$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: mddnNZxZsxjyuDNkK3MyVvC0zltuS1DhL8lZ3YGhvtI= Subject key identifier: 08:D6:CD:80:EC:DD:CC:DC:EF:F6:03:FD:83:3B:19:BA:F7:AB:37:66 Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 01D3 Signing time: Sat 31 May 2025 02:37:00 +0000 Manifest this update: Sat 31 May 2025 02:36:59 +0000 Manifest next update: Sat 07 Jun 2025 02:36:59 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: 4xRXhnr0aqJ8LXMBmrqjOd91P35PYadAQN2AVrNp/b4=) 2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: May 31 02:36:59 2025 GMT Not After : Jun 7 02:36:59 2025 GMT Subject: CN=683a6b4c-19fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:ba:df:db:eb:cb:4b:eb:e0:16:b7:10:24: 08:2b:d1:b0:7b:71:53:92:83:5c:45:e8:30:10:6c: 49:84:b9:f1:cf:fd:0c:df:09:1e:15:4b:15:49:d3: 4c:e5:16:6e:ac:79:aa:c9:94:4b:22:78:86:9c:a8: 74:c3:05:10:b2:da:00:08:f8:56:33:09:23:b8:a7: 09:93:7a:20:5b:4b:60:04:d4:e9:06:62:d4:58:e0: ef:a4:c3:88:14:59:0e:1c:74:62:bf:2f:3c:26:23: 91:f5:1c:db:62:d0:e9:eb:82:48:32:a1:8e:8b:18: de:90:23:e4:04:97:fd:0a:2b:4e:e1:d0:0f:e9:0a: 3b:6d:7b:63:09:aa:e7:0e:04:1c:b7:4f:de:e5:a1: fa:d6:1e:a5:ca:5d:e3:b9:28:08:2b:4a:6d:85:f5: 6d:de:00:f7:af:d8:b6:23:eb:d5:1c:48:ab:b0:5e: 34:d7:6a:45:f7:51:22:68:ce:f4:72:4a:2f:20:c7: f0:ab:e9:92:85:b9:7b:8b:25:ee:24:97:05:0e:fd: aa:7c:53:3c:ad:51:e0:27:58:02:0d:62:d5:43:ed: 79:d2:80:a2:23:d6:9a:f0:f2:b7:cd:5b:e0:67:7f: ef:45:0f:5e:29:df:c8:cb:5e:05:34:76:f1:ec:2a: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:CD:80:EC:DD:CC:DC:EF:F6:03:FD:83:3B:19:BA:F7:AB:37:66 X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fc:b1:ac:df:d4:82:35:e5:09:99:da:c7:bc:97:6d:f9:cf: 9c:44:d8:53:bb:73:2e:10:4e:c4:34:6f:57:3a:27:4f:be:a7: b5:08:b0:47:42:61:9f:6a:bb:de:d0:79:7c:5a:fc:a8:6c:16: 4d:fc:fe:53:f3:2c:1a:2f:f4:58:f6:f1:90:6f:a8:50:d1:cc: f4:0f:37:17:12:41:73:a2:73:a1:14:92:1f:7e:7d:50:96:9a: 35:2b:5c:28:3c:14:e2:f1:ab:ac:2f:7f:3e:99:c5:2d:51:12: ad:f1:88:c6:70:44:9d:79:87:67:9b:69:e0:50:e0:ac:f1:f3: d1:20:ab:da:4d:9b:c1:7f:8f:4e:18:22:2b:0a:b6:29:2c:4f: 3b:b6:2f:13:00:49:54:43:c3:62:f5:c9:bb:5c:68:37:b9:13: 26:a5:b1:fd:3e:e2:0d:ea:a7:1e:de:a9:0e:6d:59:05:6b:4a: b7:11:05:60:5e:75:98:3e:e7:77:7c:6f:78:d6:5f:72:ce:d1: 6c:a1:62:6d:c7:bf:9c:33:75:3d:b1:45:ed:c1:1a:a4:fd:9e: 4e:4f:94:a1:e2:42:5e:a1:75:8c:00:10:9e:0c:f5:6c:41:30: dd:52:6a:40:b8:d9:f6:db:03:5c:10:fd:ae:b0:71:cb:ee:80: f7:5d:60:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjUwNTMxMDIzNjU5WhcNMjUwNjA3MDIzNjU5WjAYMRYwFAYD VQQDEw02ODNhNmI0Yy0xOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHa639vry0vr4Ba3ECQIK9Gwe3FTkoNcRegwEGxJhLnxz/0M3wkeFUsVSdNM 5RZurHmqyZRLIniGnKh0wwUQstoACPhWMwkjuKcJk3ogW0tgBNTpBmLUWODvpMOI FFkOHHRivy88JiOR9RzbYtDp64JIMqGOixjekCPkBJf9CitO4dAP6Qo7bXtjCarn DgQct0/e5aH61h6lyl3juSgIK0pthfVt3gD3r9i2I+vVHEirsF4012pF91EiaM70 ckovIMfwq+mShbl7iyXuJJcFDv2qfFM8rVHgJ1gCDWLVQ+150oCiI9aa8PK3zVvg Z3/vRQ9eKd/Iy14FNHbx7CpIhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjWzYDs 3czc7/YD/YM7Gbr3qzdmMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/LGs39SCNeUJmdrHvJdt+c+cRNhTu3MuEE7ENG9XOidPvqe1CLBH QmGfarve0Hl8WvyobBZN/P5T8ywaL/RY9vGQb6hQ0cz0DzcXEkFzonOhFJIffn1Q lpo1K1woPBTi8ausL38+mcUtURKt8YjGcESdeYdnm2ngUOCs8fPRIKvaTZvBf49O GCIrCrYpLE87ti8TAElUQ8Ni9cm7XGg3uRMmpbH9PuIN6qce3qkObVkFa0q3EQVg XnWYPud3fG941l9yztFsoWJtx7+cM3U9sUXtwRqk/Z5OT5Sh4kJeoXWMABCeDPVs QTDdUmpAuNn22wNcEP2usHHL7oD3XWCU -----END CERTIFICATE-----Generated at Sat May 31 15:16:23 2025 by rpki-client