$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: q64LRjfwBdYXPA3ddezPAVVwHfHO4kOqiGKfzMhXN/M= Subject key identifier: 3D:8B:A2:A7:19:BF:54:BC:3E:B9:44:D9:12:3F:25:B0:4E:B1:83:34 Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 0713 Signing time: Thu 24 Apr 2025 21:39:26 +0000 Manifest this update: Thu 24 Apr 2025 21:39:25 +0000 Manifest next update: Thu 01 May 2025 21:39:25 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: 5yYmaTFThidqw8HjHrLtgiOIA5tiBe+HWXY982h8oEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Apr 24 21:39:25 2025 GMT Not After : May 1 21:39:25 2025 GMT Subject: CN=680aaf8e-81a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:13:68:e3:e2:33:ea:08:47:82:8c:4b:f8: b5:3a:5f:36:89:3c:b4:49:91:b1:6a:b3:62:5f:9a: 64:4f:ab:cb:7c:5d:92:cf:9b:8e:42:f1:e1:f4:af: 94:f2:7e:9d:43:bb:6b:6f:bb:e2:b2:88:cd:50:f6: 1a:cc:35:a8:53:30:d0:a3:11:aa:7c:98:7f:82:90: dd:ea:c5:3c:e8:dc:25:5a:62:a6:57:77:42:1c:77: 05:ca:96:e5:63:3d:ef:9a:34:9d:82:7e:2d:ed:88: 18:61:91:f7:c2:a3:2e:b0:df:b7:83:61:5a:c7:83: 5f:52:d4:77:8d:da:3b:76:21:02:ab:8a:ad:e6:19: a6:76:c2:b0:1e:f5:b6:d1:c6:f5:e2:b8:7b:59:21: a2:f3:93:44:bb:20:95:5d:cb:ca:8e:02:dc:fe:d7: d9:94:7b:cb:c4:d6:f7:2a:2c:62:e1:d3:11:98:ce: 8c:91:a1:c7:c1:fe:9f:9e:54:fc:05:1f:ee:d9:18: f3:6c:4b:54:ca:a8:94:3b:7b:10:e4:46:15:7d:4c: ad:64:73:d9:e5:5a:87:fa:55:b7:b7:21:ee:57:62: 8d:be:1d:6e:6e:5f:53:35:10:80:02:53:8e:3c:7d: 31:37:ba:b8:35:48:e7:0e:67:0b:72:a6:60:c7:77: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:A2:A7:19:BF:54:BC:3E:B9:44:D9:12:3F:25:B0:4E:B1:83:34 X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d0:79:13:cd:b9:4c:77:9b:00:df:ca:1d:db:07:07:cf:cd: 74:28:aa:2f:d1:24:cd:0e:a4:f7:bc:2b:12:24:8c:2a:16:4f: d7:3b:7a:f0:8b:d1:b6:83:25:c3:51:9b:ff:b5:d4:af:f7:96: 93:3e:79:08:97:31:ff:0b:40:a0:39:e4:00:2b:56:69:2b:4b: c8:6a:fd:31:51:de:d8:f5:43:b6:9b:d1:71:e0:ab:60:4a:17: 1a:3c:56:82:4d:5c:f2:d3:64:16:fd:53:a3:50:f4:e2:c3:10: c8:7f:82:62:62:34:84:c8:8e:50:ee:da:c5:b3:4a:f0:1a:c2: 1a:f0:56:0e:a8:53:69:22:9f:4b:bd:44:16:86:13:88:05:4c: 8e:e4:00:94:4e:61:c1:1e:18:dc:9f:2c:fc:02:b7:19:1d:15: 3a:26:0a:89:cf:1a:30:2c:3d:0b:fb:56:8c:62:63:59:0f:89: 68:e3:2c:79:e2:55:5e:23:cd:a1:1a:1b:30:5a:32:31:1b:85: 97:1c:96:9b:0e:76:e1:05:86:73:06:9c:30:49:0b:20:3a:bf: b2:3a:38:8b:7a:04:b1:8b:b3:e8:be:a8:0a:94:38:87:bc:85: 5b:84:5f:59:ec:b3:86:1e:23:27:64:81:2e:7b:d2:1c:d9:51: 2c:d3:47:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwNDI0MjEzOTI1WhcNMjUwNTAxMjEzOTI1WjAYMRYwFAYD VQQDEw02ODBhYWY4ZS04MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzATaOPiM+oIR4KMS/i1Ol82iTy0SZGxarNiX5pkT6vLfF2Sz5uOQvHh9K+U 8n6dQ7trb7visojNUPYazDWoUzDQoxGqfJh/gpDd6sU86NwlWmKmV3dCHHcFypbl Yz3vmjSdgn4t7YgYYZH3wqMusN+3g2Fax4NfUtR3jdo7diECq4qt5hmmdsKwHvW2 0cb14rh7WSGi85NEuyCVXcvKjgLc/tfZlHvLxNb3Kixi4dMRmM6MkaHHwf6fnlT8 BR/u2RjzbEtUyqiUO3sQ5EYVfUytZHPZ5VqH+lW3tyHuV2KNvh1ubl9TNRCAAlOO PH0xN7q4NUjnDmcLcqZgx3fV7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2LoqcZ v1S8PrlE2RI/JbBOsYM0MB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv0HkTzblMd5sA38od2wcHz810KKov0STNDqT3vCsSJIwqFk/XO3rw i9G2gyXDUZv/tdSv95aTPnkIlzH/C0CgOeQAK1ZpK0vIav0xUd7Y9UO2m9Fx4Ktg ShcaPFaCTVzy02QW/VOjUPTiwxDIf4JiYjSEyI5Q7trFs0rwGsIa8FYOqFNpIp9L vUQWhhOIBUyO5ACUTmHBHhjcnyz8ArcZHRU6JgqJzxowLD0L+1aMYmNZD4lo4yx5 4lVeI82hGhswWjIxG4WXHJabDnbhBYZzBpwwSQsgOr+yOjiLegSxi7PovqgKlDiH vIVbhF9Z7LOGHiMnZIEue9Ic2VEs00cY -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:20 2025 by rpki-client