$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: jcNOVxawdTJeZ38I3xlmU/FSYyhP2MbiawJ9clPgVoE= Subject key identifier: 26:42:AD:44:DF:DF:12:23:5C:7E:21:CC:76:59:C3:4F:60:DC:FF:5D Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 17 Signing time: Fri 25 Apr 2025 07:00:41 +0000 Manifest this update: Fri 25 Apr 2025 07:00:40 +0000 Manifest next update: Fri 02 May 2025 07:00:40 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: XEWiM9MpeQt4tpmlURfBzAGpHfi3L1YPNX8Lhw/6dNU=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Apr 25 07:00:40 2025 GMT Not After : May 2 07:00:40 2025 GMT Subject: CN=680b3318-9fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:3f:74:84:9b:d5:30:f8:d1:17:b3:11:cc: ac:2d:3b:68:8e:e6:0c:26:04:a5:57:a0:00:66:f0: 79:36:b0:0f:6b:06:0e:ca:bb:ec:26:9f:eb:52:96: 36:66:ff:d4:29:17:5c:48:e7:ad:54:04:ed:0c:98: c0:38:01:66:43:21:1f:81:8f:22:7f:31:70:6e:38: 22:36:b4:72:6c:81:e5:18:d2:74:4a:94:5f:13:1a: 21:ba:05:58:5d:ec:58:44:1b:7b:2e:1e:08:56:a8: f8:6e:0d:4a:b4:df:45:a4:c3:28:a2:3c:91:80:c9: 79:1e:53:b4:fc:1c:d4:2e:7e:84:68:68:88:14:71: bb:dd:8a:79:2b:ee:38:5a:d4:a0:bc:6f:fd:b2:c5: b0:34:c2:35:c5:f6:5b:ab:a3:19:68:55:58:08:5b: a0:00:e2:fd:f3:10:6a:30:da:a8:c7:17:d2:46:9e: f4:9f:c0:c4:9e:a6:9c:f6:2f:42:1c:dd:0e:b7:88: 54:0c:e0:7f:47:33:13:3e:43:c8:94:50:f0:5a:41: df:4d:15:eb:66:68:6e:ee:c4:a7:79:ee:01:5b:b0: ee:ae:4b:e6:54:ad:89:35:f9:0f:46:da:7b:a6:cf: ca:96:4d:bf:74:04:f1:2e:bf:24:62:14:e4:f3:07: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:AD:44:DF:DF:12:23:5C:7E:21:CC:76:59:C3:4F:60:DC:FF:5D X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:18:d4:ce:59:f0:7d:52:a6:fa:63:5c:4f:5b:c2:84:a9:49: ba:e4:de:b5:11:90:9e:95:5c:aa:e3:c5:ef:82:d8:93:34:39: 51:2e:b2:f6:cf:fd:fb:6b:55:10:f8:d2:6c:24:94:89:16:6c: 6a:10:c3:72:c1:5c:f5:03:1b:c9:c7:84:66:b9:23:8e:4f:0a: a8:87:76:c7:9e:5e:d2:ac:79:c6:fc:ed:54:c7:2a:2c:43:5a: 7b:bf:35:83:91:ad:35:6a:4b:87:4a:d6:c9:42:19:fa:54:a0: 6b:29:42:50:71:9d:7b:5d:a9:cb:74:f1:ec:6c:17:9d:e3:94: e6:f1:ae:82:db:53:71:6a:ec:b2:99:b6:51:62:0f:db:dc:d5: 93:cf:7f:8a:60:69:72:19:dd:23:8f:cb:2d:d5:5b:d0:29:33: fb:92:c8:29:02:20:9d:54:a6:20:c8:f9:c4:c4:10:8c:05:58: 43:d2:b0:86:b6:ae:1b:83:08:3b:84:bf:97:2d:18:6a:ce:fb: dd:23:01:45:45:cb:ee:72:ff:4d:f3:fd:48:00:e4:61:d6:4f: 02:27:98:05:67:b3:85:6d:d8:5c:9c:a2:10:ac:20:41:23:b7: 57:21:a3:8e:11:53:9f:4a:6b:3c:28:ee:9f:79:26:1d:ab:f2: 41:92:f5:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA0MjUwNzAwNDBaFw0yNTA1MDIwNzAwNDBaMBgxFjAUBgNV BAMTDTY4MGIzMzE4LTlmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC++T90hJvVMPjRF7MRzKwtO2iO5gwmBKVXoABm8Hk2sA9rBg7Ku+wmn+tSljZm /9QpF1xI561UBO0MmMA4AWZDIR+BjyJ/MXBuOCI2tHJsgeUY0nRKlF8TGiG6BVhd 7FhEG3suHghWqPhuDUq030WkwyiiPJGAyXkeU7T8HNQufoRoaIgUcbvdinkr7jha 1KC8b/2yxbA0wjXF9luroxloVVgIW6AA4v3zEGow2qjHF9JGnvSfwMSeppz2L0Ic 3Q63iFQM4H9HMxM+Q8iUUPBaQd9NFetmaG7uxKd57gFbsO6uS+ZUrYk1+Q9G2num z8qWTb90BPEuvyRiFOTzB9lPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJkKtRN/f EiNcfiHMdlnDT2Dc/10wHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsY1M5Z8H1SpvpjXE9bwoSpSbrk3rURkJ6VXKrjxe+C2JM0OVEusvbP /ftrVRD40mwklIkWbGoQw3LBXPUDG8nHhGa5I45PCqiHdseeXtKsecb87VTHKixD Wnu/NYORrTVqS4dK1slCGfpUoGspQlBxnXtdqct08exsF53jlObxroLbU3Fq7LKZ tlFiD9vc1ZPPf4pgaXIZ3SOPyy3VW9ApM/uSyCkCIJ1UpiDI+cTEEIwFWEPSsIa2 rhuDCDuEv5ctGGrO+90jAUVFy+5y/03z/UgA5GHWTwInmAVns4Vt2FycohCsIEEj t1cho44RU59Kazwo7p95Jh2r8kGS9YE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:04 2025 by rpki-client