$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: WxQhf6LsDB7i2dIsv+XUongSdLEX/xrkKPoob1hV4aY= Subject key identifier: 01:CF:D3:CB:73:85:ED:91:DE:F0:43:43:52:A5:BC:E8:11:F0:C3:29 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 07E7 Signing time: Thu 24 Apr 2025 20:48:26 +0000 Manifest this update: Thu 24 Apr 2025 20:48:26 +0000 Manifest next update: Thu 01 May 2025 20:48:26 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: UiJSqEU63xyV46KWmDXypN3fAn1iEttk8KkDQn23OwA=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: UFJMOp2fvjsQLVH9S8VvXu+lCDjqJ5yXKWYrWh7iDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Apr 24 20:48:26 2025 GMT Not After : May 1 20:48:26 2025 GMT Subject: CN=680aa39a-a02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:3d:5f:41:0d:5e:7c:e0:60:cd:5a:55:70: 44:05:ea:28:c4:92:de:ce:a9:19:91:6b:7b:10:60: 27:88:f6:ba:cd:2b:aa:4f:e3:ae:a8:d3:04:31:5e: 26:97:29:46:d1:5a:4d:a2:84:b1:48:55:f7:33:85: d4:6f:b8:26:a9:a9:4c:f3:20:55:f1:8f:69:6e:84: 47:b5:0f:19:ef:da:f6:c7:08:e5:77:5c:95:be:c6: a8:a5:81:b1:23:e4:c6:f5:d4:7c:ea:19:e4:bc:25: 7c:52:38:23:73:1b:60:dd:0e:fc:a6:f9:5c:21:28: 4b:70:46:9d:58:b3:64:02:71:b8:60:a6:f0:36:73: 92:44:62:6e:54:85:03:11:3b:cf:2a:cd:40:7e:bd: e8:6f:51:a6:32:29:87:7e:d7:f7:87:be:37:2c:7b: 94:3b:09:d5:c4:ff:f4:ea:f4:0e:f1:4f:1c:9b:25: 60:16:0e:52:af:66:41:b3:02:a8:5c:24:fb:73:e1: 6f:9d:9c:90:35:07:a5:03:c3:eb:92:d4:7c:9e:bb: 3b:3a:fa:7f:fc:1a:03:89:f9:cd:e8:06:a4:20:f3: f2:a9:10:85:02:f8:a5:7a:77:fe:74:0c:e4:b2:0f: 89:73:5c:50:15:e2:4c:d5:30:61:be:9a:88:2b:97: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:D3:CB:73:85:ED:91:DE:F0:43:43:52:A5:BC:E8:11:F0:C3:29 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:bb:cc:13:a6:29:f9:ec:0a:fe:e0:94:29:f0:df:80:46: 09:eb:54:a3:f2:b8:50:7e:0f:7d:18:7f:54:9c:5d:ba:1d:6a: ef:82:f1:9d:d7:56:25:06:eb:67:5a:4f:76:59:2d:17:d4:15: 30:19:89:d7:7b:41:30:1e:61:fb:80:58:04:45:3e:c2:81:6d: 2d:59:b3:33:33:1c:6c:54:6e:f8:56:8e:98:f7:df:4c:57:81: 65:70:2a:99:01:a3:6d:ca:da:aa:e9:1e:91:02:5e:05:5b:30: 60:4e:7e:87:41:10:6c:03:6a:1a:32:53:45:fd:57:dc:88:bc: 2f:41:be:94:b1:c0:c9:b9:5d:ad:11:b5:1f:79:d0:75:f9:04: f8:09:a5:18:2c:1b:ac:d2:90:55:98:cf:36:57:ba:1b:f8:b6: d4:48:58:35:63:94:34:1b:d9:90:3a:07:85:4d:c5:f1:2a:70: 70:ad:24:a5:c1:ff:3d:5c:e0:45:0c:89:8d:64:a1:3a:1e:c0: 02:39:4e:7d:a7:69:25:93:16:13:77:1a:30:31:ac:2a:cb:94: 88:79:c7:46:9f:00:57:4a:01:ae:3c:c6:b1:0c:39:88:af:df: 7f:c5:28:b7:04:91:30:a4:c3:d1:ae:d8:bb:aa:2d:21:b2:50: ae:8e:1c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwNDI0MjA0ODI2WhcNMjUwNTAxMjA0ODI2WjAYMRYwFAYD VQQDEw02ODBhYTM5YS1hMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohg9X0ENXnzgYM1aVXBEBeooxJLezqkZkWt7EGAniPa6zSuqT+OuqNMEMV4m lylG0VpNooSxSFX3M4XUb7gmqalM8yBV8Y9pboRHtQ8Z79r2xwjld1yVvsaopYGx I+TG9dR86hnkvCV8Ujgjcxtg3Q78pvlcIShLcEadWLNkAnG4YKbwNnOSRGJuVIUD ETvPKs1Afr3ob1GmMimHftf3h743LHuUOwnVxP/06vQO8U8cmyVgFg5Sr2ZBswKo XCT7c+FvnZyQNQelA8PrktR8nrs7Ovp//BoDifnN6AakIPPyqRCFAvilenf+dAzk sg+Jc1xQFeJM1TBhvpqIK5eseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHP08tz he2R3vBDQ1KlvOgR8MMpMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDuLvME6Yp+ewK/uCUKfDfgEYJ61Sj8rhQfg99GH9UnF26HWrvgvGd 11YlButnWk92WS0X1BUwGYnXe0EwHmH7gFgERT7CgW0tWbMzMxxsVG74Vo6Y999M V4FlcCqZAaNtytqq6R6RAl4FWzBgTn6HQRBsA2oaMlNF/VfciLwvQb6UscDJuV2t EbUfedB1+QT4CaUYLBus0pBVmM82V7ob+LbUSFg1Y5Q0G9mQOgeFTcXxKnBwrSSl wf89XOBFDImNZKE6HsACOU59p2klkxYTdxowMawqy5SIecdGnwBXSgGuPMaxDDmI r99/xSi3BJEwpMPRrti7qi0hslCujhxw -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:26 2025 by rpki-client