$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: cREjhCyEyFy7KOd7gMP3mvS+MJ639zw7+D8DTNB4Gs8= Subject key identifier: 5E:2A:DB:3A:55:FC:04:30:9D:6A:48:96:DD:E4:5F:4F:5C:C6:5E:1E Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A29 Signing time: Mon 12 May 2025 19:37:09 +0000 Manifest this update: Mon 12 May 2025 19:37:09 +0000 Manifest next update: Mon 19 May 2025 19:37:09 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: A7qpv1Gifks+nsGZAJj/NDju+XXeRAbAtLhERajTdyk=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: May 12 19:37:09 2025 GMT Not After : May 19 19:37:09 2025 GMT Subject: CN=68224de5-d71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:7c:91:e5:9f:be:47:af:df:b4:0a:9c:46: 9f:85:45:dc:f9:ec:b7:0a:7c:a4:c4:01:30:0c:09: 9a:5b:be:8d:2b:c4:ff:dd:14:db:06:e0:71:0c:bd: 71:b5:dd:57:1a:61:e5:ad:08:a8:51:3a:58:a1:04: 65:d3:45:d3:15:53:15:5a:db:aa:29:5e:1f:35:42: b2:00:b5:ca:9d:17:9c:63:08:d1:9f:38:b3:13:45: f3:98:08:eb:72:23:fb:b5:ac:96:c7:97:cd:30:15: a3:11:35:94:e5:b6:a0:13:68:16:a3:34:07:19:ac: fd:ef:2c:49:fb:09:a8:82:bd:95:ca:30:b5:6b:7a: 7e:da:7a:98:2f:02:31:0e:5f:84:54:53:4e:91:5e: b1:cc:a1:f1:45:be:e5:4d:05:13:ad:87:5d:35:d1: 21:59:a3:fe:a0:af:e0:66:78:01:9b:f9:b1:66:79: ca:50:60:a3:90:b0:26:24:e6:f2:03:f8:01:35:b9: 6c:95:e2:22:2d:da:f4:42:ca:11:e1:02:f0:ad:87: 7a:fc:2b:40:80:42:f7:52:3a:41:86:7c:78:c1:20: d2:7d:d5:0e:dd:03:21:b7:cc:5c:1e:67:cc:a2:c7: 56:aa:e7:af:78:bc:6b:c8:bd:13:59:0c:01:cc:e7: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:DB:3A:55:FC:04:30:9D:6A:48:96:DD:E4:5F:4F:5C:C6:5E:1E X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:65:4a:9b:6e:1e:97:30:8d:5b:23:7a:55:71:4a:8b:1f:73: 38:bc:b0:8f:e8:d8:bc:29:79:9b:a2:1a:2d:d5:50:a5:fb:4b: 38:9d:0f:18:33:9c:32:3f:a8:4c:3f:df:8c:49:ca:64:44:48: e4:58:ba:c0:11:1f:0e:e9:95:56:8e:5a:fc:8a:9d:22:87:f7: 43:f9:c2:5c:e7:64:18:a6:76:38:7a:65:49:3a:56:fc:b7:a9: 41:5c:c7:a0:76:98:a8:a8:31:ff:f1:43:4f:15:69:2d:32:21: ee:51:a6:7e:75:ef:67:19:93:ee:ef:7d:2d:b0:75:d9:bf:31: 48:e8:a1:e2:72:1e:9a:f8:1b:f8:ea:41:4e:82:96:0b:4f:4d: 47:98:87:84:82:0e:97:4d:28:4f:b8:c8:ff:f7:7c:5f:2a:24: b0:32:c3:de:08:f8:61:c5:39:1c:e5:14:42:58:00:f7:99:09: 06:2a:58:ec:fb:c6:1e:ab:d0:93:03:e9:0e:31:c2:b0:ba:d6: 82:80:f4:21:6f:20:f6:b2:4b:71:1d:00:cd:9b:ac:89:c7:c3: 9c:11:b0:87:8e:2d:c5:37:42:00:e8:48:a7:e8:8c:42:2e:68: e5:e3:c3:77:d2:d6:ca:fc:de:2a:2e:f6:0b:45:87:96:27:8e: d0:70:96:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUwNTEyMTkzNzA5WhcNMjUwNTE5MTkzNzA5WjAYMRYwFAYD VQQDEw02ODIyNGRlNS1kNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnZ8keWfvkev37QKnEafhUXc+ey3CnykxAEwDAmaW76NK8T/3RTbBuBxDL1x td1XGmHlrQioUTpYoQRl00XTFVMVWtuqKV4fNUKyALXKnRecYwjRnzizE0XzmAjr ciP7tayWx5fNMBWjETWU5bagE2gWozQHGaz97yxJ+wmogr2VyjC1a3p+2nqYLwIx Dl+EVFNOkV6xzKHxRb7lTQUTrYddNdEhWaP+oK/gZngBm/mxZnnKUGCjkLAmJOby A/gBNblsleIiLdr0QsoR4QLwrYd6/CtAgEL3UjpBhnx4wSDSfdUO3QMht8xcHmfM osdWqueveLxryL0TWQwBzOce8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4q2zpV /AQwnWpIlt3kX09cxl4eMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZUqbbh6XMI1bI3pVcUqLH3M4vLCP6Ni8KXmbohot1VCl+0s4nQ8Y M5wyP6hMP9+MScpkREjkWLrAER8O6ZVWjlr8ip0ih/dD+cJc52QYpnY4emVJOlb8 t6lBXMegdpioqDH/8UNPFWktMiHuUaZ+de9nGZPu730tsHXZvzFI6KHich6a+Bv4 6kFOgpYLT01HmIeEgg6XTShPuMj/93xfKiSwMsPeCPhhxTkc5RRCWAD3mQkGKljs +8Yeq9CTA+kOMcKwutaCgPQhbyD2sktxHQDNm6yJx8OcEbCHji3FN0IA6Ein6IxC Lmjl48N30tbK/N4qLvYLRYeWJ47QcJag -----END CERTIFICATE-----Generated at Tue May 13 09:59:31 2025 by rpki-client