$ rpki-client -vvf rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft File: YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft (raw, json) Hash identifier: DaMZDzwzx3iXWnPaoPNK2QgLesDKFbOIoBxtmvq//ww= Subject key identifier: 01:51:62:AD:A1:BB:65:12:62:D8:41:89:D6:B3:4C:7D:45:4F:C2:89 Authority key identifier: 60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62 Certificate issuer: /CN=A919FA55/serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft Manifest number: 0142 Signing time: Fri 25 Apr 2025 03:30:01 +0000 Manifest this update: Fri 25 Apr 2025 03:30:01 +0000 Manifest next update: Fri 02 May 2025 03:30:01 +0000 Files and hashes: 1: YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl (hash: rL/+Ns78BwlglreCz5RY+SvYVQSZ7Te74+w+HXBScA0=) 2: 730BFF8C428B11EEB9A5EA63C4F9AE02.roa (hash: kkjE94BBiiWiAJ9He43Jc/0GO/LlMOG+ydM9xjAZ/oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FA55, serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062 Validity Not Before: Apr 25 03:30:01 2025 GMT Not After : May 2 03:30:01 2025 GMT Subject: CN=680b01b9-2632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:dd:6e:3b:11:64:f2:c3:e7:3c:ca:5b:8d: 6a:1a:ca:0f:cb:24:ec:b4:49:68:e0:f2:45:3e:53: fe:50:1d:3b:99:94:ec:9a:a5:94:75:4d:14:5c:e0: cf:0f:50:70:80:63:3f:a6:a8:e5:06:ad:dd:3d:19: 84:3b:d8:ec:4f:ef:88:ac:89:1b:5f:d3:e2:ce:ac: 50:bd:bb:19:83:0d:c4:cf:1d:29:68:e8:01:8e:e4: 1a:32:b2:97:d6:89:74:49:8e:75:4b:f8:18:16:8f: 88:a4:a2:13:2d:ff:d4:43:a1:38:c4:54:9b:95:8e: 2d:fa:87:e2:43:a8:52:ec:06:cb:ce:bd:12:70:ae: ac:d6:87:88:47:a4:e6:f3:b9:7b:51:70:98:c1:3d: 72:9c:ac:29:d4:a7:f0:09:0d:1a:1e:9c:46:0a:f6: 90:3c:16:fe:02:5f:4c:fd:f8:be:d6:ac:71:13:96: 8d:a4:4b:a3:3e:de:45:31:93:aa:b7:e8:59:92:b0: aa:ed:a2:2d:55:a7:e0:50:86:80:40:3c:b0:66:36: a4:3e:99:02:6a:55:cc:e5:91:cb:e9:a3:4c:46:ec: c5:38:0b:72:44:44:be:49:6d:50:d7:50:20:ef:27: 9a:a0:16:e9:a5:3a:a6:8c:9a:ec:fd:9c:83:67:0b: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:51:62:AD:A1:BB:65:12:62:D8:41:89:D6:B3:4C:7D:45:4F:C2:89 X509v3 Authority Key Identifier: keyid:60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:b7:66:df:a7:fc:a8:27:04:22:26:65:1b:1a:3d:7b:6c: 45:a9:5a:14:df:d2:4d:61:e5:94:c8:b2:7f:75:08:da:57:20: c2:9e:85:d1:ef:02:b1:0f:a1:c4:64:a4:e2:75:70:6b:4a:dd: ef:e3:ea:ef:50:e3:b8:82:f3:7f:0c:a1:47:6e:7d:f2:38:c4: 8d:27:cd:c1:48:64:67:4d:0c:1b:e7:5f:a0:f5:dc:29:56:70: de:4b:82:92:d2:9e:99:73:5d:f1:03:b3:40:49:da:81:52:2f: 6c:c5:a3:83:35:a8:1d:f7:8b:96:29:71:b1:e9:31:ba:ee:b1: d0:0a:88:16:d5:66:75:bd:fd:94:36:3c:bf:40:e0:5a:b4:6f: 58:77:b4:61:2b:32:27:70:05:e2:aa:c9:ca:28:ba:8a:1a:2b: ff:da:aa:e3:50:ce:44:32:3c:de:eb:df:fb:31:e4:4d:f6:b1: e7:93:22:b2:1b:f0:02:36:49:59:95:99:bc:de:2a:3e:b8:76: 12:39:c4:31:21:54:af:5d:98:de:7b:92:e9:0f:7f:65:18:af: 55:8f:41:71:ed:12:c1:8b:92:0e:73:b3:84:96:f8:37:dd:c1: d6:d7:6b:c2:96:47:17:e2:4b:75:8d:7c:97:1d:e7:09:df:6d: d6:aa:dc:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZBNTUxMTAvBgNVBAUTKDYwMjc2QjQxMUY2REY2OTRERDM2NEM0RkQzODJGMjVD OUU2QTYwNjIwHhcNMjUwNDI1MDMzMDAxWhcNMjUwNTAyMDMzMDAxWjAYMRYwFAYD VQQDEw02ODBiMDFiOS0yNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro3dbjsRZPLD5zzKW41qGsoPyyTstElo4PJFPlP+UB07mZTsmqWUdU0UXODP D1BwgGM/pqjlBq3dPRmEO9jsT++IrIkbX9PizqxQvbsZgw3Ezx0paOgBjuQaMrKX 1ol0SY51S/gYFo+IpKITLf/UQ6E4xFSblY4t+ofiQ6hS7AbLzr0ScK6s1oeIR6Tm 87l7UXCYwT1ynKwp1KfwCQ0aHpxGCvaQPBb+Al9M/fi+1qxxE5aNpEujPt5FMZOq t+hZkrCq7aItVafgUIaAQDywZjakPpkCalXM5ZHL6aNMRuzFOAtyRES+SW1Q11Ag 7yeaoBbppTqmjJrs/ZyDZwugIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFRYq2h u2USYthBidazTH1FT8KJMB8GA1UdIwQYMBaAFGAna0EfbfaU3TZMT9OC8lyeamBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkE1NS8wRjlFNjE2RTQw RkMxMUVFQjgyMDY3NDRDNEY5QUUwMi9ZQ2RyUVI5dDlwVGROa3hQMDRMeVhKNXFZ R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZHJRUjl0OXBUZE5reFAwNEx5WEo1cVlHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkE1NS8wRjlFNjE2RTQwRkMxMUVFQjgyMDY3NDRDNEY5QUUwMi9ZQ2RyUVI5dDlw VGROa3hQMDRMeVhKNXFZR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASGLdm36f8qCcEIiZlGxo9e2xFqVoU39JNYeWUyLJ/dQjaVyDCnoXR 7wKxD6HEZKTidXBrSt3v4+rvUOO4gvN/DKFHbn3yOMSNJ83BSGRnTQwb51+g9dwp VnDeS4KS0p6Zc13xA7NASdqBUi9sxaODNagd94uWKXGx6TG67rHQCogW1WZ1vf2U Njy/QOBatG9Yd7RhKzIncAXiqsnKKLqKGiv/2qrjUM5EMjze69/7MeRN9rHnkyKy G/ACNklZlZm83io+uHYSOcQxIVSvXZjee5LpD39lGK9Vj0Fx7RLBi5IOc7OElvg3 3cHW12vClkcX4kt1jXyXHecJ323WqtxK -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:29 2025 by rpki-client