$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: 5cS8tXz41q6iiiQwwun3l+aNQ6V2ubQHCXNadk+rtDE= Subject key identifier: FB:B6:61:3F:67:4C:7B:28:07:AA:12:7E:78:F9:FB:99:0B:CB:EC:C4 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 0796 Signing time: Sun 20 Apr 2025 20:57:14 +0000 Manifest this update: Sun 20 Apr 2025 20:57:14 +0000 Manifest next update: Sun 27 Apr 2025 20:57:14 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: 9PYAugd/vK34Z94+1f9qEOC7L67ASpwZSScr5XkRqeA=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Apr 20 20:57:14 2025 GMT Not After : Apr 27 20:57:14 2025 GMT Subject: CN=68055faa-cbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:e3:c5:50:41:1e:42:2f:73:9e:d4:fc:7f: 37:ea:09:f8:9d:09:7e:8a:e4:cd:bf:d8:06:f7:ff: a0:b3:06:6e:38:f8:b7:96:b6:57:e5:05:af:f8:2c: 16:71:f3:e8:f3:7e:97:35:5f:6a:bc:e8:e1:90:00: f7:1f:41:79:48:a1:ac:37:8e:00:be:f1:31:2d:6d: ee:2a:84:20:19:de:f0:44:32:d7:ed:57:eb:2b:9b: 76:f8:2a:e1:fc:2f:ed:e3:1f:28:d4:ca:3b:25:8d: 2c:5e:fb:b8:86:b2:1f:aa:2e:be:55:f2:cf:6c:27: 66:97:3c:9b:88:8f:ee:bd:f8:22:d7:6e:6d:f9:40: 3b:f0:fa:50:f4:78:3e:2a:ae:a0:13:1d:04:6b:4f: 82:f6:c7:1e:b7:8c:a7:d4:8e:0e:24:86:cf:ae:6b: 0b:ed:14:8d:80:19:96:3c:1e:e3:47:56:03:0f:b8: 24:9f:13:68:4f:a3:ac:02:17:31:5c:2d:cb:dd:fd: 0a:52:70:29:bb:05:66:fe:04:aa:39:96:b1:2e:c7: b8:56:83:1e:26:65:d3:39:52:7f:71:cf:55:e9:1a: f3:df:6b:98:21:3d:ce:4c:9b:5d:1d:71:ca:13:60: 8a:bd:14:03:5c:6d:e2:56:b4:47:da:48:1d:71:5b: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:61:3F:67:4C:7B:28:07:AA:12:7E:78:F9:FB:99:0B:CB:EC:C4 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:44:bc:4a:0d:71:90:bf:f4:ca:43:ce:a8:e2:7c:48:ea:5d: 31:c6:64:f4:5a:ce:78:37:e9:69:62:18:25:bb:cd:33:b7:cd: f3:f3:f6:19:29:44:ce:9b:d6:7b:20:4a:c1:d5:a6:2b:1b:ef: d7:ba:89:3a:a4:0c:54:ca:ba:42:55:0b:2f:2a:7b:8c:f1:3d: 21:90:bc:76:9b:5c:5b:7c:bf:ad:b3:49:e0:54:a1:5c:6d:e6: 0a:cc:b5:e0:25:01:f2:de:09:76:b2:79:6e:78:76:2b:6e:b2: 7b:1f:87:f3:c9:e8:b2:6d:eb:81:01:a6:14:1b:c5:9e:6a:2b: 64:71:32:e9:51:43:c3:ee:40:a4:9e:c1:f1:8b:a9:40:f0:1b: 6c:42:47:62:6f:e8:9f:68:a6:e7:61:bb:36:ab:a2:27:07:f3: d4:04:95:bb:a1:bb:98:08:fd:60:89:a2:a6:a5:fb:7b:47:ed: 86:5c:b8:e4:78:42:d8:a8:cb:59:9d:8c:d4:75:f4:32:00:be: ea:1c:a4:24:ec:b5:f0:88:39:e5:e3:49:8c:3c:e0:9c:c5:28: b4:23:b6:13:8f:ac:69:04:51:cb:64:ba:99:d0:85:6d:97:9c: 04:84:12:42:91:87:64:bf:5c:be:3d:69:e8:26:9e:63:c8:ed: a8:bf:21:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUwNDIwMjA1NzE0WhcNMjUwNDI3MjA1NzE0WjAYMRYwFAYD VQQDEw02ODA1NWZhYS1jYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIjjxVBBHkIvc57U/H836gn4nQl+iuTNv9gG9/+gswZuOPi3lrZX5QWv+CwW cfPo836XNV9qvOjhkAD3H0F5SKGsN44AvvExLW3uKoQgGd7wRDLX7VfrK5t2+Crh /C/t4x8o1Mo7JY0sXvu4hrIfqi6+VfLPbCdmlzybiI/uvfgi125t+UA78PpQ9Hg+ Kq6gEx0Ea0+C9scet4yn1I4OJIbPrmsL7RSNgBmWPB7jR1YDD7gknxNoT6OsAhcx XC3L3f0KUnApuwVm/gSqOZaxLse4VoMeJmXTOVJ/cc9V6Rrz32uYIT3OTJtdHXHK E2CKvRQDXG3iVrRH2kgdcVuTYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu2YT9n THsoB6oSfnj5+5kLy+zEMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/RLxKDXGQv/TKQ86o4nxI6l0xxmT0Ws54N+lpYhglu80zt83z8/YZ KUTOm9Z7IErB1aYrG+/Xuok6pAxUyrpCVQsvKnuM8T0hkLx2m1xbfL+ts0ngVKFc beYKzLXgJQHy3gl2snlueHYrbrJ7H4fzyeiybeuBAaYUG8WeaitkcTLpUUPD7kCk nsHxi6lA8BtsQkdib+ifaKbnYbs2q6InB/PUBJW7obuYCP1giaKmpft7R+2GXLjk eELYqMtZnYzUdfQyAL7qHKQk7LXwiDnl40mMPOCcxSi0I7YTj6xpBFHLZLqZ0IVt l5wEhBJCkYdkv1y+PWnoJp5jyO2ovyES -----END CERTIFICATE-----Generated at Sun Apr 20 22:35:44 2025 by rpki-client