$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: rQqV6OaT1yBVHwqUe0AIlcV+5YhAbWSlq2vagSY5aFU= Subject key identifier: B4:DA:F1:47:81:33:60:18:19:A7:73:29:3A:EF:32:95:EF:3A:2D:06 Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 010E Signing time: Sun 11 May 2025 03:54:24 +0000 Manifest this update: Sun 11 May 2025 03:54:24 +0000 Manifest next update: Sun 18 May 2025 03:54:24 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: fKRAXBCQBVFso7qBcZis7JcGcqd+iOG4fk3u2nWLaRA=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: May 11 03:54:24 2025 GMT Not After : May 18 03:54:24 2025 GMT Subject: CN=68201f70-5285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:01:32:1b:09:fc:3f:5a:30:93:52:5d:ff: be:11:d7:4c:00:cf:0b:d9:48:b3:82:46:c2:8a:8f: 7c:76:ed:75:51:51:29:4e:d0:71:7c:05:08:26:f3: e8:d1:b5:b1:66:c1:95:18:5f:f6:9c:5b:69:b2:60: b7:0d:a3:f2:44:22:09:8f:ec:15:75:a4:6c:66:f7: 44:78:ec:c6:84:97:1b:46:b1:ab:5f:b9:42:21:c6: 28:ca:e9:e0:f0:92:10:e8:0c:7d:47:0e:4c:6a:4a: e2:ec:13:29:b0:bd:a8:e1:3f:fc:fc:73:be:04:13: ed:9b:6c:8c:91:2a:17:ff:5e:03:83:a9:04:65:cc: 6b:ee:9f:ac:b4:e7:a4:8c:5c:11:d7:3d:96:ba:be: f9:66:19:45:6a:2f:0b:13:ac:55:79:04:0f:99:d2: 57:d1:ee:2d:b8:53:1e:34:25:c0:26:31:ab:eb:56: 27:b1:09:6f:22:d3:88:be:c0:db:eb:2f:d0:35:9f: 4d:4d:eb:56:56:f8:52:9f:29:8e:c8:cc:7f:4e:69: 67:61:54:d4:0d:4a:b9:92:ed:dc:88:0d:66:b3:b2: 71:8f:ea:17:14:3f:b4:d6:81:3b:dc:89:6f:0c:c4: aa:67:7f:50:91:a2:e9:e3:c3:d8:8e:b8:e9:f0:f1: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:F1:47:81:33:60:18:19:A7:73:29:3A:EF:32:95:EF:3A:2D:06 X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:c2:98:b9:19:d4:7e:c7:74:e8:3a:78:18:87:53:d7:88: 0b:4c:4c:e8:eb:33:b5:a2:34:5f:f1:a4:d2:1f:4d:ba:ec:27: da:40:64:a8:07:c1:cd:d3:30:25:7f:59:8f:d9:9c:8c:2e:47: 36:7e:cc:67:e7:30:98:b0:d8:54:33:06:2d:ba:73:20:25:db: c0:a3:fa:a6:fc:4e:cc:93:ad:e9:08:4f:ca:b0:c9:90:20:dd: 2f:ca:7f:0d:54:cc:eb:0e:13:b4:9f:42:33:d4:a5:92:5b:73: c8:71:18:60:3b:21:b4:54:79:4a:13:a6:e1:ad:f1:b8:eb:04: bc:a5:66:55:fd:da:39:ca:3e:cf:d5:6c:9d:1a:00:29:91:1c: 72:27:24:ec:6d:b9:96:4a:58:c2:c9:43:50:3c:27:f5:89:13: d9:06:1b:9e:07:cb:48:42:ff:02:0e:e0:d9:ba:2b:7e:73:34: 36:8a:93:79:2e:66:bd:10:fb:26:1c:7c:55:47:ae:8a:e0:d6: 7a:c6:88:ee:e5:c0:14:99:a8:75:43:3a:37:78:d9:fd:cf:10: 66:54:1c:38:d8:f9:d5:f2:39:0e:9d:82:03:e7:2e:33:ce:55: 76:47:d0:23:0a:fb:cb:13:f6:e3:74:e7:da:6c:04:20:c6:ea: c4:9c:b7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjUwNTExMDM1NDI0WhcNMjUwNTE4MDM1NDI0WjAYMRYwFAYD VQQDEw02ODIwMWY3MC01Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCoBMhsJ/D9aMJNSXf++EddMAM8L2UizgkbCio98du11UVEpTtBxfAUIJvPo 0bWxZsGVGF/2nFtpsmC3DaPyRCIJj+wVdaRsZvdEeOzGhJcbRrGrX7lCIcYoyung 8JIQ6Ax9Rw5Makri7BMpsL2o4T/8/HO+BBPtm2yMkSoX/14Dg6kEZcxr7p+stOek jFwR1z2Wur75ZhlFai8LE6xVeQQPmdJX0e4tuFMeNCXAJjGr61YnsQlvItOIvsDb 6y/QNZ9NTetWVvhSnymOyMx/TmlnYVTUDUq5ku3ciA1ms7Jxj+oXFD+01oE73Ilv DMSqZ39QkaLp48PYjrjp8PH0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTa8UeB M2AYGadzKTrvMpXvOi0GMB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj NkdlY19sVVBILW15TmhDRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBsKYuRnUfsd06Dp4GIdT14gLTEzo6zO1ojRf8aTSH0267CfaQGSo B8HN0zAlf1mP2ZyMLkc2fsxn5zCYsNhUMwYtunMgJdvAo/qm/E7Mk63pCE/KsMmQ IN0vyn8NVMzrDhO0n0Iz1KWSW3PIcRhgOyG0VHlKE6bhrfG46wS8pWZV/do5yj7P 1WydGgApkRxyJyTsbbmWSljCyUNQPCf1iRPZBhueB8tIQv8CDuDZuit+czQ2ipN5 Lma9EPsmHHxVR66K4NZ6xoju5cAUmah1Qzo3eNn9zxBmVBw42PnV8jkOnYID5y4z zlV2R9AjCvvLE/bjdOfabAQgxurEnLeu -----END CERTIFICATE-----Generated at Tue May 13 05:56:03 2025 by rpki-client