$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: YiWvnf18JHTNCyAMtOz3y7SJjeTJt5GMcvVN5qU9O/c= Subject key identifier: 2B:2F:EF:6D:54:B8:37:7B:11:0B:EA:BD:F3:64:89:24:8D:0F:9B:5B Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 080F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 080A Signing time: Fri 04 Jul 2025 21:13:45 +0000 Manifest this update: Fri 04 Jul 2025 21:13:44 +0000 Manifest next update: Fri 11 Jul 2025 21:13:44 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: aex3Lt1O0XoKxAdtqh+9a4u/aX8ObTD3kRZKZcL25P4=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: UFJMOp2fvjsQLVH9S8VvXu+lCDjqJ5yXKWYrWh7iDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Jul 4 21:13:44 2025 GMT Not After : Jul 11 21:13:44 2025 GMT Subject: CN=68684409-3275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:66:e5:3e:f4:95:c7:ac:f4:de:26:de:0c: 0e:a0:16:0e:11:79:79:d4:50:d8:50:f9:7c:48:c2: a1:fb:cb:06:22:6e:c5:fa:a1:8c:a0:9c:a7:37:17: b1:9b:67:12:da:60:60:a2:cf:4e:d8:6e:ed:18:8d: 2b:93:95:94:5c:96:c5:5c:27:98:4e:b7:b9:33:20: 5d:15:89:91:8c:75:7a:ed:56:73:33:b4:b7:07:20: 1b:dd:6a:cb:e8:99:6b:aa:8a:3c:e4:63:87:44:67: 97:2b:95:6c:fc:1e:80:dd:66:64:77:17:c1:cb:80: 7a:fa:dd:5a:5c:58:68:e3:4d:01:38:04:b3:23:ab: 6d:36:c5:e5:f5:39:93:eb:93:a0:d6:3f:5e:e3:51: 2c:65:05:cb:41:28:eb:1d:47:2a:65:af:aa:4e:f4: b1:d4:b3:05:a5:ab:61:86:40:fc:3c:35:76:21:1d: 32:62:6c:b7:98:a5:99:e2:32:fc:48:82:2d:23:6c: c0:ff:b7:ee:c3:1c:9e:4f:6c:ee:e8:cf:ad:a4:c6: bb:11:e3:03:1f:eb:72:81:cc:b5:7c:76:fc:e6:c8: ae:b6:92:ce:11:23:03:8c:1d:5a:fa:2e:ff:61:3e: 02:a1:34:8b:43:e8:ed:49:a0:24:87:3e:88:08:14: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:EF:6D:54:B8:37:7B:11:0B:EA:BD:F3:64:89:24:8D:0F:9B:5B X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:2d:17:39:5e:65:ae:2e:29:cc:26:6c:8a:a1:9e:ab:b0: 1c:8f:5a:aa:7e:5d:37:96:7f:21:6b:eb:94:a8:98:ef:28:01: 74:f2:4c:fc:dc:6d:7c:d4:80:57:a1:59:67:ad:2b:4d:46:61: 42:de:c4:ae:19:46:c9:e6:01:1c:48:1e:9f:22:89:20:db:fc: 0f:f8:a8:0e:8e:fa:67:bf:eb:9d:f4:d6:54:20:ab:0f:ee:d2: 46:35:c2:1f:a0:a8:9d:ea:f9:ff:82:e7:d8:4c:e1:24:37:5b: 3c:4d:d4:d0:c7:65:24:4f:a6:c0:0a:4a:25:f7:6c:50:a4:b1: c4:d6:f1:f2:c6:ff:9f:f1:3a:18:38:40:18:04:e5:68:bd:55: 74:f7:18:96:e4:76:d4:4f:da:37:41:0f:06:0a:cd:af:96:d1: da:f3:88:34:1b:0f:0f:e4:77:4c:73:c6:03:a9:57:2e:29:15: c3:32:1b:03:2d:1c:40:92:2a:87:7e:56:80:ed:98:32:0c:96: 1d:d5:2b:97:dc:80:2a:1d:a4:c2:df:c5:93:e2:7d:94:45:68: f4:bd:19:75:41:f6:52:b1:8e:0a:a7:af:a6:ab:97:b1:a8:1c: c3:ce:9b:23:68:3a:f4:d6:e2:08:df:d1:50:59:a2:bb:b2:77: 93:2b:e3:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwNzA0MjExMzQ0WhcNMjUwNzExMjExMzQ0WjAYMRYwFAYD VQQDEw02ODY4NDQwOS0zMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygRm5T70lces9N4m3gwOoBYOEXl51FDYUPl8SMKh+8sGIm7F+qGMoJynNxex m2cS2mBgos9O2G7tGI0rk5WUXJbFXCeYTre5MyBdFYmRjHV67VZzM7S3ByAb3WrL 6Jlrqoo85GOHRGeXK5Vs/B6A3WZkdxfBy4B6+t1aXFho400BOASzI6ttNsXl9TmT 65Og1j9e41EsZQXLQSjrHUcqZa+qTvSx1LMFpathhkD8PDV2IR0yYmy3mKWZ4jL8 SIItI2zA/7fuwxyeT2zu6M+tpMa7EeMDH+tygcy1fHb85siutpLOESMDjB1a+i7/ YT4CoTSLQ+jtSaAkhz6ICBT5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsv721U uDd7EQvqvfNkiSSND5tbMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlS0XOV5lri4pzCZsiqGeq7Acj1qqfl03ln8ha+uUqJjvKAF08kz8 3G181IBXoVlnrStNRmFC3sSuGUbJ5gEcSB6fIokg2/wP+KgOjvpnv+ud9NZUIKsP 7tJGNcIfoKid6vn/gufYTOEkN1s8TdTQx2UkT6bACkol92xQpLHE1vHyxv+f8ToY OEAYBOVovVV09xiW5HbUT9o3QQ8GCs2vltHa84g0Gw8P5HdMc8YDqVcuKRXDMhsD LRxAkiqHflaA7ZgyDJYd1SuX3IAqHaTC38WT4n2URWj0vRl1QfZSsY4Kp6+mq5ex qBzDzpsjaDr01uII39FQWaK7sneTK+N0 -----END CERTIFICATE-----Generated at Sat Jul 5 14:35:05 2025 by rpki-client