$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json) Hash identifier: R77dZ3+PfHwVX7UtpmzzazIMWDj/+6kXihn44UFu3nk= Subject key identifier: 8F:D1:EC:55:B7:2A:8C:13:85:1F:8E:55:3D:A7:25:28:31:5D:8D:55 Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft Manifest number: 0324 Signing time: Sun 11 May 2025 02:21:12 +0000 Manifest this update: Sun 11 May 2025 02:21:12 +0000 Manifest next update: Sun 18 May 2025 02:21:12 +0000 Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: PvwDKR+rrpLeWlONWuBFRphLDphWEIwziu7lOJC4lCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Validity Not Before: May 11 02:21:12 2025 GMT Not After : May 18 02:21:12 2025 GMT Subject: CN=68200998-0dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:47:de:81:14:2c:59:ae:7b:57:11:54:65: 95:b9:1e:14:fb:14:6b:3a:19:54:25:7a:49:a2:ac: c7:21:43:82:07:e7:5e:11:d3:58:ba:ce:47:69:00: e3:03:ac:c6:2e:6d:04:26:1b:bd:e9:3d:74:f2:dd: 2b:35:9e:20:23:2e:8e:b6:e3:a7:1a:91:67:f6:a2: a2:9f:17:c1:c8:d5:ba:87:26:cc:e9:5c:e3:ab:ee: 0b:fc:80:2f:25:b1:7b:e8:7c:a2:24:1f:20:f7:2b: 36:ab:28:24:ec:b5:19:3f:b6:3c:f0:25:07:01:7b: 8f:20:ec:0a:c7:a1:ea:54:c5:33:15:1a:0f:ff:5e: 34:66:b1:cc:f2:80:75:ab:e6:81:ae:6a:d9:2c:98: 51:61:40:ce:02:26:42:8c:fc:3c:cb:2b:4f:d2:3d: 4a:fc:e4:cc:d7:85:bd:d2:71:e1:c8:59:a1:dd:42: d9:be:c5:e1:9a:4e:69:4e:dc:f6:8f:a2:ed:02:32: 01:09:18:85:55:16:d3:f8:ea:a8:6e:c5:2a:f0:03: ee:2b:87:13:bf:16:1c:fa:fb:63:30:45:14:e9:bc: e5:5d:41:24:68:41:d2:f6:18:6b:d9:0e:ca:b1:fb: 59:41:a1:f2:50:14:e1:7e:7b:7c:df:5e:d2:2e:b5: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D1:EC:55:B7:2A:8C:13:85:1F:8E:55:3D:A7:25:28:31:5D:8D:55 X509v3 Authority Key Identifier: keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f5:32:78:6a:cb:7d:42:77:e8:eb:9c:96:48:53:98:9f:fe: 8e:68:f7:05:95:a8:ef:46:7a:a3:44:42:1d:65:a2:33:cc:78: 9c:13:7e:3a:e9:c1:94:99:56:2b:b8:d7:c9:ea:b2:e0:be:aa: b4:e0:bf:f0:e7:8c:3d:3a:ef:a0:6a:12:86:71:be:1e:35:d4: ac:d1:71:45:f9:fc:37:a2:ca:40:a7:7c:3a:a5:49:63:72:90: aa:87:98:5d:44:16:ae:94:3c:39:ab:af:4c:a7:ed:e4:32:56: 2d:b0:97:e1:de:a7:21:03:cf:f5:e9:1c:6e:01:bc:04:b5:3a: d3:56:63:14:63:b9:fd:a7:da:0e:5a:e2:51:9d:9b:0d:11:81: 41:22:7d:ed:29:53:1d:76:64:e5:7e:4a:e5:1f:bf:6c:7b:91: af:a0:ed:49:a6:85:23:71:a2:eb:b8:06:59:40:9f:0d:6d:b6: 35:5a:f3:55:e8:5d:8d:a6:0f:26:d4:ad:ba:96:45:98:6a:65: d4:f6:fb:34:d9:88:d9:5a:9d:40:32:07:4e:4b:e3:06:ff:c0: 49:af:16:d5:b8:5a:52:7d:b1:da:75:25:6d:66:18:a2:21:18: c0:f0:70:50:59:16:38:13:f5:10:e0:2c:ba:ef:85:9a:de:5a: f3:56:fa:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDQ4QkZEODA4MTlBRjE3RkJDMDg3NUU2MjA2RjAyODIy QTdCMDRFOTgwHhcNMjUwNTExMDIyMTEyWhcNMjUwNTE4MDIyMTEyWjAYMRYwFAYD VQQDEw02ODIwMDk5OC0wZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE1H3oEULFmue1cRVGWVuR4U+xRrOhlUJXpJoqzHIUOCB+deEdNYus5HaQDj A6zGLm0EJhu96T108t0rNZ4gIy6OtuOnGpFn9qKinxfByNW6hybM6Vzjq+4L/IAv JbF76HyiJB8g9ys2qygk7LUZP7Y88CUHAXuPIOwKx6HqVMUzFRoP/140ZrHM8oB1 q+aBrmrZLJhRYUDOAiZCjPw8yytP0j1K/OTM14W90nHhyFmh3ULZvsXhmk5pTtz2 j6LtAjIBCRiFVRbT+OqobsUq8APuK4cTvxYc+vtjMEUU6bzlXUEkaEHS9hhr2Q7K sftZQaHyUBThfnt8317SLrVwVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/R7FW3 KowThR+OVT2nJSgxXY1VMB8GA1UdIwQYMBaAFEi/2AgZrxf7wIdeYgbwKCKnsE6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZfdkFoMTVpQnZBb0lxZXdU cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMX1lDQm12Rl92QWgxNWlCdkFvSXFld1RwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZf dkFoMTVpQnZBb0lxZXdUcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI9TJ4ast9Qnfo65yWSFOYn/6OaPcFlajvRnqjREIdZaIzzHicE346 6cGUmVYruNfJ6rLgvqq04L/w54w9Ou+gahKGcb4eNdSs0XFF+fw3ospAp3w6pUlj cpCqh5hdRBaulDw5q69Mp+3kMlYtsJfh3qchA8/16RxuAbwEtTrTVmMUY7n9p9oO WuJRnZsNEYFBIn3tKVMddmTlfkrlH79se5GvoO1JpoUjcaLruAZZQJ8NbbY1WvNV 6F2Npg8m1K26lkWYamXU9vs02YjZWp1AMgdOS+MG/8BJrxbVuFpSfbHadSVtZhii IRjA8HBQWRY4E/UQ4Cy674Wa3lrzVvqb -----END CERTIFICATE-----Generated at Mon May 12 19:46:01 2025 by rpki-client