$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: s1v9BLCdo3vOC1xAe7XXeDwHF8qk7HZcIaChfuN3R2I= Subject key identifier: FF:DB:D0:8C:2F:B6:6C:F9:D1:CE:6F:E8:61:E8:70:4B:5B:C5:23:70 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0AF5 Signing time: Thu 24 Apr 2025 19:14:04 +0000 Manifest this update: Thu 24 Apr 2025 19:14:02 +0000 Manifest next update: Thu 01 May 2025 19:14:02 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: BwmtpmD8qpqe4Vtm0RMiqBT9fXmUvAVnGRSPzvMmvYs=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: Apr 24 19:14:02 2025 GMT Not After : May 1 19:14:02 2025 GMT Subject: CN=680a8d7b-a157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:e1:74:67:3a:57:19:72:bf:b4:03:66:25: 9c:aa:8b:5d:d2:aa:a9:31:76:43:e7:d8:6f:d8:ba: ab:c5:63:3b:51:f1:30:03:53:c9:0e:e5:27:d9:02: 81:e5:3d:e2:46:98:ab:c8:b6:66:0f:cf:b0:63:4d: 05:e9:4a:5e:97:66:d6:2e:a0:c6:c1:50:54:80:74: e0:61:45:49:5e:02:92:5f:d1:17:5b:4c:f3:06:67: df:2e:66:da:2e:ad:3a:0e:7c:fe:ee:34:80:6a:a5: dc:40:3d:c0:ad:0a:40:cb:6c:4a:f3:10:e2:c4:39: d0:9c:e4:35:59:17:81:20:ff:0c:ff:b0:d5:9a:d3: 33:ee:d0:a2:48:1b:5a:d9:44:db:4c:d6:1a:e3:1e: 0d:61:f2:99:cc:96:72:69:3b:46:e4:27:e7:a7:b3: a6:8e:c1:55:b9:62:7f:05:a9:92:12:aa:11:10:d0: c2:04:2b:80:9e:e7:15:86:6c:e2:76:df:f8:6e:46: 2d:40:67:26:93:e7:c6:86:b5:4c:09:43:25:cf:f1: a9:38:ea:16:cb:7f:bc:c5:84:ea:c4:02:74:49:ce: 9b:05:82:0f:fa:a1:3b:29:bd:5f:42:53:cd:c4:12: 6a:b8:ef:72:ff:f4:06:39:f2:78:b4:a2:05:f6:e3: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:D0:8C:2F:B6:6C:F9:D1:CE:6F:E8:61:E8:70:4B:5B:C5:23:70 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:e3:ed:df:92:95:cd:e4:e9:48:c0:ee:7d:14:0b:74:fd: 4c:50:0e:40:03:7b:78:9f:36:17:86:00:6d:3e:7d:c7:16:06: ff:fb:e1:bd:26:df:45:0c:b2:ee:bf:29:92:c9:5d:08:13:e2: 7b:0f:54:24:60:02:65:32:c4:db:5b:91:19:90:11:e3:a7:df: 79:b9:e4:f7:64:0f:91:d5:29:ad:39:20:8b:39:a2:62:c7:12: 35:8b:08:49:22:dd:07:1f:d5:b6:8c:d2:6a:02:a6:78:8d:82: 22:f8:fb:2b:0f:79:b7:2d:90:56:88:93:ea:15:35:31:73:28: 02:be:bf:9f:e6:9e:69:24:bb:4a:fe:d7:ab:39:da:1a:6f:76: ea:c8:b4:81:d0:a2:b4:2d:70:27:26:a1:d5:33:70:a7:8a:b6: 9e:7f:ec:e4:7c:bf:90:6f:36:11:d6:b9:1b:07:b0:c2:cc:0b: bf:e6:43:24:ed:c2:91:c5:ce:f1:e6:1c:d4:95:6e:8a:19:4d: fe:b7:bf:60:48:8f:a3:43:bb:90:e8:a6:52:04:d1:8e:c4:b5: 65:c2:4e:0a:48:d1:12:19:a7:f0:75:d5:73:52:bc:3a:bb:24: 48:f1:ee:3f:8e:b9:79:fd:78:59:dc:48:a8:67:66:d2:46:77: 01:0f:00:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjUwNDI0MTkxNDAyWhcNMjUwNTAxMTkxNDAyWjAYMRYwFAYD VQQDEw02ODBhOGQ3Yi1hMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsczhdGc6Vxlyv7QDZiWcqotd0qqpMXZD59hv2LqrxWM7UfEwA1PJDuUn2QKB 5T3iRpiryLZmD8+wY00F6Upel2bWLqDGwVBUgHTgYUVJXgKSX9EXW0zzBmffLmba Lq06Dnz+7jSAaqXcQD3ArQpAy2xK8xDixDnQnOQ1WReBIP8M/7DVmtMz7tCiSBta 2UTbTNYa4x4NYfKZzJZyaTtG5Cfnp7OmjsFVuWJ/BamSEqoRENDCBCuAnucVhmzi dt/4bkYtQGcmk+fGhrVMCUMlz/GpOOoWy3+8xYTqxAJ0Sc6bBYIP+qE7Kb1fQlPN xBJquO9y//QGOfJ4tKIF9uMYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/b0Iwv tmz50c5v6GHocEtbxSNwMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQePt35KVzeTpSMDufRQLdP1MUA5AA3t4nzYXhgBtPn3HFgb/++G9 Jt9FDLLuvymSyV0IE+J7D1QkYAJlMsTbW5EZkBHjp995ueT3ZA+R1SmtOSCLOaJi xxI1iwhJIt0HH9W2jNJqAqZ4jYIi+PsrD3m3LZBWiJPqFTUxcygCvr+f5p5pJLtK /terOdoab3bqyLSB0KK0LXAnJqHVM3Cniraef+zkfL+QbzYR1rkbB7DCzAu/5kMk 7cKRxc7x5hzUlW6KGU3+t79gSI+jQ7uQ6KZSBNGOxLVlwk4KSNESGafwddVzUrw6 uyRI8e4/jrl5/XhZ3EioZ2bSRncBDwCO -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:23 2025 by rpki-client