$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: L0EUEaAiPoLdppMz1gg0p12EROrmU43F4tqw8FOAe3M= Subject key identifier: FE:62:64:9A:83:E0:C9:10:91:3D:02:2C:BF:03:F9:72:A9:06:3B:D6 Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 0A Signing time: Thu 03 Apr 2025 07:25:40 +0000 Manifest this update: Thu 03 Apr 2025 07:25:40 +0000 Manifest next update: Thu 10 Apr 2025 07:25:40 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: EjQO9KiozsqVGn62yb5UnQDGQRPJCKBVpptbYjhgmuE=) 2: 78407374059511F09E46645EC4F9AE02.roa (hash: IrXjy36RQKi+KndLtYBcRlKIcRl9pF7mIK0dlbNp+zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F Validity Not Before: Apr 3 07:25:40 2025 GMT Not After : Apr 10 07:25:40 2025 GMT Subject: CN=67ee37f4-1e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:7e:2b:a2:31:f7:6d:2d:19:54:b8:3d:f8: fe:16:b6:11:6c:33:f9:98:1e:db:d8:7d:5a:16:22: b7:54:52:4e:28:d8:32:2d:91:0a:c5:c3:18:01:47: e1:6f:4a:d3:40:4c:93:0e:37:a5:05:d5:c2:a3:fd: e5:8d:8c:83:7e:cb:6e:b2:4c:08:57:6b:be:a0:05: 7b:cb:b7:d3:f9:a9:ec:84:46:a1:fd:93:5d:34:4e: fa:9a:8a:e2:07:d4:53:7f:43:04:c2:30:70:58:df: f2:92:11:11:e8:4a:13:aa:5c:6a:e9:9f:79:7d:f7: de:b5:3e:1f:11:45:0c:a3:09:e3:f3:64:dd:83:f9: a0:6b:10:9c:51:9b:d0:14:59:68:c6:a7:60:99:47: e1:15:0c:8a:f3:0b:d2:37:7f:37:0f:de:b1:0b:28: ac:a4:26:4c:d2:a4:07:8a:c6:b5:97:fa:93:e2:a2: ba:fc:fd:bf:21:0e:91:24:da:e0:ff:c1:33:77:89: 52:8e:45:c4:4d:f4:0f:75:17:46:99:36:0d:18:8e: 30:0d:05:5a:f8:83:76:c4:59:44:51:7c:09:62:d0: 6b:a0:ef:ef:d9:0c:b3:f2:82:dd:fd:41:6f:a0:cd: a3:65:76:2f:3b:35:34:e7:fc:b0:6b:08:b4:8a:93: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:62:64:9A:83:E0:C9:10:91:3D:02:2C:BF:03:F9:72:A9:06:3B:D6 X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bd:a8:ac:d5:6b:f6:dc:3b:65:a4:fc:e9:4b:53:3b:2f:04: 6a:f6:30:fe:f9:6e:84:82:3e:09:e2:a4:1c:fa:ce:7d:a3:6f: 7c:7d:c9:0b:64:44:a6:27:d5:59:0e:24:6b:32:2f:08:c4:4b: 35:23:7c:71:3c:6a:5b:59:f9:3f:c0:b2:78:e1:cb:1a:46:f3: e7:a7:aa:36:a3:8e:68:63:41:26:9b:54:39:0e:02:ca:4d:31: 61:17:b5:41:b6:92:82:5d:fc:42:9a:64:24:78:8e:dd:8e:d7: 73:9a:11:ca:74:28:21:c6:71:49:df:9d:dd:3b:2b:9f:c2:52: 3d:50:c4:af:36:4f:79:7b:4a:e0:84:41:4c:72:db:af:b0:a9: f0:8b:35:d1:15:47:9c:a0:84:38:cb:74:95:e4:5d:91:d9:a0: ce:23:9e:75:f4:25:ab:16:82:e4:94:f8:93:07:ca:40:e9:46: a7:71:5e:ab:0f:bd:94:a7:b1:df:85:f7:6c:c7:fe:31:9d:38: e1:c8:8d:4b:42:98:f0:3d:8b:d8:a7:ae:11:11:c1:27:e4:d0: 72:83:bf:5e:f1:56:d8:5e:7c:d8:06:b9:cd:5c:34:1d:77:70: 0b:25:50:bf:7d:14:60:d3:28:98:ba:26:b7:e5:01:b6:e2:b8: b5:0d:8c:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA0MDMwNzI1NDBaFw0yNTA0MTAwNzI1NDBaMBgxFjAUBgNV BAMTDTY3ZWUzN2Y0LTFlODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/kn4rojH3bS0ZVLg9+P4WthFsM/mYHtvYfVoWIrdUUk4o2DItkQrFwxgBR+Fv StNATJMON6UF1cKj/eWNjIN+y26yTAhXa76gBXvLt9P5qeyERqH9k100TvqaiuIH 1FN/QwTCMHBY3/KSERHoShOqXGrpn3l99961Ph8RRQyjCePzZN2D+aBrEJxRm9AU WWjGp2CZR+EVDIrzC9I3fzcP3rELKKykJkzSpAeKxrWX+pPiorr8/b8hDpEk2uD/ wTN3iVKORcRN9A91F0aZNg0YjjANBVr4g3bEWURRfAli0Gug7+/ZDLPygt39QW+g zaNldi87NTTn/LBrCLSKkysbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/mJkmoPg yRCRPQIsvwP5cqkGO9YwHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG29qKzVa/bcO2Wk/OlLUzsvBGr2MP75boSCPgnipBz6zn2jb3x9yQtk RKYn1VkOJGsyLwjESzUjfHE8altZ+T/AsnjhyxpG8+enqjajjmhjQSabVDkOAspN MWEXtUG2koJd/EKaZCR4jt2O13OaEcp0KCHGcUnfnd07K5/CUj1QxK82T3l7SuCE QUxy26+wqfCLNdEVR5yghDjLdJXkXZHZoM4jnnX0JasWguSU+JMHykDpRqdxXqsP vZSnsd+F92zH/jGdOOHIjUtCmPA9i9inrhERwSfk0HKDv17xVthefNgGuc1cNB13 cAslUL99FGDTKJi6JrflAbbiuLUNjAE= -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:57 2025 by rpki-client