$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: tHtwaVh2bqdHW9tfWu/useKhXfTtXt0Bpt4XU0f/33g= Subject key identifier: ED:4D:39:89:0C:4B:8F:0C:CF:76:49:9A:56:5B:70:B0:99:C6:A7:BD Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01C7 Signing time: Tue 29 Apr 2025 03:07:12 +0000 Manifest this update: Tue 29 Apr 2025 03:07:11 +0000 Manifest next update: Tue 06 May 2025 03:07:11 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: A98eA3DN3cgGmBVaplgwZKQv3kG2mx6JIpK7FUYRPGE=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: EGxldo7AGw1cFMotW1VKii2ay/EqR5jKmsG9yMQNqRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 03:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Apr 29 03:07:11 2025 GMT Not After : May 6 03:07:11 2025 GMT Subject: CN=6810425f-795e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:41:ac:2c:0b:e4:6c:0c:02:b2:6b:e1:e8: 7c:20:95:17:b7:13:96:50:16:b3:0e:3d:68:ff:39: 8f:46:9b:1e:56:bc:ff:74:81:f4:f0:06:fe:e2:f7: c9:20:1a:cc:1b:11:3a:2d:8b:a5:d8:04:10:06:c1: 29:64:02:fe:98:e7:cb:e1:02:7f:f6:41:68:4e:66: 27:9b:1e:11:10:ba:ca:17:d0:80:50:29:1d:62:b4: 68:81:31:db:ac:26:be:4b:06:8f:42:24:29:d4:f2: c1:43:ec:46:23:06:31:87:e6:da:8a:c7:46:85:6b: 7c:f5:7b:04:4c:1c:ae:dc:5d:f5:cd:9f:3f:5d:73: 1c:9e:f7:e6:2a:48:fb:70:6c:5f:17:d2:c2:38:32: 8a:c6:a3:9f:83:d3:4b:0f:24:d3:47:1f:e5:a3:1a: ca:ad:06:61:90:e5:fd:16:03:5c:25:0f:85:5b:ad: 0e:c9:15:02:2f:7c:d6:29:bc:ea:67:76:d5:1f:dd: 81:80:ff:48:6f:f6:48:48:ba:85:c0:fa:49:ae:7e: e8:3f:ba:b9:f8:68:65:e8:f2:0f:70:82:a1:29:14: f4:24:b1:9f:48:db:b7:04:c1:f2:25:54:2f:d6:12: 89:4f:42:a5:cd:33:0c:17:68:48:18:fc:4a:fd:a1: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4D:39:89:0C:4B:8F:0C:CF:76:49:9A:56:5B:70:B0:99:C6:A7:BD X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:05:66:3a:37:57:4e:0a:29:a9:57:7f:9e:c4:ac:75:8d:0e: 51:ce:50:28:9d:15:d6:da:ee:d5:18:75:2c:e3:9c:3b:e5:3a: d4:a9:89:5c:37:3a:16:b7:2e:aa:c9:75:66:91:a6:af:93:07: 38:ac:4b:3c:0f:59:2b:6d:8a:c1:c7:b5:68:0b:db:06:2b:f8: 51:ac:1a:34:ad:18:06:2a:0e:33:27:c9:f6:06:a2:af:ba:e2: 48:0b:c8:5f:4e:44:85:4b:36:6a:1a:b0:b0:9e:ab:f8:77:21: f6:90:f4:51:1f:56:68:5a:11:86:95:15:bf:7f:c7:b0:99:19: d6:49:32:13:c9:bc:cc:68:c9:62:c3:da:71:4f:b4:a8:cf:c7: cf:b0:c0:bc:2f:0f:d1:b2:9c:81:80:37:2e:f2:c6:2b:60:39: d0:60:90:87:da:cd:9f:11:c1:3e:3e:fd:c1:e4:55:9f:58:52: a1:be:39:b4:a0:40:ca:68:92:51:af:cd:ad:33:3f:86:f6:5e: 89:96:80:f6:6d:b8:73:85:c9:79:66:1f:6d:9e:b5:d3:c1:c7: 59:b6:96:09:ac:77:b7:59:e1:77:2f:ee:6d:9c:a7:2b:de:5c: e9:89:c9:16:8c:d0:ae:10:67:5d:9f:af:0a:a3:08:85:50:01: d9:d1:53:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwNDI5MDMwNzExWhcNMjUwNTA2MDMwNzExWjAYMRYwFAYD VQQDEw02ODEwNDI1Zi03OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC1BrCwL5GwMArJr4eh8IJUXtxOWUBazDj1o/zmPRpseVrz/dIH08Ab+4vfJ IBrMGxE6LYul2AQQBsEpZAL+mOfL4QJ/9kFoTmYnmx4RELrKF9CAUCkdYrRogTHb rCa+SwaPQiQp1PLBQ+xGIwYxh+baisdGhWt89XsETByu3F31zZ8/XXMcnvfmKkj7 cGxfF9LCODKKxqOfg9NLDyTTRx/loxrKrQZhkOX9FgNcJQ+FW60OyRUCL3zWKbzq Z3bVH92BgP9Ib/ZISLqFwPpJrn7oP7q5+Ghl6PIPcIKhKRT0JLGfSNu3BMHyJVQv 1hKJT0KlzTMMF2hIGPxK/aFIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1NOYkM S48Mz3ZJmlZbcLCZxqe9MB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfBWY6N1dOCimpV3+exKx1jQ5RzlAonRXW2u7VGHUs45w75TrUqYlc NzoWty6qyXVmkaavkwc4rEs8D1krbYrBx7VoC9sGK/hRrBo0rRgGKg4zJ8n2BqKv uuJIC8hfTkSFSzZqGrCwnqv4dyH2kPRRH1ZoWhGGlRW/f8ewmRnWSTITybzMaMli w9pxT7Soz8fPsMC8Lw/RspyBgDcu8sYrYDnQYJCH2s2fEcE+Pv3B5FWfWFKhvjm0 oEDKaJJRr82tMz+G9l6JloD2bbhzhcl5Zh9tnrXTwcdZtpYJrHe3WeF3L+5tnKcr 3lzpickWjNCuEGddn68KowiFUAHZ0VO6 -----END CERTIFICATE-----Generated at Tue Apr 29 17:16:22 2025 by rpki-client