$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: IjWaWitKjRA83tV2AfAxxoiRhB+RG9gLAXNSbxCetoo= Subject key identifier: 70:C6:9F:8B:B3:50:36:4A:B2:39:98:D8:2F:82:AD:BF:4F:44:F5:35 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 0805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0800 Signing time: Sat 14 Jun 2025 20:41:03 +0000 Manifest this update: Sat 14 Jun 2025 20:41:02 +0000 Manifest next update: Sat 21 Jun 2025 20:41:02 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: krzRZ3vgjToUjPnTFty5aXo2jMPhPLxhhQiNvyBzOBI=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: UFJMOp2fvjsQLVH9S8VvXu+lCDjqJ5yXKWYrWh7iDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Jun 14 20:41:02 2025 GMT Not After : Jun 21 20:41:02 2025 GMT Subject: CN=684dde5f-78d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:ce:0f:33:5b:9c:e9:4a:2b:14:f1:95:77: a8:e8:63:36:73:59:ee:27:c9:15:bf:8c:26:c0:40: bb:97:33:70:40:59:72:c5:76:76:99:73:0a:92:b7: da:a8:58:0c:61:ee:8f:44:d3:5f:9b:b1:d8:17:6e: fd:67:45:3c:ee:7e:ed:c9:68:10:39:bd:52:d7:8c: c1:c7:27:de:4a:11:33:bb:71:90:5c:71:1d:5e:81: dc:18:44:3b:c9:7c:43:89:9b:37:28:89:25:d3:f6: a2:b6:ed:39:f7:bb:62:24:26:2f:25:10:31:dd:9b: 3b:6a:fb:1b:5a:cf:ec:e1:8e:d2:19:47:9f:02:b7: a1:bc:50:72:41:a8:f8:99:e2:a2:03:c7:a0:9c:d3: 5a:4b:4f:44:94:60:a5:7d:9e:93:64:2c:74:df:a6: 5b:66:1c:c9:7e:5d:1b:b6:bd:5a:08:93:2f:5a:d3: bc:d2:9b:75:21:37:ab:97:59:86:7d:ab:e0:8b:5d: 7d:a4:e6:58:c2:d8:66:e7:88:8e:38:1d:57:f6:c4: 78:57:85:9e:e3:9c:d9:b0:26:29:81:44:99:ab:38: 1e:52:3d:f7:b2:87:9b:83:34:4a:81:f5:60:35:75: e2:3f:fa:24:ae:31:a5:15:19:8d:01:22:21:a4:8e: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:9F:8B:B3:50:36:4A:B2:39:98:D8:2F:82:AD:BF:4F:44:F5:35 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b5:73:f6:27:b4:9a:8f:a4:ff:26:b3:42:5c:8d:ac:2a:82: b3:3a:81:de:de:05:79:ee:1a:c6:a7:59:51:eb:42:4e:0a:9d: 2a:66:ed:59:b5:ee:c5:85:6d:04:00:19:0d:7a:c1:38:cd:16: 75:9b:16:84:e9:13:8b:4d:3a:c2:ea:ea:c7:86:3a:30:51:f8: c0:7f:76:72:37:1c:65:45:75:a0:df:4f:c9:8a:94:a5:f1:4d: 0a:59:13:d5:9e:32:4c:24:5b:8c:bc:8a:25:42:7e:fb:2f:ea: a8:b2:ca:97:e0:6e:7c:ad:06:c5:0a:0c:6d:8c:ed:39:75:13: a5:60:a6:1c:f4:db:c9:e2:56:5a:2e:96:ef:d7:91:17:b9:fe: fd:55:2a:05:e4:c4:59:e2:a8:1c:e9:14:09:9e:47:57:2c:7b: 6e:a6:25:18:a4:e5:59:f4:7d:30:cd:77:3d:ad:d7:58:fb:0d: 92:ae:6d:7d:74:ef:23:59:14:0e:ab:ac:ce:5c:77:76:33:b0: 08:37:1e:8a:08:7f:84:96:45:1a:20:2b:44:a4:fe:f2:1f:e8: 65:2c:8d:1e:03:df:51:1f:fc:11:3d:80:43:63:51:f8:34:ba: 31:6e:c8:69:83:da:8c:79:e3:92:9d:65:a3:e9:c3:01:1e:35: 9a:05:77:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwNjE0MjA0MTAyWhcNMjUwNjIxMjA0MTAyWjAYMRYwFAYD VQQDEw02ODRkZGU1Zi03OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIXODzNbnOlKKxTxlXeo6GM2c1nuJ8kVv4wmwEC7lzNwQFlyxXZ2mXMKkrfa qFgMYe6PRNNfm7HYF279Z0U87n7tyWgQOb1S14zBxyfeShEzu3GQXHEdXoHcGEQ7 yXxDiZs3KIkl0/aitu0597tiJCYvJRAx3Zs7avsbWs/s4Y7SGUefArehvFByQaj4 meKiA8egnNNaS09ElGClfZ6TZCx036ZbZhzJfl0btr1aCJMvWtO80pt1ITerl1mG favgi119pOZYwthm54iOOB1X9sR4V4We45zZsCYpgUSZqzgeUj33soebgzRKgfVg NXXiP/okrjGlFRmNASIhpI4/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDGn4uz UDZKsjmY2C+Crb9PRPU1MB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4tXP2J7Saj6T/JrNCXI2sKoKzOoHe3gV57hrGp1lR60JOCp0qZu1Z te7FhW0EABkNesE4zRZ1mxaE6ROLTTrC6urHhjowUfjAf3ZyNxxlRXWg30/JipSl 8U0KWRPVnjJMJFuMvIolQn77L+qossqX4G58rQbFCgxtjO05dROlYKYc9NvJ4lZa Lpbv15EXuf79VSoF5MRZ4qgc6RQJnkdXLHtupiUYpOVZ9H0wzXc9rddY+w2Srm19 dO8jWRQOq6zOXHd2M7AINx6KCH+ElkUaICtEpP7yH+hlLI0eA99RH/wRPYBDY1H4 NLoxbshpg9qMeeOSnWWj6cMBHjWaBXdN -----END CERTIFICATE-----Generated at Sun Jun 15 08:04:00 2025 by rpki-client