$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: XVRFhTGEGnvZ5mos7Ytr5EWxbi2NQGnBa0pwHxOBYvA= Subject key identifier: 9D:34:2E:38:D9:46:DC:E9:F9:F7:0D:57:F8:21:D1:24:E6:0E:08:9D Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 21 Signing time: Thu 15 May 2025 07:12:30 +0000 Manifest this update: Thu 15 May 2025 07:12:29 +0000 Manifest next update: Thu 22 May 2025 07:12:29 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: Odc7p6ylJIKOyeJatz3WJmDPq/2w0Xdh/gI6+tUwDyw=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: May 15 07:12:29 2025 GMT Not After : May 22 07:12:29 2025 GMT Subject: CN=682593dd-1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:e3:52:a5:26:95:d4:de:67:bc:7a:7c:b2: 98:f9:43:38:94:ce:81:af:6c:b4:bb:47:b7:5f:c2: 06:24:59:08:43:54:a8:4b:17:e7:43:65:91:ba:f8: c5:f9:9c:64:03:e5:dd:f6:45:8f:11:97:18:ff:d2: 42:10:8c:49:87:e4:5f:2b:4b:61:fd:f6:26:ed:4a: ff:7a:70:17:8d:e9:34:f1:bf:94:05:f9:23:dc:96: d8:8f:45:d6:e2:37:3c:19:d0:65:5d:42:98:d8:6a: 34:5a:fa:03:3c:fe:81:a2:fc:90:9e:9b:c7:6c:05: fa:9e:58:83:e3:bd:ca:99:7f:44:63:d0:21:0e:c8: df:c3:b7:48:c4:b7:72:c8:a9:5d:72:80:a7:fa:79: dc:d0:66:ad:f1:43:02:fe:12:f1:77:69:68:2d:3b: 11:51:fb:13:fa:1d:b4:9d:50:22:58:24:fc:88:79: 56:4f:50:c6:0d:9a:25:4c:e8:60:c4:2f:d2:51:0a: e7:4e:10:37:a2:c2:87:aa:eb:5a:65:10:3a:56:50: b0:69:6c:b0:6c:97:a9:cc:cd:37:88:8e:98:0a:82: a3:a0:3c:62:9e:bb:f5:2b:70:8f:b9:a4:cc:63:94: e4:03:8a:50:e9:54:26:b6:77:f3:f4:55:e4:db:97: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:2E:38:D9:46:DC:E9:F9:F7:0D:57:F8:21:D1:24:E6:0E:08:9D X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5a:64:e1:af:0f:89:f4:f5:93:8c:3b:07:fc:30:0e:c6:98: 3a:41:64:5c:72:10:11:d3:75:37:ae:1e:0d:5e:75:0c:64:c9: 2d:ec:a1:ca:1e:83:6e:fc:3a:7d:b2:72:48:2a:8b:c0:41:29: 74:51:1a:d2:20:75:4a:c9:54:bd:52:ea:e8:95:f1:d1:5d:83: b1:c9:a0:51:c9:0a:38:bc:4e:79:d2:8d:db:4b:b4:2f:d7:db: ea:1d:e6:f6:84:9c:65:6c:73:ef:b4:63:44:e4:4a:6b:fc:94: db:9c:15:ce:a9:2d:fd:6e:37:15:8e:5e:e9:40:f7:49:5e:85: 41:85:42:ac:95:8c:c9:73:4c:ea:39:62:1e:f0:2d:dd:a7:03: 97:9f:b9:09:9d:1b:3b:4c:14:c9:cc:62:b1:27:0a:af:c7:5d: 6c:6a:0d:ae:e1:5f:39:36:60:b0:fb:f5:00:34:ad:0d:67:f3: 35:8e:b7:a4:0f:db:92:0d:88:c2:a9:da:e2:d5:22:94:18:5b: ee:3f:5c:3d:02:8b:09:38:36:b5:61:5f:17:93:a7:cc:9d:45: f6:d3:1d:0e:ed:f6:41:e6:c3:5e:d6:40:1b:24:68:07:c4:5e: 1c:f1:2e:e7:98:35:4a:57:18:11:cb:19:a3:82:d8:bb:2b:18: 15:9f:28:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA1MTUwNzEyMjlaFw0yNTA1MjIwNzEyMjlaMBgxFjAUBgNV BAMTDTY4MjU5M2RkLTEwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCev+NSpSaV1N5nvHp8spj5QziUzoGvbLS7R7dfwgYkWQhDVKhLF+dDZZG6+MX5 nGQD5d32RY8Rlxj/0kIQjEmH5F8rS2H99ibtSv96cBeN6TTxv5QF+SPcltiPRdbi NzwZ0GVdQpjYajRa+gM8/oGi/JCem8dsBfqeWIPjvcqZf0Rj0CEOyN/Dt0jEt3LI qV1ygKf6edzQZq3xQwL+EvF3aWgtOxFR+xP6HbSdUCJYJPyIeVZPUMYNmiVM6GDE L9JRCudOEDeiwoeq61plEDpWULBpbLBsl6nMzTeIjpgKgqOgPGKeu/UrcI+5pMxj lOQDilDpVCa2d/P0VeTbl1b9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTQuONlG 3On59w1X+CHRJOYOCJ0wHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpaZOGvD4n09ZOMOwf8MA7GmDpBZFxyEBHTdTeuHg1edQxkyS3socoe g278On2yckgqi8BBKXRRGtIgdUrJVL1S6uiV8dFdg7HJoFHJCji8TnnSjdtLtC/X 2+od5vaEnGVsc++0Y0TkSmv8lNucFc6pLf1uNxWOXulA90lehUGFQqyVjMlzTOo5 Yh7wLd2nA5efuQmdGztMFMnMYrEnCq/HXWxqDa7hXzk2YLD79QA0rQ1n8zWOt6QP 25INiMKp2uLVIpQYW+4/XD0Ciwk4NrVhXxeTp8ydRfbTHQ7t9kHmw17WQBskaAfE XhzxLueYNUpXGBHLGaOC2LsrGBWfKKU= -----END CERTIFICATE-----Generated at Fri May 16 06:04:27 2025 by rpki-client