$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: jp+10VfKg4m8AlwlXGDmBpCYvhjP8LT5VTJL5zUYBlc= Subject key identifier: 56:45:21:99:43:86:17:FC:C7:4E:1A:D8:F2:3B:0C:4E:30:94:2F:D2 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 0256 Signing time: Fri 25 Apr 2025 01:34:19 +0000 Manifest this update: Fri 25 Apr 2025 01:34:19 +0000 Manifest next update: Fri 02 May 2025 01:34:19 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: mZdk8EY4m1UFPQ48CrmQmf9cg3dkl8HoSSK7vLtaiko=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Apr 25 01:34:19 2025 GMT Not After : May 2 01:34:19 2025 GMT Subject: CN=680ae69b-2fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:2a:4f:2f:5e:f7:b4:91:9a:00:0a:4f:d0: 7b:cf:36:36:e1:f5:3c:5d:05:e6:a3:33:64:17:a1: 12:41:00:c1:db:96:42:a7:df:eb:3d:1c:7a:bc:b6: 53:e4:8b:8f:38:c6:ba:98:2e:2c:36:05:38:ff:ed: ba:9a:75:32:3e:cb:bd:18:c0:9f:73:8c:b6:ed:16: 25:ab:95:c0:03:38:11:99:4f:1e:aa:ef:cf:d2:c9: 0d:3d:ce:f1:2f:a1:4c:4a:ff:61:0e:c0:9a:fa:89: de:02:26:4a:b9:ea:62:d1:de:2a:90:c7:a5:ba:5b: 28:24:3b:70:6e:39:72:80:85:39:a7:38:4c:7f:54: 87:cb:95:b1:d0:1a:99:7e:56:72:31:2f:81:f7:f6: d5:c0:aa:ae:dc:d9:40:dd:c7:e9:82:f6:42:ac:0a: ca:8a:72:6b:27:3e:78:f3:7b:24:bf:84:ed:54:b6: 63:b8:f2:8d:e2:6a:f8:0d:2a:ee:0b:96:62:fe:08: 0e:b4:2d:dc:c5:46:aa:fe:ad:ef:fb:7f:d1:70:27: db:74:79:fd:84:66:5d:87:ff:97:a0:da:ea:7a:fd: 8c:0c:3d:a6:86:16:f0:09:f8:ac:32:b7:65:06:0c: 4f:2b:b0:ea:13:66:0e:c9:c3:18:bf:a0:a0:17:9a: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:21:99:43:86:17:FC:C7:4E:1A:D8:F2:3B:0C:4E:30:94:2F:D2 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f9:b4:bd:92:eb:c0:1c:fd:40:61:8d:b6:b6:43:36:ca:ad: 13:93:ce:d0:09:21:70:82:b1:d1:1d:55:56:05:7a:fa:e3:ab: 2d:10:c0:c0:f8:60:2f:b1:ee:4c:6e:08:4b:d6:b9:ad:1c:de: 32:22:91:36:24:8e:09:09:bf:71:1a:87:c3:6c:fb:4f:da:89: ac:40:f2:54:4b:c8:1a:1a:bc:28:dd:ee:70:8c:c0:f8:9e:b6: f9:12:83:63:21:e7:8a:ef:4d:db:0e:98:a8:0a:a7:d2:71:45: b5:45:4f:17:d0:7a:66:7c:b0:45:83:d1:a7:eb:5c:37:c9:95: 2c:d9:3c:cc:ae:1a:88:07:fe:35:8d:cf:67:05:54:f5:69:5d: 87:90:d9:3c:f2:d4:51:bd:4c:c7:04:80:ae:72:aa:85:13:8d: 32:27:92:ea:58:35:12:96:77:b6:ca:ae:5c:80:9d:0e:e3:1d: c1:33:dc:16:ff:1f:51:b2:4d:cf:9f:e6:f5:72:92:dc:ba:1b: fa:eb:ef:54:c5:0d:2f:ab:90:4e:5f:7e:d0:2d:63:ab:09:ff: 9e:c6:ec:88:9c:e7:44:4f:57:97:28:bf:99:6f:db:86:25:34: a9:e9:ad:fa:d0:88:81:30:ea:dc:89:a3:fe:53:32:37:26:69: aa:a8:e5:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUwNDI1MDEzNDE5WhcNMjUwNTAyMDEzNDE5WjAYMRYwFAYD VQQDEw02ODBhZTY5Yi0yZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOcqTy9e97SRmgAKT9B7zzY24fU8XQXmozNkF6ESQQDB25ZCp9/rPRx6vLZT 5IuPOMa6mC4sNgU4/+26mnUyPsu9GMCfc4y27RYlq5XAAzgRmU8equ/P0skNPc7x L6FMSv9hDsCa+oneAiZKuepi0d4qkMelulsoJDtwbjlygIU5pzhMf1SHy5Wx0BqZ flZyMS+B9/bVwKqu3NlA3cfpgvZCrArKinJrJz5483skv4TtVLZjuPKN4mr4DSru C5Zi/ggOtC3cxUaq/q3v+3/RcCfbdHn9hGZdh/+XoNrqev2MDD2mhhbwCfisMrdl BgxPK7DqE2YOycMYv6CgF5rBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZFIZlD hhf8x04a2PI7DE4wlC/SMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv+bS9kuvAHP1AYY22tkM2yq0Tk87QCSFwgrHRHVVWBXr646stEMDA +GAvse5MbghL1rmtHN4yIpE2JI4JCb9xGofDbPtP2omsQPJUS8gaGrwo3e5wjMD4 nrb5EoNjIeeK703bDpioCqfScUW1RU8X0HpmfLBFg9Gn61w3yZUs2TzMrhqIB/41 jc9nBVT1aV2HkNk88tRRvUzHBICucqqFE40yJ5LqWDUSlne2yq5cgJ0O4x3BM9wW /x9Rsk3Pn+b1cpLcuhv66+9UxQ0vq5BOX37QLWOrCf+exuyInOdET1eXKL+Zb9uG JTSp6a360IiBMOrciaP+UzI3JmmqqOVu -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:21 2025 by rpki-client