$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json) Hash identifier: PWs53Gq+Av/E5T1C0jcSfZjzUk0CnzhDtH0MGFegWoA= Subject key identifier: C6:50:C0:1E:CA:07:5C:24:86:02:70:33:CB:3D:4A:BF:4A:99:3B:FB Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft Manifest number: 02FC Signing time: Thu 17 Apr 2025 02:31:21 +0000 Manifest this update: Thu 17 Apr 2025 02:31:20 +0000 Manifest next update: Thu 24 Apr 2025 02:31:20 +0000 Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: DqClWsmpa/hBwDBqTYBedanUZv9WmvUh4xL2LL5xQos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Validity Not Before: Apr 17 02:31:20 2025 GMT Not After : Apr 24 02:31:20 2025 GMT Subject: CN=680067f8-fbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:bd:b2:43:fb:f9:f5:97:9b:b1:0c:ed:c1: 71:87:52:a8:92:e9:a9:95:57:ba:c2:89:72:81:8f: d9:ea:ce:0d:07:b8:28:4c:6f:f5:bc:d2:4a:59:00: d0:83:a6:c9:16:6e:cf:36:29:03:f1:2e:c7:11:1b: 60:62:6e:28:3b:aa:e1:75:90:2c:bc:95:e6:19:56: c7:76:6c:e2:b9:ea:1e:e7:d0:4f:81:8f:33:bd:c3: 02:a6:44:19:ca:f2:6d:16:82:d4:94:5e:00:46:d2: 4c:ab:ae:87:ba:5b:b2:a1:d7:9b:eb:d3:b0:de:61: c3:f0:b9:69:77:28:dd:e4:7d:c9:28:f3:1b:b3:d5: 83:42:c3:98:69:e1:20:0f:ed:e0:f9:15:6e:20:96: 57:67:16:ca:33:80:36:2f:e9:37:25:c3:3e:54:ab: c3:ac:2a:fd:89:12:ca:25:7f:64:c6:58:e0:6b:8b: 70:87:31:df:73:14:25:46:1a:60:f9:df:7f:44:f1: 23:fa:c8:4e:e7:54:c1:8b:34:93:ed:4e:b7:6a:22: 8f:09:73:94:57:47:b7:75:ed:ac:60:6b:e1:9d:77: ae:db:1e:80:98:76:9d:da:77:de:f7:63:d1:1d:ed: c9:9a:7c:13:82:20:e7:50:48:90:a6:79:66:92:b3: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:50:C0:1E:CA:07:5C:24:86:02:70:33:CB:3D:4A:BF:4A:99:3B:FB X509v3 Authority Key Identifier: keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6a:41:67:0b:9e:c8:47:ec:c5:25:05:8f:83:53:de:9a:4d: 9d:9b:4b:f9:c3:36:cb:2c:44:91:0b:55:37:eb:d6:08:20:7d: 25:37:a1:83:1e:dc:22:3b:d3:a7:48:b0:1c:05:9a:db:e0:a3: f4:2b:78:bd:7d:44:d7:96:65:8a:3d:c2:b8:0b:13:f4:2f:a1: a7:f8:94:c3:15:fa:44:93:f3:73:77:f4:f1:04:40:79:42:8d: a5:ce:53:b9:db:2f:e0:ea:44:17:e6:85:86:05:5e:b0:c0:98: 6f:af:b9:42:7e:77:69:89:38:71:bd:4a:df:c3:90:7b:98:9e: 71:e6:22:9d:b0:a8:90:cc:3f:22:d6:99:3c:49:60:e8:62:84: 70:9c:83:16:47:0d:d5:07:a2:bb:4f:9d:bd:98:5e:de:d4:cf: 81:32:9a:2c:de:ea:42:f5:25:f5:72:63:c2:55:da:05:90:37: e7:24:21:21:8c:35:1c:f2:46:79:ab:8a:ad:52:1c:8a:b6:ae: 82:57:dd:e0:c0:86:06:b4:00:26:5d:c4:6a:38:cb:99:8d:69: 80:10:88:25:0f:47:a3:d5:6b:0b:49:1a:59:03:eb:55:f0:0b: 8f:0e:35:36:55:6f:0e:f8:09:66:5c:bf:8f:cd:2a:c3:e9:8b: 21:1e:73:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDQ4QkZEODA4MTlBRjE3RkJDMDg3NUU2MjA2RjAyODIy QTdCMDRFOTgwHhcNMjUwNDE3MDIzMTIwWhcNMjUwNDI0MDIzMTIwWjAYMRYwFAYD VQQDEw02ODAwNjdmOC1mYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxm9skP7+fWXm7EM7cFxh1KokumplVe6wolygY/Z6s4NB7goTG/1vNJKWQDQ g6bJFm7PNikD8S7HERtgYm4oO6rhdZAsvJXmGVbHdmziueoe59BPgY8zvcMCpkQZ yvJtFoLUlF4ARtJMq66Huluyodeb69Ow3mHD8Llpdyjd5H3JKPMbs9WDQsOYaeEg D+3g+RVuIJZXZxbKM4A2L+k3JcM+VKvDrCr9iRLKJX9kxljga4twhzHfcxQlRhpg +d9/RPEj+shO51TBizST7U63aiKPCXOUV0e3de2sYGvhnXeu2x6AmHad2nfe92PR He3JmnwTgiDnUEiQpnlmkrOcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZQwB7K B1wkhgJwM8s9Sr9KmTv7MB8GA1UdIwQYMBaAFEi/2AgZrxf7wIdeYgbwKCKnsE6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZfdkFoMTVpQnZBb0lxZXdU cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMX1lDQm12Rl92QWgxNWlCdkFvSXFld1RwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZf dkFoMTVpQnZBb0lxZXdUcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkakFnC57IR+zFJQWPg1Pemk2dm0v5wzbLLESRC1U369YIIH0lN6GD HtwiO9OnSLAcBZrb4KP0K3i9fUTXlmWKPcK4CxP0L6Gn+JTDFfpEk/Nzd/TxBEB5 Qo2lzlO52y/g6kQX5oWGBV6wwJhvr7lCfndpiThxvUrfw5B7mJ5x5iKdsKiQzD8i 1pk8SWDoYoRwnIMWRw3VB6K7T529mF7e1M+BMpos3upC9SX1cmPCVdoFkDfnJCEh jDUc8kZ5q4qtUhyKtq6CV93gwIYGtAAmXcRqOMuZjWmAEIglD0ej1WsLSRpZA+tV 8AuPDjU2VW8O+AlmXL+PzSrD6YshHnNP -----END CERTIFICATE-----Generated at Fri Apr 18 15:14:27 2025 by rpki-client