$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: ljeJo4IvuAX85+Ai/99/csA1LZkPq9hJVcGdyVlTuzQ= Subject key identifier: 3A:D5:CC:E6:F9:4E:04:E2:81:89:9A:6D:CF:92:DF:B2:85:55:8D:D1 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0C08 Signing time: Thu 12 Jun 2025 18:32:28 +0000 Manifest this update: Thu 12 Jun 2025 18:32:27 +0000 Manifest next update: Thu 19 Jun 2025 18:32:27 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: xV22D4rMAaC7CGKTUBGWwZx3o9TJC3xLVExlxXDu038=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: E2q/ZEHSPXl1Ew87PC9tVYqM/dotHBquWrnE6mAYEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Jun 12 18:32:27 2025 GMT Not After : Jun 19 18:32:27 2025 GMT Subject: CN=684b1d3c-f8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:8e:2b:27:3d:eb:58:8c:38:ef:14:e3:8a: b9:08:62:22:26:dc:7b:39:22:77:90:60:b4:ec:94: 17:ba:fe:5f:92:5a:1b:67:32:c9:53:ac:84:fd:84: 19:5a:e3:f7:94:19:d8:7a:43:73:ac:e5:1f:c8:60: a2:3a:20:2b:61:b4:e5:9b:76:a1:00:6a:8a:73:48: c5:30:be:4f:bb:65:50:0c:f9:9a:52:70:b4:f8:30: 5d:63:36:28:a0:2d:cd:71:45:6e:39:07:50:51:73: ef:ae:a0:f7:fd:43:fe:9e:ef:7c:f9:ac:24:c5:44: 5e:dc:f5:ad:26:4e:69:c1:01:bd:bd:05:9c:94:54: 06:0e:df:b3:7d:4b:b9:39:31:4d:0e:72:a4:b9:61: a0:56:78:21:4a:e2:00:20:d5:37:51:a0:8f:d4:a1: d9:87:04:b3:56:a5:b6:1e:2c:8b:a8:88:fb:2f:8f: f7:75:f4:e7:61:93:c9:19:06:4f:f3:f3:68:ee:4b: de:a9:10:91:19:5f:7d:aa:16:d2:ae:23:eb:0e:1c: b5:d1:3a:c3:78:ea:15:76:9e:f2:0d:de:22:b6:16: 4f:bc:29:30:e7:7d:e6:ab:82:9c:32:24:f8:b5:07: 09:f2:16:4f:fe:c2:12:09:af:05:ff:e5:03:8e:cf: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D5:CC:E6:F9:4E:04:E2:81:89:9A:6D:CF:92:DF:B2:85:55:8D:D1 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:76:51:89:fc:a3:88:34:1e:36:8b:e5:51:72:aa:d3:7e:ea: e4:74:71:0f:40:7d:19:60:59:92:14:1a:1f:b5:e7:3e:54:cb: 93:20:d8:3f:a6:47:48:1a:d6:f8:52:5f:86:6f:24:b0:d3:bc: db:1e:0d:d0:ef:c1:27:ff:40:b8:fd:80:ca:4a:03:90:3e:07: 30:fc:49:12:dd:90:af:92:c6:9b:8d:5f:27:0b:ff:59:e2:2f: ec:dc:58:5a:10:ed:71:2e:a4:37:6e:73:e3:c7:f1:de:d7:93: f0:57:ac:d0:c2:13:52:83:51:7b:d1:fb:7b:bc:d2:15:25:d9: 8d:c9:30:ab:84:b6:ac:02:4d:e7:7c:71:08:70:ac:fc:9c:7d: 88:3c:c5:4c:a5:88:dc:18:43:e2:1a:c8:23:a9:07:54:38:77: 27:cf:3c:40:d4:81:96:6a:c2:a5:41:32:fd:85:b5:fa:b1:d0: 76:bc:f4:5d:ac:7e:c9:b9:98:65:09:24:e1:8a:cc:9b:5e:da: ae:f5:5d:b0:53:48:44:dc:9f:a6:d1:93:56:6d:68:db:c0:9e: 11:41:90:3e:39:52:23:24:98:60:09:8a:41:23:d3:f1:26:b0: e5:41:b7:b3:9c:f4:a8:85:66:55:d0:22:7f:b9:b8:e7:09:c8: 7a:35:5b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUwNjEyMTgzMjI3WhcNMjUwNjE5MTgzMjI3WjAYMRYwFAYD VQQDEw02ODRiMWQzYy1mOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCWOKyc961iMOO8U44q5CGIiJtx7OSJ3kGC07JQXuv5fklobZzLJU6yE/YQZ WuP3lBnYekNzrOUfyGCiOiArYbTlm3ahAGqKc0jFML5Pu2VQDPmaUnC0+DBdYzYo oC3NcUVuOQdQUXPvrqD3/UP+nu98+awkxURe3PWtJk5pwQG9vQWclFQGDt+zfUu5 OTFNDnKkuWGgVnghSuIAINU3UaCP1KHZhwSzVqW2HiyLqIj7L4/3dfTnYZPJGQZP 8/No7kveqRCRGV99qhbSriPrDhy10TrDeOoVdp7yDd4ithZPvCkw533mq4KcMiT4 tQcJ8hZP/sISCa8F/+UDjs+ApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrVzOb5 TgTigYmabc+S37KFVY3RMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYdlGJ/KOINB42i+VRcqrTfurkdHEPQH0ZYFmSFBoftec+VMuTINg/ pkdIGtb4Ul+GbySw07zbHg3Q78En/0C4/YDKSgOQPgcw/EkS3ZCvksabjV8nC/9Z 4i/s3FhaEO1xLqQ3bnPjx/He15PwV6zQwhNSg1F70ft7vNIVJdmNyTCrhLasAk3n fHEIcKz8nH2IPMVMpYjcGEPiGsgjqQdUOHcnzzxA1IGWasKlQTL9hbX6sdB2vPRd rH7JuZhlCSThisybXtqu9V2wU0hE3J+m0ZNWbWjbwJ4RQZA+OVIjJJhgCYpBI9Px JrDlQbeznPSohWZV0CJ/ubjnCch6NVsk -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:01 2025 by rpki-client