$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: O5UfG8n9qT/1QnEQdBD+W2tDQUpcK1wCEtqvGJd/GbY= Subject key identifier: 0F:91:F7:AE:86:F9:22:61:6B:2A:F0:0A:4F:02:FC:EC:CB:C6:49:F9 Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 0104 Signing time: Mon 21 Apr 2025 04:03:23 +0000 Manifest this update: Mon 21 Apr 2025 04:03:22 +0000 Manifest next update: Mon 28 Apr 2025 04:03:22 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: BTBKCnlWXHjveGl7OfP20iuAWjFnk8JIsNQO6TTB8D0=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 04:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: Apr 21 04:03:22 2025 GMT Not After : Apr 28 04:03:22 2025 GMT Subject: CN=6805c38a-d791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:77:32:3f:31:79:9e:56:4b:a5:d4:36:9f: 76:91:3b:61:92:99:c8:a4:fc:34:87:4c:d5:63:17: 94:e4:dc:aa:28:03:5d:5d:1d:66:17:a0:78:a5:c5: bc:7f:5d:55:0a:5f:ec:9d:c1:7b:63:6f:4d:f2:50: f0:9f:66:a3:95:1d:88:1d:c3:f1:93:44:f2:f7:ff: db:93:13:2a:7c:85:ac:19:c2:c2:75:8a:d8:10:0e: d6:31:52:cd:35:3b:65:b9:fd:d3:38:94:33:d4:19: d7:cd:54:be:d6:17:cc:13:77:12:c6:28:34:e0:41: 43:d9:d2:35:8f:00:00:4c:2b:28:24:b0:29:79:24: 2d:29:a5:91:09:9f:00:70:f8:c5:10:1c:97:75:7f: da:9d:8a:a4:aa:b2:ec:8c:b6:07:03:f8:7d:bc:88: f6:96:e0:d1:27:89:4f:3b:10:5e:7d:c6:c8:a9:f7: 20:f7:7b:2c:84:da:10:c5:1e:86:8b:57:a6:78:8c: 2b:5d:50:d4:46:8d:91:2f:ac:43:4c:5e:0b:6f:f1: 01:3d:f7:e0:54:76:6b:40:cd:12:38:07:ae:43:77: 64:5c:1b:b1:76:77:a6:b1:89:37:43:07:42:9e:71: 7d:42:dd:98:a2:0a:77:0f:6b:13:a0:0f:98:ae:39: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:F7:AE:86:F9:22:61:6B:2A:F0:0A:4F:02:FC:EC:CB:C6:49:F9 X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2f:e5:92:16:fe:f9:37:97:23:27:b2:61:1e:00:62:ce:c4: 3d:7c:de:0d:ad:08:c9:57:06:4b:20:95:7b:42:56:33:96:d5: eb:ed:51:ef:95:a5:22:2a:19:e0:26:e7:be:c0:be:e0:1d:a5: 7d:79:af:3a:1a:64:be:13:63:5a:f9:1f:e1:03:0e:33:22:55: 87:97:3d:db:aa:3c:ab:26:bf:11:4d:62:62:d4:92:9b:9f:29: d5:55:c1:ef:b4:ef:b5:50:1a:49:78:7a:a8:1e:88:83:f2:43: 92:4e:10:d0:38:30:de:ae:6d:28:ea:aa:8b:6e:88:a5:d2:6d: 1e:3b:43:1b:e0:33:86:8e:57:c7:63:81:08:8e:ae:6d:d8:df: 52:89:e7:73:e9:20:1b:6d:ca:a1:f6:b5:6c:13:d1:b7:82:97: 17:d2:7d:ff:a2:ba:15:ee:ec:67:6d:5f:38:dc:1d:da:56:bc: 0f:e0:95:da:70:5a:8d:a7:5d:51:ae:29:35:77:62:66:36:e7: d5:4c:50:b2:24:c7:eb:b8:61:36:a5:99:74:f9:16:ae:f1:a6: 82:97:11:66:83:5b:65:d5:2b:b7:fa:2f:98:ef:49:d9:66:cf: 6d:0e:c6:05:8b:8c:1c:a0:c7:7b:ca:b9:6f:6b:3b:d2:43:3b: 4d:0c:d5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjUwNDIxMDQwMzIyWhcNMjUwNDI4MDQwMzIyWjAYMRYwFAYD VQQDEw02ODA1YzM4YS1kNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovl3Mj8xeZ5WS6XUNp92kTthkpnIpPw0h0zVYxeU5NyqKANdXR1mF6B4pcW8 f11VCl/sncF7Y29N8lDwn2ajlR2IHcPxk0Ty9//bkxMqfIWsGcLCdYrYEA7WMVLN NTtluf3TOJQz1BnXzVS+1hfME3cSxig04EFD2dI1jwAATCsoJLApeSQtKaWRCZ8A cPjFEByXdX/anYqkqrLsjLYHA/h9vIj2luDRJ4lPOxBefcbIqfcg93sshNoQxR6G i1emeIwrXVDURo2RL6xDTF4Lb/EBPffgVHZrQM0SOAeuQ3dkXBuxdnemsYk3QwdC nnF9Qt2Yogp3D2sToA+YrjlcNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+R966G +SJhayrwCk8C/OzLxkn5MB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj NkdlY19sVVBILW15TmhDRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaL+WSFv75N5cjJ7JhHgBizsQ9fN4NrQjJVwZLIJV7QlYzltXr7VHv laUiKhngJue+wL7gHaV9ea86GmS+E2Na+R/hAw4zIlWHlz3bqjyrJr8RTWJi1JKb nynVVcHvtO+1UBpJeHqoHoiD8kOSThDQODDerm0o6qqLboil0m0eO0Mb4DOGjlfH Y4EIjq5t2N9Siedz6SAbbcqh9rVsE9G3gpcX0n3/oroV7uxnbV843B3aVrwP4JXa cFqNp11Rrik1d2JmNufVTFCyJMfruGE2pZl0+Rau8aaClxFmg1tl1Su3+i+Y70nZ Zs9tDsYFi4wcoMd7yrlvazvSQztNDNWL -----END CERTIFICATE-----Generated at Mon Apr 21 17:18:21 2025 by rpki-client