$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: pU7iX3AR92YNVevWTzlC9aH4XcsG6wP1Nbpn8XXZZ7g= Subject key identifier: 97:0B:D9:78:19:94:20:2F:69:1A:3A:27:88:C0:E4:CF:DE:A4:38:EB Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: 70 Signing time: Sat 31 May 2025 06:27:44 +0000 Manifest this update: Sat 31 May 2025 06:27:44 +0000 Manifest next update: Sat 07 Jun 2025 06:27:44 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: GLi6nC29xw2HESTZ+ZnSeHOE3K4+A6hFh7youL231Uk=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: May 31 06:27:44 2025 GMT Not After : Jun 7 06:27:44 2025 GMT Subject: CN=683aa160-55a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:f2:f4:08:28:7d:92:01:e3:f0:71:6a:84: 42:7c:b1:36:d9:cd:76:51:c0:97:09:80:01:5d:0e: b5:01:52:aa:a6:29:8b:0c:1e:a3:4b:0b:bb:d7:2a: a6:e2:00:c4:3e:18:f9:c2:82:5b:38:53:ed:8a:e0: c5:f0:90:af:5d:ce:77:14:ab:78:2e:2e:b8:30:8d: 32:58:70:63:61:6f:25:cc:1d:c7:7b:62:ce:77:56: d5:08:c5:38:01:61:38:47:25:8a:a9:2c:fd:54:5d: aa:b4:08:44:35:da:c4:d0:a2:91:5b:7f:54:44:06: df:33:47:7c:1e:55:97:50:9c:85:b9:ef:60:3a:14: 8d:bd:86:f3:6e:03:11:ae:09:fe:f4:2e:24:b6:0b: b3:ef:06:04:c1:c2:cf:1d:38:e8:e3:19:67:7f:f7: 96:6e:d4:65:cc:13:3a:d7:93:d0:1c:31:0a:d1:28: e8:e3:8f:f5:af:e7:aa:e5:9a:da:0f:cd:fa:d4:9f: 49:c5:55:2c:30:c3:38:c3:bc:a7:16:c1:52:e7:20: 39:af:f3:e9:43:b1:35:b9:d7:9f:32:64:0f:e7:80: 07:15:1b:67:bf:fa:68:8b:84:a5:09:85:78:50:3f: 37:f2:dd:f2:f0:f9:0b:df:24:a1:c5:2a:84:32:9f: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:D9:78:19:94:20:2F:69:1A:3A:27:88:C0:E4:CF:DE:A4:38:EB X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:de:7b:ba:59:ff:f8:e8:85:f6:21:3e:e2:e9:48:04:5e:e4: b8:f8:09:ae:5a:63:64:03:25:3e:0d:76:10:0c:61:d9:35:ec: 91:fb:23:11:5b:92:c8:b4:73:3c:22:b3:19:6c:b9:20:88:73: 30:6a:4a:b3:3d:d6:23:da:43:55:80:04:3f:7e:a2:dd:00:14: cc:cb:39:e0:56:f7:67:db:85:77:bf:d1:9b:a1:7d:8e:c0:92: 95:dc:ba:eb:59:f5:46:9d:e8:0a:2d:e1:d6:78:df:f3:27:82: ca:22:40:01:41:ca:df:e2:f4:df:19:ff:d3:06:4b:92:06:99: e2:ea:f1:f0:7d:61:4a:e8:60:4a:b2:05:fe:08:7c:83:9e:b9: 2d:00:83:13:03:2e:4e:29:db:dc:b2:b9:d4:b8:3f:34:ba:30: c2:a6:0f:9e:a7:3e:73:6c:51:a1:15:52:ca:54:fa:32:c0:24: 12:85:26:64:96:3f:8b:81:92:87:57:ae:a9:d3:ca:ac:70:7a: fb:3b:5e:d9:c1:bd:fd:68:cf:08:a3:3e:78:00:78:34:b0:a8: 21:31:e9:82:16:ea:e5:03:51:ed:f6:67:b1:4f:75:61:1f:ce: a2:a2:91:a7:55:7f:6d:25:e2:c5:69:5f:fe:d9:75:8b:43:db: 97:d0:a3:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNTA1MzEwNjI3NDRaFw0yNTA2MDcwNjI3NDRaMBgxFjAUBgNV BAMTDTY4M2FhMTYwLTU1YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLTPL0CCh9kgHj8HFqhEJ8sTbZzXZRwJcJgAFdDrUBUqqmKYsMHqNLC7vXKqbi AMQ+GPnCgls4U+2K4MXwkK9dzncUq3guLrgwjTJYcGNhbyXMHcd7Ys53VtUIxTgB YThHJYqpLP1UXaq0CEQ12sTQopFbf1REBt8zR3weVZdQnIW572A6FI29hvNuAxGu Cf70LiS2C7PvBgTBws8dOOjjGWd/95Zu1GXMEzrXk9AcMQrRKOjjj/Wv56rlmtoP zfrUn0nFVSwwwzjDvKcWwVLnIDmv8+lDsTW5158yZA/ngAcVG2e/+miLhKUJhXhQ Pzfy3fLw+QvfJKHFKoQyn+/ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwvZeBmU IC9pGjoniMDkz96kOOswHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Nzk0LzczREI3N0QwOTVCRTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJE SjVlbGhGUFpYemxpVnNmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfee7pZ//johfYhPuLpSARe5Lj4Ca5aY2QDJT4NdhAMYdk17JH7IxFb ksi0czwisxlsuSCIczBqSrM91iPaQ1WABD9+ot0AFMzLOeBW92fbhXe/0ZuhfY7A kpXcuutZ9Uad6Aot4dZ43/MngsoiQAFByt/i9N8Z/9MGS5IGmeLq8fB9YUroYEqy Bf4IfIOeuS0AgxMDLk4p29yyudS4PzS6MMKmD56nPnNsUaEVUspU+jLAJBKFJmSW P4uBkodXrqnTyqxwevs7XtnBvf1ozwijPngAeDSwqCEx6YIW6uUDUe32Z7FPdWEf zqKikadVf20l4sVpX/7ZdYtD25fQoyc= -----END CERTIFICATE-----Generated at Sat May 31 16:35:51 2025 by rpki-client