MU1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0E3MzM3QzZBNzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dz M2xMQmd4SnhhbTlVNjFNay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1OQdM56wQPH/2+NwkplA+a/2kwsKTHVXOIyVCmoW4fl2ixrTBB3UGQ U953rJyZptSqwrzrGtmumG33yQq4XzzWIRyHECnP2OydBcfX689ZfIk8woKBJbLY 67dpE4czgDaXGTlRFI2weZ2f15qiZTZMBxfYbGWIOjdjJ1v1GUL1gEBfqi1UQ9y9 oECE+O5R7WnCUdiy0oKSHfLtqKDJkUMiIOajmVqU3rTepwVTCnwuLzZ1U9uUP8K4 5s9/W0Z39yBhmJWs0ZpH/uhhQyV7tA3A3NBFnM7VzDsYpHMdVYVs07P1tRZN/Fg/ kok7QYhwbQ1KCRDCB+0KD7E8fLJNBRU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:04 2025 by rpki-client