$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json) Hash identifier: 2CsytSFyWnUBZnEf1bEsMv7Qjq/c0L7L8lUIFTfrwx0= Subject key identifier: FB:5D:28:E7:E6:00:4F:9C:DF:FA:33:20:CD:15:62:05:CE:F1:E0:1A Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 0A26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft Manifest number: 0A19 Signing time: Sun 20 Apr 2025 19:35:44 +0000 Manifest this update: Sun 20 Apr 2025 19:35:43 +0000 Manifest next update: Sun 27 Apr 2025 19:35:43 +0000 Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: bmJT9m6yIAi1hjScb1WUs1jeDSi8nt0/+kraFxbuNck=) 2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2598 (0xa26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: Apr 20 19:35:43 2025 GMT Not After : Apr 27 19:35:43 2025 GMT Subject: CN=68054c8f-0d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:1f:05:1b:b9:00:37:54:df:2f:4f:1b:7e: 88:70:53:dd:e3:8e:8a:1b:4a:40:90:c9:e2:7d:b2: 20:5c:6a:26:b1:01:68:22:a0:61:fe:35:8e:ae:da: 56:8e:6c:d3:80:59:da:28:5e:1d:f2:ff:10:0c:40: 90:3e:19:ec:c1:bf:08:4a:83:a1:c8:9e:9f:33:7b: b6:c8:d8:42:c0:29:af:e0:46:26:63:fa:a7:a3:57: 9d:52:cb:13:b3:05:67:c1:7b:01:06:ee:5c:f0:f1: e9:37:12:e8:d1:c9:f5:ac:ae:16:46:13:65:da:92: 88:6d:2f:8b:95:4a:94:5f:58:da:95:17:a6:e9:a1: fa:43:45:42:70:46:e8:ce:c5:60:0a:ff:98:bb:47: de:c7:09:88:6b:c1:e4:9c:e4:f5:11:6d:78:78:12: 4c:df:03:94:f4:ef:ef:fc:ab:6e:c6:8f:c5:50:a9: cc:5b:1c:5d:91:b8:e5:eb:48:9b:03:24:30:93:b8: ab:3f:32:76:32:ac:46:10:23:f3:c5:55:cb:2a:47: 99:67:4d:db:dd:d1:f3:24:96:c0:dc:8b:a9:d8:6c: 4b:bc:76:1a:d5:93:15:55:bd:21:45:ec:5f:f9:f4: 55:08:02:e6:bf:3e:59:57:ad:ee:54:2c:26:3f:39: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:28:E7:E6:00:4F:9C:DF:FA:33:20:CD:15:62:05:CE:F1:E0:1A X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:97:37:6f:a5:b5:21:9f:38:15:73:34:b9:a6:28:91:c5:fd: 8d:be:08:53:92:47:79:58:34:2a:e9:fc:d3:10:71:06:69:95: c5:60:5e:66:da:fd:71:9a:7e:ac:a3:bb:3f:92:54:2c:d6:54: 51:18:71:5d:8a:47:57:56:bf:ce:28:84:a7:12:ba:e2:64:3e: 49:b4:59:22:ef:5e:70:01:42:32:08:63:8c:ab:6b:b3:01:54: 7b:cb:ad:3f:13:38:19:a8:11:40:6b:58:88:b0:6a:7b:59:28: 30:cf:b7:e5:f9:d0:57:b1:d6:a9:61:bb:3f:0a:ef:c6:f9:9f: 60:fb:e7:0b:70:05:05:f1:3d:42:c6:d4:52:61:76:e4:f9:2d: 66:06:37:eb:64:7b:fd:df:f6:1c:85:d1:b7:bb:37:11:c5:03: 92:c3:02:32:7f:c1:43:d8:49:58:09:91:88:e2:6d:0b:b5:6e: 8a:44:a0:ec:aa:39:a5:a3:8a:51:1a:a9:98:5c:a6:ac:d3:80: 56:f4:9a:56:0f:c3:bc:d1:37:ca:71:f6:6c:71:38:23:d3:c3: 88:a4:66:ea:bb:24:c5:1d:fd:a3:35:fe:df:56:60:c8:2a:ca: 4c:c4:e3:64:ef:91:55:be:a1:8b:54:91:6f:c8:f5:c2:1b:10: d6:3f:74:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjUwNDIwMTkzNTQzWhcNMjUwNDI3MTkzNTQzWjAYMRYwFAYD VQQDEw02ODA1NGM4Zi0wZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywAfBRu5ADdU3y9PG36IcFPd446KG0pAkMnifbIgXGomsQFoIqBh/jWOrtpW jmzTgFnaKF4d8v8QDECQPhnswb8ISoOhyJ6fM3u2yNhCwCmv4EYmY/qno1edUssT swVnwXsBBu5c8PHpNxLo0cn1rK4WRhNl2pKIbS+LlUqUX1jalRem6aH6Q0VCcEbo zsVgCv+Yu0fexwmIa8HknOT1EW14eBJM3wOU9O/v/Ktuxo/FUKnMWxxdkbjl60ib AyQwk7irPzJ2MqxGECPzxVXLKkeZZ03b3dHzJJbA3Iup2GxLvHYa1ZMVVb0hRexf +fRVCALmvz5ZV63uVCwmPzludQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtdKOfm AE+c3/ozIM0VYgXO8eAaMB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTgyNC84QkZGM0JCNDZFN0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRu RThfY2dnWE1MN0lYaEdLNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlzdvpbUhnzgVczS5piiRxf2NvghTkkd5WDQq6fzTEHEGaZXFYF5m 2v1xmn6so7s/klQs1lRRGHFdikdXVr/OKISnErriZD5JtFki715wAUIyCGOMq2uz AVR7y60/EzgZqBFAa1iIsGp7WSgwz7fl+dBXsdapYbs/Cu/G+Z9g++cLcAUF8T1C xtRSYXbk+S1mBjfrZHv93/YchdG3uzcRxQOSwwIyf8FD2ElYCZGI4m0LtW6KRKDs qjmlo4pRGqmYXKas04BW9JpWD8O80TfKcfZscTgj08OIpGbquyTFHf2jNf7fVmDI KspMxONk75FVvqGLVJFvyPXCGxDWP3Tj -----END CERTIFICATE-----Generated at Mon Apr 21 04:12:52 2025 by rpki-client