$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: SNnPOGyLt51yxZXvOIiA9i7p7qdRpZ8SiyMmbGH+tV8= Subject key identifier: C3:04:D0:E8:C0:D4:AF:23:3D:F0:2E:50:47:AD:B5:69:82:EC:A4:11 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1F5C Signing time: Thu 24 Apr 2025 17:15:19 +0000 Manifest this update: Thu 24 Apr 2025 17:15:19 +0000 Manifest next update: Thu 01 May 2025 17:15:19 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: OdQowM22GV0xrdB+koDyHDQj9zjWjJWj2pzTsAEjKRc=) 2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 3: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3624 (0xe28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Apr 24 17:15:19 2025 GMT Not After : May 1 17:15:19 2025 GMT Subject: CN=680a71a7-a1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:08:34:73:8e:e3:e9:93:31:88:b3:dc:ed: 71:21:54:0e:22:36:dc:ee:6a:b4:d6:77:4c:3b:2d: 84:c3:80:6f:db:8a:4f:c9:49:b0:0e:f6:77:3e:3b: 76:d5:91:f1:53:63:cf:2f:9f:45:27:aa:be:42:9e: 88:6f:58:9e:53:95:b9:7a:39:04:de:f4:39:1a:13: 7f:84:63:02:b6:21:f5:8e:1f:21:d7:25:9b:a8:36: 1d:ad:22:63:75:2a:12:73:4e:ee:e9:55:b1:6d:96: 77:50:59:66:05:89:e7:40:67:77:60:20:69:79:97: c7:ab:e7:69:6f:d2:8d:27:7a:e0:67:0f:18:d2:0e: fc:a7:53:57:08:42:39:57:32:ca:30:b7:76:fc:88: 3f:3a:68:c0:f8:f1:22:bf:ef:8c:70:eb:e1:7b:d0: e1:18:0b:5b:e6:c0:cc:20:f0:a1:08:f1:fb:ab:07: c2:6a:f2:6c:92:6e:07:c5:a7:f3:af:49:f0:f8:08: 93:6f:5e:f1:58:39:0c:57:02:94:f3:26:cc:f5:3a: 32:a9:53:05:e3:7e:2c:ee:cf:db:24:5d:ea:dd:6a: 13:f5:99:13:76:4b:0e:27:09:7b:49:2d:7c:e4:8d: 35:21:7a:86:33:78:3c:b2:1b:92:1c:0e:d0:4a:0c: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:04:D0:E8:C0:D4:AF:23:3D:F0:2E:50:47:AD:B5:69:82:EC:A4:11 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:66:86:47:05:89:1c:27:c6:99:81:96:69:1f:88:d9:13:e0: e7:9b:cb:95:0b:34:17:53:71:35:92:78:48:58:32:ce:9a:05: 74:5f:54:f6:3b:8f:e3:cf:fb:b0:0b:86:7e:0d:a0:ff:43:c0: b6:55:96:3a:27:bf:79:13:24:84:91:67:89:a0:b5:88:7a:7f: a8:57:7f:42:f0:30:54:64:60:54:c4:64:12:c8:9e:c5:91:f0: 4a:3d:92:8e:be:e6:50:f6:82:28:88:50:6a:b8:cf:e2:3d:fe: 04:e2:2b:a2:44:12:48:52:26:cf:3f:b7:d5:0b:b9:58:7d:37: 6e:4f:06:e2:0f:a1:29:1b:a1:ea:a8:c8:3d:d4:17:06:8d:d3: 5f:ed:9d:9c:9c:2e:b4:96:96:d6:fc:a9:9d:80:23:63:5b:fc: 0b:4c:70:ab:2c:56:98:4d:38:ca:fe:3a:b8:9e:2c:a8:3e:1b: 6a:38:83:41:51:fe:9f:29:44:d5:0d:c5:b2:fe:94:1f:8f:7d: b2:33:88:ae:95:58:82:64:a9:69:3f:ba:ed:31:cd:52:94:55: b8:f3:6d:e5:88:bd:1a:d2:cf:20:dc:6f:85:92:46:5a:ba:1e: f7:a3:89:13:6a:b4:43:f6:0a:99:e3:a1:a6:8a:6a:2d:e2:88: 83:ad:13:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwNDI0MTcxNTE5WhcNMjUwNTAxMTcxNTE5WjAYMRYwFAYD VQQDEw02ODBhNzFhNy1hMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqkINHOO4+mTMYiz3O1xIVQOIjbc7mq01ndMOy2Ew4Bv24pPyUmwDvZ3Pjt2 1ZHxU2PPL59FJ6q+Qp6Ib1ieU5W5ejkE3vQ5GhN/hGMCtiH1jh8h1yWbqDYdrSJj dSoSc07u6VWxbZZ3UFlmBYnnQGd3YCBpeZfHq+dpb9KNJ3rgZw8Y0g78p1NXCEI5 VzLKMLd2/Ig/OmjA+PEiv++McOvhe9DhGAtb5sDMIPChCPH7qwfCavJskm4Hxafz r0nw+AiTb17xWDkMVwKU8ybM9ToyqVMF434s7s/bJF3q3WoT9ZkTdksOJwl7SS18 5I01IXqGM3g8shuSHA7QSgxmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMME0OjA 1K8jPfAuUEettWmC7KQRMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuZoZHBYkcJ8aZgZZpH4jZE+Dnm8uVCzQXU3E1knhIWDLOmgV0X1T2 O4/jz/uwC4Z+DaD/Q8C2VZY6J795EySEkWeJoLWIen+oV39C8DBUZGBUxGQSyJ7F kfBKPZKOvuZQ9oIoiFBquM/iPf4E4iuiRBJIUibPP7fVC7lYfTduTwbiD6EpG6Hq qMg91BcGjdNf7Z2cnC60lpbW/KmdgCNjW/wLTHCrLFaYTTjK/jq4niyoPhtqOINB Uf6fKUTVDcWy/pQfj32yM4iulViCZKlpP7rtMc1SlFW4823liL0a0s8g3G+FkkZa uh73o4kTarRD9gqZ46Gmimot4oiDrROe -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:00 2025 by rpki-client