$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: x+yAYsPoH+gf5bG//+rmrtR0em8CyWpIe6JfA/fitE0= Subject key identifier: 9C:2C:77:F3:92:DB:91:CF:DC:37:84:3F:97:0D:25:67:BA:C9:42:D4 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0AE7 Signing time: Fri 28 Mar 2025 19:33:31 +0000 Manifest this update: Fri 28 Mar 2025 19:33:30 +0000 Manifest next update: Fri 04 Apr 2025 19:33:30 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: TWTIsJO0byI3fYuN3OGKbBDUZZDgOGwpAyopdzyd6bQ=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F Validity Not Before: Mar 28 19:33:30 2025 GMT Not After : Apr 4 19:33:30 2025 GMT Subject: CN=67e6f98b-01c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:17:08:68:b7:d6:ee:39:ff:ee:6a:cb:95: 71:79:0b:95:71:b9:a1:2f:81:8f:52:99:b0:33:a1: 51:5c:44:26:6e:eb:0e:97:40:4d:0c:02:03:fe:56: 14:b3:60:e0:4f:da:59:56:17:19:eb:8e:1f:ec:ae: bf:d0:58:71:7b:2c:3a:38:e3:f9:12:96:49:16:15: ad:38:5b:b0:20:f5:8c:a2:ff:c2:a7:aa:0b:ca:e3: 46:03:39:e6:0c:ab:6b:0b:07:5f:5a:ed:60:fb:de: 6b:b0:7c:6f:74:93:f8:fc:ae:47:cd:ba:c3:91:47: e5:06:e3:82:55:21:60:9c:c3:45:c8:03:3c:56:7f: 17:05:7e:fa:d8:10:ff:b4:bc:4c:a3:e9:e5:0d:a6: 03:62:4d:81:18:00:90:58:71:da:b6:fe:bc:b0:10: 04:4c:4e:08:1d:92:2a:5a:5c:dd:9e:8f:2b:0e:3d: dd:6c:bf:d3:88:cb:41:67:09:ad:c6:d4:8b:44:70: 70:c1:be:1d:44:05:7d:e0:1b:cf:34:39:cf:21:de: 95:78:05:88:24:8f:1b:1d:56:f9:9e:4f:23:c3:10: 7c:8e:ed:27:3b:50:27:98:c4:8f:70:65:91:30:c7: c1:65:b9:6d:b6:57:77:0e:8a:4b:5e:6a:cb:38:1c: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:77:F3:92:DB:91:CF:DC:37:84:3F:97:0D:25:67:BA:C9:42:D4 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:9e:27:23:3c:ff:7f:d6:c3:93:d7:80:66:3a:98:60:91: 6f:07:13:67:06:0c:b8:a6:4a:5c:0b:a1:df:34:5b:84:68:38: 8a:3d:d1:c1:26:3a:ea:55:4c:c0:12:6f:52:07:d9:38:e7:86: 0d:5b:11:a3:b2:df:2a:9e:bd:c2:1d:d8:99:af:f2:f6:70:c2: 30:56:83:ee:33:8c:4f:7c:87:8f:10:f2:9a:dc:02:cd:88:d1: 0d:9e:0f:b1:d4:71:a5:c5:c3:8d:a9:1c:ac:0f:a8:11:46:1d: 7e:d7:bc:8b:ff:33:8d:04:84:19:98:08:07:2d:7b:1e:e0:35: 17:ab:0b:4a:8c:6c:07:ef:0d:31:ad:4b:55:33:e6:50:12:1c: 6b:ee:4a:e6:52:e8:bf:c5:9b:4d:cb:39:9d:7d:80:db:f8:4d: 78:1a:73:61:45:38:ed:04:5a:01:eb:2a:8e:cb:89:da:98:4e: 47:48:63:87:47:e0:d5:57:ed:5a:e0:e1:90:58:87:75:54:97: af:20:82:28:18:3a:4d:79:8c:c9:f3:ae:95:5b:21:17:a4:72: a9:b8:a4:07:02:a6:8a:6c:0f:f2:74:b0:c2:76:10:0e:44:00: 04:ee:45:c8:13:7e:b6:16:38:55:92:b2:2e:05:e9:14:54:8c: d7:51:1a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjUwMzI4MTkzMzMwWhcNMjUwNDA0MTkzMzMwWjAYMRYwFAYD VQQDEw02N2U2Zjk4Yi0wMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HwXCGi31u45/+5qy5VxeQuVcbmhL4GPUpmwM6FRXEQmbusOl0BNDAID/lYU s2DgT9pZVhcZ644f7K6/0Fhxeyw6OOP5EpZJFhWtOFuwIPWMov/Cp6oLyuNGAznm DKtrCwdfWu1g+95rsHxvdJP4/K5HzbrDkUflBuOCVSFgnMNFyAM8Vn8XBX762BD/ tLxMo+nlDaYDYk2BGACQWHHatv68sBAETE4IHZIqWlzdno8rDj3dbL/TiMtBZwmt xtSLRHBwwb4dRAV94BvPNDnPId6VeAWIJI8bHVb5nk8jwxB8ju0nO1AnmMSPcGWR MMfBZblttld3DopLXmrLOBwyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwsd/OS 25HP3DeEP5cNJWe6yULUMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIBp4nIzz/f9bDk9eAZjqYYJFvBxNnBgy4pkpcC6HfNFuEaDiKPdHB JjrqVUzAEm9SB9k454YNWxGjst8qnr3CHdiZr/L2cMIwVoPuM4xPfIePEPKa3ALN iNENng+x1HGlxcONqRysD6gRRh1+17yL/zONBIQZmAgHLXse4DUXqwtKjGwH7w0x rUtVM+ZQEhxr7krmUui/xZtNyzmdfYDb+E14GnNhRTjtBFoB6yqOy4namE5HSGOH R+DVV+1a4OGQWId1VJevIIIoGDpNeYzJ866VWyEXpHKpuKQHAqaKbA/ydLDCdhAO RAAE7kXIE362FjhVkrIuBekUVIzXURqc -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:55 2025 by rpki-client