$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: d7nJgOPk6TAZYmtG1xSqQMhd9JLnqVEOnryDV4PAHoM= Subject key identifier: A1:FE:42:93:6E:FE:38:EE:C5:8F:43:C9:FD:9D:98:56:41:6C:F9:D8 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 3495 Signing time: Sat 31 May 2025 14:25:02 +0000 Manifest this update: Sat 31 May 2025 14:25:01 +0000 Manifest next update: Sat 07 Jun 2025 14:25:01 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: XqIBIKG+viO0+7OGtSNVnF8VzlDCShNRyNZrL1nS/j8=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: kJqH6bqpSJ3//AJ26qCXwZ2NcL1mcLntx12yKeJv6z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: May 31 14:25:01 2025 GMT Not After : Jun 7 14:25:01 2025 GMT Subject: CN=683b113d-0277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:dc:7f:37:70:8e:2d:7a:b2:6d:4c:b8:b3: 7b:04:bb:09:4d:bc:5e:e2:b2:50:70:d5:ef:f4:cd: 4d:b8:22:00:d4:2f:10:bf:00:df:78:ca:62:2a:93: ca:d8:e5:e1:5f:76:0c:06:99:e4:02:ab:4c:91:c2: be:ed:ed:cd:70:de:b2:76:f9:95:6e:33:97:db:89: f1:71:f6:ce:9f:c8:3b:be:18:30:3a:71:c3:e4:39: a6:11:0b:5f:8a:19:44:7d:30:68:37:ed:8f:e1:eb: ee:51:3a:97:73:c2:c4:ed:bb:8e:d7:94:20:c8:9a: 32:bf:34:ab:4b:c9:ff:a6:11:df:17:e9:95:01:1f: 8f:52:3d:2e:6f:f4:f3:15:93:9a:15:df:00:d9:43: 41:4c:2a:5e:81:e6:b9:af:5d:2d:ba:17:e4:a4:a8: 87:86:7a:7d:30:f0:4e:1c:c6:15:c0:2f:a2:7a:2d: 93:aa:bf:03:4a:ec:8e:45:2d:31:d2:19:4a:2d:df: ed:2c:16:61:40:37:d7:5b:cf:43:88:c6:ff:45:89: ae:32:29:d4:52:d7:76:65:b1:66:b1:55:72:8f:bb: 81:b9:fb:28:6e:91:ad:fd:6a:71:71:df:92:79:1f: 19:e3:7a:c1:4b:91:df:3d:e3:78:e9:d4:1b:40:89: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FE:42:93:6E:FE:38:EE:C5:8F:43:C9:FD:9D:98:56:41:6C:F9:D8 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bb:c4:65:bd:2b:3d:44:3e:22:e3:e1:d3:45:f7:56:48:31: 1f:e2:09:54:d6:1b:64:66:1a:53:3b:4e:8e:02:61:db:64:ff: ed:f8:d1:26:1a:02:06:0e:e2:a8:ad:7f:d2:b7:e6:13:95:1c: 81:8f:f6:b5:90:94:2a:e0:a6:e7:07:e1:17:89:ce:98:de:7d: e1:84:3e:10:27:38:72:82:1d:dd:7d:98:1c:7a:4d:d6:8d:c1: 73:df:7b:83:9d:f8:e3:09:21:88:46:c7:e8:dc:29:2d:8d:d9: 9b:3f:7f:25:71:27:a0:45:5c:74:d4:bd:77:de:4f:13:3e:df: 17:dc:17:df:e0:6f:4c:05:e0:8d:3f:a0:07:c7:2d:5d:4d:64: b3:87:fe:ab:81:16:70:22:81:a3:b5:64:ae:02:14:a7:19:6e: 82:36:62:11:ff:81:07:d1:08:1b:05:f6:84:2d:28:fe:c3:a2: 7e:98:43:1e:a5:b0:2e:46:5f:fd:78:ef:80:c3:5c:f1:1b:2a: 13:6e:bf:8f:73:7c:81:ff:71:13:b3:fe:66:f6:99:3c:97:4d: cf:5c:00:fe:c7:29:ef:a2:d5:87:9d:2d:df:33:05:dc:bd:c7: 5c:5e:a1:22:c2:e6:05:e4:df:44:4d:f5:4e:0f:47:5e:de:e1: b4:c0:3c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUwNTMxMTQyNTAxWhcNMjUwNjA3MTQyNTAxWjAYMRYwFAYD VQQDEw02ODNiMTEzZC0wMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29zcfzdwji16sm1MuLN7BLsJTbxe4rJQcNXv9M1NuCIA1C8QvwDfeMpiKpPK 2OXhX3YMBpnkAqtMkcK+7e3NcN6ydvmVbjOX24nxcfbOn8g7vhgwOnHD5DmmEQtf ihlEfTBoN+2P4evuUTqXc8LE7buO15QgyJoyvzSrS8n/phHfF+mVAR+PUj0ub/Tz FZOaFd8A2UNBTCpegea5r10tuhfkpKiHhnp9MPBOHMYVwC+iei2Tqr8DSuyORS0x 0hlKLd/tLBZhQDfXW89DiMb/RYmuMinUUtd2ZbFmsVVyj7uBufsobpGt/Wpxcd+S eR8Z43rBS5HfPeN46dQbQIl0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH+QpNu /jjuxY9Dyf2dmFZBbPnYMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeu8RlvSs9RD4i4+HTRfdWSDEf4glU1htkZhpTO06OAmHbZP/t+NEm GgIGDuKorX/St+YTlRyBj/a1kJQq4KbnB+EXic6Y3n3hhD4QJzhygh3dfZgcek3W jcFz33uDnfjjCSGIRsfo3CktjdmbP38lcSegRVx01L133k8TPt8X3Bff4G9MBeCN P6AHxy1dTWSzh/6rgRZwIoGjtWSuAhSnGW6CNmIR/4EH0QgbBfaELSj+w6J+mEMe pbAuRl/9eO+Aw1zxGyoTbr+Pc3yB/3ETs/5m9pk8l03PXAD+xynvotWHnS3fMwXc vcdcXqEiwuYF5N9ETfVOD0de3uG0wDye -----END CERTIFICATE-----Generated at Sat May 31 17:07:36 2025 by rpki-client