$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: oRRwtEmeLyYl9Z8GhnU4/sbMUjJi2C4HMvo8Agnh6Dw= Subject key identifier: 8E:8A:A1:A9:5A:4D:C6:73:6D:F0:B1:4E:D5:4F:04:8F:E3:B4:1D:3E Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0C01 Signing time: Fri 30 May 2025 18:54:24 +0000 Manifest this update: Fri 30 May 2025 18:54:23 +0000 Manifest next update: Fri 06 Jun 2025 18:54:23 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: aWGtdRppIMVsPuPifLOms5S/U8QGDFMdavXkZnBvCao=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: E2q/ZEHSPXl1Ew87PC9tVYqM/dotHBquWrnE6mAYEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: May 30 18:54:23 2025 GMT Not After : Jun 6 18:54:23 2025 GMT Subject: CN=6839fee0-f186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:75:c3:4e:e8:65:69:c9:9b:09:da:a8:ff: 96:5f:9b:25:56:b0:c5:f2:39:7d:54:0e:76:ee:20: 62:95:3a:4d:fa:8e:04:81:21:fd:dc:62:57:e3:44: 32:07:a1:54:50:aa:51:7f:12:17:79:6c:7f:c4:40: d5:23:2b:99:76:4b:eb:6f:54:88:7c:40:20:c1:d9: fc:98:55:a4:9b:76:d4:6c:74:30:d0:51:c9:78:5a: 30:58:12:be:ff:b2:e2:34:19:b6:8a:fa:b8:fe:14: 10:d2:f8:f1:79:68:26:10:a9:e3:41:89:b3:1f:d3: 6b:5e:f5:af:44:74:19:7e:49:84:6f:cb:85:79:f7: 4d:2f:8a:0e:ce:d6:52:ec:8b:fd:6e:58:fb:03:68: ff:f0:4a:03:06:34:11:6a:84:00:d6:8d:c6:75:ff: 45:aa:42:28:b9:0c:8c:ca:28:bb:ca:37:32:ac:d3: 15:a0:81:e7:62:81:87:1b:a1:36:7a:ad:92:35:3d: 56:01:ee:c2:72:60:4e:82:84:0e:eb:8b:59:f3:88: f3:7f:5b:46:16:2c:0f:02:29:09:a5:5b:b4:18:91: d9:8a:58:11:3b:e5:51:86:64:3f:d3:5d:ec:27:ef: bb:c2:c8:b4:15:0d:0d:5e:39:d6:f9:48:78:5c:1e: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:A1:A9:5A:4D:C6:73:6D:F0:B1:4E:D5:4F:04:8F:E3:B4:1D:3E X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fd:80:03:75:b1:c7:68:aa:22:03:23:08:81:9d:6d:22:3d: 09:08:56:09:19:68:d0:36:cf:f4:61:a4:04:f3:0b:21:3b:16: 3c:d2:f5:05:2b:03:e3:56:af:8e:82:4e:c8:b4:87:f8:a6:5c: 2c:60:e7:ea:f3:da:fd:a0:3f:3f:fa:4d:4e:62:7d:34:72:bb: 98:62:73:7a:c1:12:78:dc:36:0d:e8:4a:fa:8a:93:0d:5c:f9: 27:c1:16:b5:1c:f1:d2:f1:34:0b:5a:ef:88:40:6a:b6:ea:d2: 5b:99:8a:9c:78:12:c3:f9:d2:78:3c:ff:91:93:63:b8:ef:6d: c2:7b:54:77:f2:01:bc:8c:aa:d7:3c:76:e5:66:ca:de:06:e4: 2b:41:63:2c:1d:6e:c6:4b:74:cb:f0:90:0b:30:04:b7:2f:ab: 35:f6:fd:2a:3b:bc:5d:17:c9:68:52:83:65:4e:22:90:ad:17: 54:39:ff:9c:84:c1:6d:36:05:4d:47:3e:e8:fb:bd:82:13:11: 70:b4:e9:70:50:47:f9:99:3b:7d:b6:dc:d6:7e:c7:88:ab:02: 29:11:d7:c2:fe:1b:2b:04:7e:74:df:49:04:5d:38:0d:7b:d7: d2:97:55:84:5c:4e:e5:42:e8:9a:ca:e1:10:05:86:4e:bb:29: 90:dd:29:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUwNTMwMTg1NDIzWhcNMjUwNjA2MTg1NDIzWjAYMRYwFAYD VQQDEw02ODM5ZmVlMC1mMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoZ1w07oZWnJmwnaqP+WX5slVrDF8jl9VA527iBilTpN+o4EgSH93GJX40Qy B6FUUKpRfxIXeWx/xEDVIyuZdkvrb1SIfEAgwdn8mFWkm3bUbHQw0FHJeFowWBK+ /7LiNBm2ivq4/hQQ0vjxeWgmEKnjQYmzH9NrXvWvRHQZfkmEb8uFefdNL4oOztZS 7Iv9blj7A2j/8EoDBjQRaoQA1o3Gdf9FqkIouQyMyii7yjcyrNMVoIHnYoGHG6E2 eq2SNT1WAe7CcmBOgoQO64tZ84jzf1tGFiwPAikJpVu0GJHZilgRO+VRhmQ/013s J++7wsi0FQ0NXjnW+Uh4XB7glwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6Koala TcZzbfCxTtVPBI/jtB0+MB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/YADdbHHaKoiAyMIgZ1tIj0JCFYJGWjQNs/0YaQE8wshOxY80vUF KwPjVq+Ogk7ItIf4plwsYOfq89r9oD8/+k1OYn00cruYYnN6wRJ43DYN6Er6ipMN XPknwRa1HPHS8TQLWu+IQGq26tJbmYqceBLD+dJ4PP+Rk2O4723Ce1R38gG8jKrX PHblZsreBuQrQWMsHW7GS3TL8JALMAS3L6s19v0qO7xdF8loUoNlTiKQrRdUOf+c hMFtNgVNRz7o+72CExFwtOlwUEf5mTt9ttzWfseIqwIpEdfC/hsrBH5030kEXTgN e9fSl1WEXE7lQuiayuEQBYZOuymQ3SkV -----END CERTIFICATE-----Generated at Sat May 31 17:40:58 2025 by rpki-client