$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: DSXvVd6ucEQ02ovCy26+OYqflpQTmNLeNfEUZDwCM+k= Subject key identifier: BC:0D:0E:4D:32:46:2E:7F:0B:90:B2:DB:E5:4C:33:25:9E:D1:DF:B4 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: C9 Signing time: Sun 27 Apr 2025 04:43:13 +0000 Manifest this update: Sun 27 Apr 2025 04:43:13 +0000 Manifest next update: Sun 04 May 2025 04:43:13 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: xfltWLmAzWyRlJQ+VHVbp2RF96US4YDVZHM3q9AfdqY=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Apr 27 04:43:13 2025 GMT Not After : May 4 04:43:13 2025 GMT Subject: CN=680db5e1-53c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:9f:97:2f:ed:7c:71:76:ed:10:02:95:06: 7c:51:a9:c6:11:19:55:80:bc:4b:14:58:93:46:cf: 49:26:36:4d:00:2d:b6:a0:88:0d:c7:cc:a6:93:6c: f0:7b:19:43:ac:85:4f:07:af:ab:e8:08:57:e5:2d: a7:c8:d2:52:08:fa:30:20:33:ef:a7:88:72:b0:04: 2e:1f:b5:dc:79:5a:e0:e5:38:f4:7a:d3:b1:44:64: 93:61:52:bd:86:98:ed:76:63:e7:05:80:aa:2d:39: c7:ab:a9:68:0c:5c:79:a9:cc:79:9c:42:45:45:31: a3:f2:51:c0:b9:ce:a4:a7:fa:1c:88:5a:2f:4e:ea: 8a:4f:2e:12:e4:48:73:e3:48:64:a4:52:0b:44:45: c7:9e:39:37:ec:b4:72:92:ec:19:08:b6:96:cf:41: 7b:4a:62:ed:62:83:bb:d9:7f:54:66:98:59:c9:d9: b7:b0:e0:a8:7e:92:75:a1:9d:48:5b:12:b1:8f:b6: 71:52:8b:b1:83:12:db:ae:85:80:97:ff:c1:c6:b2: 20:a1:ec:4f:8a:ef:2b:65:2e:3b:33:36:44:5a:d8: 7b:f2:d4:25:c2:fc:be:f6:48:d3:d2:b9:cf:1b:10: 35:d0:0f:9e:4c:11:e9:0a:60:cc:4c:93:ee:98:f7: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0D:0E:4D:32:46:2E:7F:0B:90:B2:DB:E5:4C:33:25:9E:D1:DF:B4 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bc:59:68:e8:60:0e:ea:80:32:89:1c:94:a3:73:43:67:61: d8:fd:ae:56:07:00:33:1f:83:ed:2d:04:68:a7:44:4f:a4:8a: 2e:11:d6:c7:00:5a:35:c7:de:12:dd:7f:36:ea:a6:f9:6e:f8: f5:e4:3f:c1:00:70:15:07:b1:32:1b:cf:c8:3d:bc:88:51:18: cd:2e:0a:c1:84:f5:2e:23:77:ad:15:91:ce:4c:d7:94:c7:cf: f1:d4:54:41:7e:3b:97:37:e4:28:52:80:c7:d3:9e:18:b0:cc: ee:8d:e5:fe:6e:4e:56:84:d4:0d:ad:3b:a1:a0:49:03:3a:74: 09:68:f9:3b:cf:a3:c3:62:f7:1c:d1:16:22:fe:29:de:b5:49: ca:c7:cf:e2:c7:c8:90:11:cb:81:1c:ac:71:1c:2d:a1:95:b6: 74:38:00:86:60:3d:4f:08:bf:f0:63:ba:5b:93:aa:04:8b:12: b7:fb:46:bd:b9:c5:ef:eb:2a:c0:a6:d3:ca:a7:ee:b8:2b:ea: db:27:af:c4:3c:4a:6b:85:92:54:cb:ee:da:52:fe:d3:b0:d8: fd:6c:f4:02:75:84:ab:93:be:2d:c4:f3:8c:c8:60:4d:22:52: 9d:fe:8f:99:51:e4:32:ce:df:e1:cb:9b:ed:57:2d:2c:db:f7: 52:fd:7b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwNDI3MDQ0MzEzWhcNMjUwNTA0MDQ0MzEzWjAYMRYwFAYD VQQDEw02ODBkYjVlMS01M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9Sfly/tfHF27RAClQZ8UanGERlVgLxLFFiTRs9JJjZNAC22oIgNx8ymk2zw exlDrIVPB6+r6AhX5S2nyNJSCPowIDPvp4hysAQuH7XceVrg5Tj0etOxRGSTYVK9 hpjtdmPnBYCqLTnHq6loDFx5qcx5nEJFRTGj8lHAuc6kp/ociFovTuqKTy4S5Ehz 40hkpFILREXHnjk37LRykuwZCLaWz0F7SmLtYoO72X9UZphZydm3sOCofpJ1oZ1I WxKxj7ZxUouxgxLbroWAl//BxrIgoexPiu8rZS47MzZEWth78tQlwvy+9kjT0rnP GxA10A+eTBHpCmDMTJPumPfG1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwNDk0y Ri5/C5Cy2+VMMyWe0d+0MB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vFlo6GAO6oAyiRyUo3NDZ2HY/a5WBwAzH4PtLQRop0RPpIouEdbH AFo1x94S3X826qb5bvj15D/BAHAVB7EyG8/IPbyIURjNLgrBhPUuI3etFZHOTNeU x8/x1FRBfjuXN+QoUoDH054YsMzujeX+bk5WhNQNrTuhoEkDOnQJaPk7z6PDYvcc 0RYi/inetUnKx8/ix8iQEcuBHKxxHC2hlbZ0OACGYD1PCL/wY7pbk6oEixK3+0a9 ucXv6yrAptPKp+64K+rbJ6/EPEprhZJUy+7aUv7TsNj9bPQCdYSrk74txPOMyGBN IlKd/o+ZUeQyzt/hy5vtVy0s2/dS/XtO -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net