$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json) Hash identifier: HvzlwGH5QoypsNBoM2Q09bZ//BnABW11xRKKJ59g9NQ= Subject key identifier: DE:20:16:70:46:09:E0:2A:A3:A2:F1:06:16:31:0B:2C:F0:B0:EC:BC Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft Manifest number: 0A22 Signing time: Thu 08 May 2025 19:44:09 +0000 Manifest this update: Thu 08 May 2025 19:44:09 +0000 Manifest next update: Thu 15 May 2025 19:44:09 +0000 Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: tgmDcrC75+LCaGeM8ocL8R+JFm6UxyJt2MedHeepm+A=) 2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: May 8 19:44:09 2025 GMT Not After : May 15 19:44:09 2025 GMT Subject: CN=681d0989-54b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:46:cb:22:06:0b:17:a5:5e:8f:6e:46:e3: 32:9b:3d:7e:0e:76:e5:02:2d:cc:08:37:d6:43:92: d1:51:fb:89:fe:65:2d:41:e8:a1:47:12:26:b7:8f: 01:04:f4:89:2e:b9:95:33:0d:a3:6a:3b:e2:b6:3a: 6e:5a:91:d7:4e:02:d2:06:54:1e:e0:b8:3b:fc:0a: 74:f0:46:fe:5f:a7:20:39:3f:76:e4:0e:3e:91:09: 31:c1:d3:ce:29:cf:cb:16:32:9a:9d:cd:80:28:25: 76:50:d7:59:ed:a7:ad:a9:81:e6:a4:37:f1:cc:84: 36:07:2c:45:c8:62:d6:ed:b8:f1:1b:b7:5a:c0:ba: ab:ba:f3:94:a8:61:e0:c9:a1:56:1d:81:08:db:63: f1:43:b4:b6:3f:93:c2:7d:7f:04:57:13:f1:f1:6b: f0:53:a9:db:f3:9b:70:f9:94:9f:4d:a8:fb:e8:77: 60:e7:c9:69:c6:50:cc:5a:2e:6e:75:74:dd:cf:cc: 39:fa:fc:4a:cc:26:21:3a:49:c4:39:45:a1:cf:b2: 71:8d:2d:c5:5b:5e:23:a7:f2:93:ba:35:a9:34:d3: 92:d6:2c:fe:83:25:29:5e:9f:f0:11:7a:b9:7e:ef: 0f:e3:6c:20:04:71:91:4c:09:c0:4a:b7:8d:71:5c: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:16:70:46:09:E0:2A:A3:A2:F1:06:16:31:0B:2C:F0:B0:EC:BC X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8a:ff:af:07:de:d4:28:40:37:47:83:a8:4d:9f:35:07:cb: f7:ef:3a:62:4b:d6:3d:24:23:da:ff:ba:9b:07:70:b6:d1:85: 19:24:cc:28:8c:42:ac:5b:b3:ed:3b:b2:70:87:02:67:52:fa: 6d:62:d7:80:b2:48:ae:ee:b6:e2:e7:e1:76:7a:d2:45:b7:66: 33:40:e4:1a:8f:01:83:39:a7:ad:88:6e:29:60:4a:5e:fb:b1: ed:64:3e:b0:4a:ae:c5:b8:ea:cf:26:2e:d1:f4:6a:f9:e1:f6: 6e:db:cc:e5:33:af:cb:9f:96:52:60:d4:3d:0c:74:9c:7f:8f: 34:d2:f3:57:f4:3a:1d:24:5a:be:64:93:9d:ac:ac:9f:93:73: f6:5d:9c:dd:23:48:dc:d7:36:48:54:41:e0:cf:28:d2:f0:03: b9:7a:71:aa:58:31:c5:42:d0:b2:49:aa:50:aa:4c:14:0e:43: 7c:85:13:a0:73:92:fd:ab:8b:03:43:0b:8a:3f:a7:be:c2:41: 3f:41:80:05:6e:b5:70:6f:56:46:28:c8:64:ab:1f:d2:fe:43: 5b:d5:e0:83:5a:23:f0:34:d2:c8:7a:ad:7d:72:e6:ab:98:01: 42:5b:8f:e8:0f:4c:2e:73:00:bd:e6:7a:86:b4:fb:57:fc:b3: 32:1d:cd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjUwNTA4MTk0NDA5WhcNMjUwNTE1MTk0NDA5WjAYMRYwFAYD VQQDEw02ODFkMDk4OS01NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTxGyyIGCxelXo9uRuMymz1+DnblAi3MCDfWQ5LRUfuJ/mUtQeihRxImt48B BPSJLrmVMw2jajvitjpuWpHXTgLSBlQe4Lg7/Ap08Eb+X6cgOT925A4+kQkxwdPO Kc/LFjKanc2AKCV2UNdZ7aetqYHmpDfxzIQ2ByxFyGLW7bjxG7dawLqruvOUqGHg yaFWHYEI22PxQ7S2P5PCfX8EVxPx8WvwU6nb85tw+ZSfTaj76Hdg58lpxlDMWi5u dXTdz8w5+vxKzCYhOknEOUWhz7JxjS3FW14jp/KTujWpNNOS1iz+gyUpXp/wEXq5 fu8P42wgBHGRTAnASreNcVx7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4gFnBG CeAqo6LxBhYxCyzwsOy8MB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTgyNC84QkZGM0JCNDZFN0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRu RThfY2dnWE1MN0lYaEdLNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6iv+vB97UKEA3R4OoTZ81B8v37zpiS9Y9JCPa/7qbB3C20YUZJMwo jEKsW7PtO7JwhwJnUvptYteAskiu7rbi5+F2etJFt2YzQOQajwGDOaetiG4pYEpe +7HtZD6wSq7FuOrPJi7R9Gr54fZu28zlM6/Ln5ZSYNQ9DHScf4800vNX9DodJFq+ ZJOdrKyfk3P2XZzdI0jc1zZIVEHgzyjS8AO5enGqWDHFQtCySapQqkwUDkN8hROg c5L9q4sDQwuKP6e+wkE/QYAFbrVwb1ZGKMhkqx/S/kNb1eCDWiPwNNLIeq19cuar mAFCW4/oD0wucwC95nqGtPtX/LMyHc3k -----END CERTIFICATE-----Generated at Sat May 10 07:57:37 2025 by rpki-client