$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: F+tzSNhHuhZhcBvyi0cHM3Btu5P5mvL6hvjhji0Lalo= Subject key identifier: C8:8C:4C:A6:3B:54:87:0B:9B:EC:C0:DB:D7:2F:A1:AA:8D:86:3A:28 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0BF0 Signing time: Thu 24 Apr 2025 18:40:21 +0000 Manifest this update: Thu 24 Apr 2025 18:40:21 +0000 Manifest next update: Thu 01 May 2025 18:40:21 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: VZKr7np6z3W1MJrkFtOfpJLikytvCSje6iJYCICD2nw=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: E2q/ZEHSPXl1Ew87PC9tVYqM/dotHBquWrnE6mAYEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Apr 24 18:40:21 2025 GMT Not After : May 1 18:40:21 2025 GMT Subject: CN=680a8595-0ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:2f:91:86:2d:24:c6:70:c7:35:d5:7e:f4: 74:31:2c:8f:2f:8f:2e:0c:74:90:3d:fb:7d:b7:28: e5:0e:f3:ff:88:90:79:9d:d7:24:4a:a8:29:9e:bf: 5f:58:78:de:9a:e8:eb:e7:0b:23:48:61:be:55:d7: fd:c4:75:31:c6:74:2e:a9:c2:f0:50:cb:cc:58:69: 5d:30:fb:67:9d:0e:ba:37:f5:5f:bf:93:29:0b:b5: 00:d8:e6:08:d2:8d:b8:8a:07:71:43:09:f3:e2:93: ad:a3:43:15:30:b2:0b:6f:0b:14:86:26:1e:ae:ea: a4:63:3a:4b:f8:56:e2:28:d3:b2:c7:8f:90:e5:90: 76:4c:11:a1:be:87:91:a8:f1:fb:f5:2c:60:d6:79: ab:2e:15:56:8e:ce:52:25:91:d1:93:2b:10:b4:d0: 6d:c7:1a:db:e8:51:1f:f7:b6:52:16:dd:43:b8:af: 8f:a7:c8:1c:19:93:42:cc:c1:ec:65:c8:ce:f8:27: b6:e6:4c:bf:cb:70:3a:05:92:3b:dd:74:2b:67:9b: 48:ca:27:f2:1b:c9:bf:50:ff:b9:23:1f:e3:18:52: c4:4c:45:b3:96:f0:90:a2:63:27:05:ba:95:2c:56: 3c:c6:9b:69:9f:42:92:7a:37:0e:f9:d5:a9:b8:0b: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8C:4C:A6:3B:54:87:0B:9B:EC:C0:DB:D7:2F:A1:AA:8D:86:3A:28 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6b:10:63:96:9b:66:8a:c8:59:1f:93:13:d0:8b:1c:9a:99: 57:70:4b:40:4e:e8:82:1f:53:d9:a1:b2:8c:3f:38:19:92:5b: 2d:c9:1a:e6:9a:46:fb:01:5e:cf:57:ca:22:41:97:51:18:42: 4c:89:51:5b:50:5e:a8:67:f8:d7:9f:47:7c:5c:9a:af:0c:fb: 38:c1:fe:23:5e:0b:70:93:4f:f9:99:84:3c:07:db:f7:30:64: 9f:0d:1e:0f:01:2b:27:48:db:c5:4e:d1:3e:f1:8e:08:b0:ed: e7:2c:09:48:04:aa:61:63:4b:89:92:21:fc:82:0e:46:5e:15: 42:c3:fd:9a:26:91:11:9d:39:5c:83:bf:c3:8d:e0:44:7c:c8: eb:5b:b3:2e:3f:19:2d:21:cc:6f:22:11:2e:9e:42:49:5f:e1: c0:d7:d2:24:7c:39:d1:7f:a8:5e:75:b0:a7:ae:3f:5d:6f:d9: 3c:19:b7:38:d5:95:8c:0b:89:58:78:70:5b:13:0d:47:2f:8e: 38:ca:9b:a2:4a:5f:28:04:38:7e:47:90:0f:3a:e3:16:d5:7b: 71:e8:a4:b1:98:09:41:c4:35:2d:c0:dd:ce:dd:95:83:7d:a0: 92:a2:3a:e9:35:e4:cf:52:d3:d0:3f:f1:34:46:fa:64:98:7c: f6:ec:f6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUwNDI0MTg0MDIxWhcNMjUwNTAxMTg0MDIxWjAYMRYwFAYD VQQDEw02ODBhODU5NS0wYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+AvkYYtJMZwxzXVfvR0MSyPL48uDHSQPft9tyjlDvP/iJB5ndckSqgpnr9f WHjemujr5wsjSGG+Vdf9xHUxxnQuqcLwUMvMWGldMPtnnQ66N/Vfv5MpC7UA2OYI 0o24igdxQwnz4pOto0MVMLILbwsUhiYeruqkYzpL+FbiKNOyx4+Q5ZB2TBGhvoeR qPH79Sxg1nmrLhVWjs5SJZHRkysQtNBtxxrb6FEf97ZSFt1DuK+Pp8gcGZNCzMHs ZcjO+Ce25ky/y3A6BZI73XQrZ5tIyifyG8m/UP+5Ix/jGFLETEWzlvCQomMnBbqV LFY8xptpn0KSejcO+dWpuAtRXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiMTKY7 VIcLm+zA29cvoaqNhjooMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDaxBjlptmishZH5MT0IscmplXcEtATuiCH1PZobKMPzgZklstyRrm mkb7AV7PV8oiQZdRGEJMiVFbUF6oZ/jXn0d8XJqvDPs4wf4jXgtwk0/5mYQ8B9v3 MGSfDR4PASsnSNvFTtE+8Y4IsO3nLAlIBKphY0uJkiH8gg5GXhVCw/2aJpERnTlc g7/DjeBEfMjrW7MuPxktIcxvIhEunkJJX+HA19IkfDnRf6hedbCnrj9db9k8Gbc4 1ZWMC4lYeHBbEw1HL444ypuiSl8oBDh+R5APOuMW1Xtx6KSxmAlBxDUtwN3O3ZWD faCSojrpNeTPUtPQP/E0RvpkmHz27PYu -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:09 2025 by rpki-client