$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: ZLJxaPTaq/ScXvaSp3IzS8Uay86WJRbDXEDs0pnAACM= Subject key identifier: 54:D8:97:90:A8:64:27:DE:59:A9:E0:6C:A6:99:7D:70:F8:94:C0:DF Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 07EF Signing time: Sat 10 May 2025 20:37:30 +0000 Manifest this update: Sat 10 May 2025 20:37:30 +0000 Manifest next update: Sat 17 May 2025 20:37:30 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: zDpJC4ByoUs5MMXEnP4sMoe+eDnB5mAUhX5ENSAfRZA=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: UFJMOp2fvjsQLVH9S8VvXu+lCDjqJ5yXKWYrWh7iDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: May 10 20:37:30 2025 GMT Not After : May 17 20:37:30 2025 GMT Subject: CN=681fb90a-e2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:02:91:86:cf:cd:71:18:bd:c7:2e:ff:a5: dc:a6:fc:5c:8a:52:15:5e:71:bf:33:99:03:a6:91: 0b:8a:67:7a:a3:75:ba:40:c6:a0:78:24:69:ef:68: ec:66:6f:7e:4e:ad:f2:46:e6:2c:de:6f:ca:95:bc: 87:d4:4e:45:4a:fa:5e:34:90:1c:47:3b:35:ec:6e: 65:04:3f:2c:c5:24:b8:3f:23:69:ab:83:c2:4a:20: e0:d5:6a:1a:d6:59:2f:2a:76:56:0c:0f:12:3b:b7: 16:74:3f:56:8f:aa:ab:e7:31:2d:be:a0:00:c6:56: 9a:01:c9:0b:4c:ba:cb:f6:36:74:c4:6b:74:f3:fc: 03:c0:07:0c:9a:c6:6d:3b:a7:eb:05:db:53:8f:09: 19:9a:7d:12:bd:f1:45:9e:f8:9d:56:84:65:1d:a5: 9c:67:a3:2b:f1:b7:61:fb:04:9a:f3:b0:8c:27:d3: 3f:36:35:02:1f:dc:f8:9d:cd:02:78:6e:44:cb:a7: 71:c6:2d:bc:57:41:8a:a4:61:bd:0e:64:18:ef:dc: 79:fe:c3:4a:9d:fc:5b:c6:f9:49:fb:1d:99:38:a4: cf:e6:33:7e:8a:27:1c:d5:41:7b:fb:30:b8:d0:11: 9c:e2:1e:e2:2d:5f:4e:c8:c8:70:e9:fa:ff:7d:09: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:97:90:A8:64:27:DE:59:A9:E0:6C:A6:99:7D:70:F8:94:C0:DF X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:78:9e:a2:72:a2:8e:9f:9e:94:4d:ae:59:7b:55:53:dd: e5:a2:55:08:74:50:f1:ff:2d:fd:c1:83:84:1a:82:a9:f4:ee: c7:2c:bc:92:d5:76:db:16:1b:01:65:4e:34:db:ae:ae:28:34: 6e:c8:28:33:2d:d3:5c:df:94:6f:5a:df:cc:66:cc:31:bd:99: 00:10:54:e3:e0:0b:73:dd:93:b8:04:9e:d6:8b:d9:01:68:f7: 0d:f2:7a:7d:7e:6d:ed:aa:bd:aa:5d:c9:72:c2:97:89:6b:f2: 57:9f:2f:ac:fd:b6:2c:69:0c:86:92:f8:3c:10:37:63:44:98: 18:9e:9c:89:ea:a1:8c:20:47:c6:18:a2:a1:a9:ff:6b:fa:95: 38:4c:fb:8e:1b:b7:2a:5f:36:a2:c0:b8:d7:a7:4e:0e:df:66: 91:28:35:3d:06:ac:8d:f0:fc:40:0a:2b:0c:86:54:79:31:25: 7b:3d:5e:b4:b1:b0:f7:f3:45:5e:3b:35:15:1a:ce:54:f1:12: 9f:7f:47:39:05:41:62:23:ae:83:0f:fa:90:43:c4:57:f7:76: 2c:41:5d:aa:23:b0:8b:ce:81:51:e0:ce:80:39:a8:15:f2:bb: a2:23:08:89:55:8a:10:29:97:71:e3:f5:68:77:19:75:da:c9: 57:a2:4a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwNTEwMjAzNzMwWhcNMjUwNTE3MjAzNzMwWjAYMRYwFAYD VQQDEw02ODFmYjkwYS1lMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BgCkYbPzXEYvccu/6XcpvxcilIVXnG/M5kDppELimd6o3W6QMageCRp72js Zm9+Tq3yRuYs3m/KlbyH1E5FSvpeNJAcRzs17G5lBD8sxSS4PyNpq4PCSiDg1Woa 1lkvKnZWDA8SO7cWdD9Wj6qr5zEtvqAAxlaaAckLTLrL9jZ0xGt08/wDwAcMmsZt O6frBdtTjwkZmn0SvfFFnvidVoRlHaWcZ6Mr8bdh+wSa87CMJ9M/NjUCH9z4nc0C eG5Ey6dxxi28V0GKpGG9DmQY79x5/sNKnfxbxvlJ+x2ZOKTP5jN+iicc1UF7+zC4 0BGc4h7iLV9OyMhw6fr/fQnW0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTYl5Co ZCfeWangbKaZfXD4lMDfMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKRnieonKijp+elE2uWXtVU93lolUIdFDx/y39wYOEGoKp9O7HLLyS 1XbbFhsBZU40266uKDRuyCgzLdNc35RvWt/MZswxvZkAEFTj4Atz3ZO4BJ7Wi9kB aPcN8np9fm3tqr2qXclywpeJa/JXny+s/bYsaQyGkvg8EDdjRJgYnpyJ6qGMIEfG GKKhqf9r+pU4TPuOG7cqXzaiwLjXp04O32aRKDU9BqyN8PxACisMhlR5MSV7PV60 sbD380VeOzUVGs5U8RKff0c5BUFiI66DD/qQQ8RX93YsQV2qI7CLzoFR4M6AOagV 8ruiIwiJVYoQKZdx4/Vodxl12slXokpS -----END CERTIFICATE-----Generated at Mon May 12 13:33:13 2025 by rpki-client