$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: ouwjsZjQJb38QTa7xsr99gNG2cjikS5e6mZFvG7grkk= Subject key identifier: 2A:54:06:C6:CA:40:26:96:43:12:B6:C7:A6:75:07:72:2D:1B:F4:84 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 0798 Signing time: Thu 24 Apr 2025 21:05:39 +0000 Manifest this update: Thu 24 Apr 2025 21:05:38 +0000 Manifest next update: Thu 01 May 2025 21:05:38 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: CgyrWifT6a9mwyn53RLyoOcKyMfPs2cIexyMDTxQKKs=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Apr 24 21:05:38 2025 GMT Not After : May 1 21:05:38 2025 GMT Subject: CN=680aa7a3-d15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:d7:15:0d:0a:be:2e:e9:68:86:01:d3:09: 09:db:2f:f9:c8:77:b8:b0:e6:8e:a2:4a:e7:dc:a1: a8:5f:be:3a:0d:a9:3b:ee:d5:84:6f:ed:6a:fa:87: 02:eb:9b:50:99:86:c6:a4:32:87:a2:e1:e0:91:dd: b4:92:6e:1c:83:5a:9e:bb:6b:20:67:9a:30:14:d6: b8:07:ff:0a:d2:55:d1:8c:76:2c:ff:5b:01:70:96: ae:8d:fe:a9:cb:6d:3d:99:88:ef:46:a5:f4:24:26: c4:44:32:72:85:7a:d2:a7:30:f6:29:41:7a:a5:07: ab:17:71:e3:9b:8e:49:de:63:31:d0:94:99:d5:7f: 23:5c:77:2b:fb:3f:4c:0f:16:72:41:f4:9e:ed:db: a3:b0:f9:ea:4c:8b:75:d7:f5:09:a3:0b:22:da:0d: 2e:dc:3f:a1:48:11:07:0e:5a:57:c4:a0:dd:de:51: 13:e1:50:f0:22:24:0d:57:7f:22:cf:ba:15:83:f2: ea:dc:27:87:0a:53:f3:53:2b:60:75:9b:96:18:f7: 31:83:5f:56:0d:9a:12:74:99:86:2c:c1:e5:dc:ce: 66:cf:1a:8b:55:4a:a8:d3:83:ec:aa:5f:80:9c:14: 3a:ad:23:04:e6:12:98:5e:b4:ff:f8:9d:f5:52:74: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:54:06:C6:CA:40:26:96:43:12:B6:C7:A6:75:07:72:2D:1B:F4:84 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d3:e0:70:2d:23:e6:a5:6a:0f:77:d7:41:87:93:76:e5:58: 21:f1:52:81:9d:14:0b:34:89:f7:b8:b6:2b:9b:8b:7a:28:17: 5d:ee:50:96:93:1f:23:00:5e:5c:73:4b:ee:c9:c9:45:9b:b2: 53:db:1b:b0:ed:31:37:f9:c5:5d:9f:5a:dd:30:4b:9e:9f:9e: 9e:02:14:59:3d:f9:a2:db:1e:45:48:f6:53:7b:fa:2d:d0:bf: 6f:37:39:0c:9b:8a:17:8a:70:02:30:ab:0d:8c:57:c2:29:08: 5a:2e:29:5a:91:16:22:83:b1:7a:81:3d:fa:cb:03:b1:c1:ae: 35:73:6f:3a:16:88:db:e7:41:69:32:7c:0c:90:38:43:ff:59: 11:0b:f8:12:8d:8d:b2:fa:c5:19:2d:dc:6f:39:41:ba:78:75: 20:d9:a5:90:34:c3:65:c5:7d:8d:75:7e:40:a0:60:a5:8d:49: d6:83:3b:52:35:9e:c5:8e:77:59:0e:90:23:2d:0e:4d:b5:49: e8:5b:22:b3:14:56:36:23:40:05:61:7a:df:e7:96:d9:00:6a: 00:43:e9:ae:47:50:ad:a1:4a:7e:33:b8:69:3e:b2:23:71:bc: 9d:90:b6:0c:95:5a:30:fe:6b:18:55:9f:a6:26:fe:0c:00:44: f8:88:66:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUwNDI0MjEwNTM4WhcNMjUwNTAxMjEwNTM4WjAYMRYwFAYD VQQDEw02ODBhYTdhMy1kMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssjXFQ0Kvi7paIYB0wkJ2y/5yHe4sOaOokrn3KGoX746Dak77tWEb+1q+ocC 65tQmYbGpDKHouHgkd20km4cg1qeu2sgZ5owFNa4B/8K0lXRjHYs/1sBcJaujf6p y209mYjvRqX0JCbERDJyhXrSpzD2KUF6pQerF3Hjm45J3mMx0JSZ1X8jXHcr+z9M DxZyQfSe7dujsPnqTIt11/UJowsi2g0u3D+hSBEHDlpXxKDd3lET4VDwIiQNV38i z7oVg/Lq3CeHClPzUytgdZuWGPcxg19WDZoSdJmGLMHl3M5mzxqLVUqo04Psql+A nBQ6rSME5hKYXrT/+J31UnRiYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpUBsbK QCaWQxK2x6Z1B3ItG/SEMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe0+BwLSPmpWoPd9dBh5N25Vgh8VKBnRQLNIn3uLYrm4t6KBdd7lCW kx8jAF5cc0vuyclFm7JT2xuw7TE3+cVdn1rdMEuen56eAhRZPfmi2x5FSPZTe/ot 0L9vNzkMm4oXinACMKsNjFfCKQhaLilakRYig7F6gT36ywOxwa41c286Fojb50Fp MnwMkDhD/1kRC/gSjY2y+sUZLdxvOUG6eHUg2aWQNMNlxX2NdX5AoGCljUnWgztS NZ7FjndZDpAjLQ5NtUnoWyKzFFY2I0AFYXrf55bZAGoAQ+muR1CtoUp+M7hpPrIj cbydkLYMlVow/msYVZ+mJv4MAET4iGaf -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:57 2025 by rpki-client