$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft File: yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json) Hash identifier: N+1g9733caZqS0rMuaO8WNBhYx6lqmgwbHWdR4MUMYE= Subject key identifier: 43:2A:4B:2B:1A:F5:8D:C3:B9:A6:85:C8:2D:BD:4A:C1:30:E4:C8:2F Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7 Certificate issuer: /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft Manifest number: 05DE Signing time: Sat 31 May 2025 00:29:33 +0000 Manifest this update: Sat 31 May 2025 00:29:33 +0000 Manifest next update: Sat 07 Jun 2025 00:29:33 +0000 Files and hashes: 1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: cZOz1aOmdVJSh5ZS+ISaRHktW0U3qocPVeL+BlaAlAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7 Validity Not Before: May 31 00:29:33 2025 GMT Not After : Jun 7 00:29:33 2025 GMT Subject: CN=683a4d6d-95b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:a9:ef:59:81:52:ef:6b:86:9c:9d:4f:a4: d8:d9:7d:f3:ef:ef:52:fe:cc:e6:88:69:44:4b:78: 68:03:de:aa:d7:65:3d:e2:20:c8:79:eb:16:e3:3a: 12:bc:af:69:3e:93:16:a7:7a:24:29:32:a4:3e:5c: 4c:04:60:c7:d8:2a:87:0e:06:26:91:5b:88:e1:26: 3d:ef:0e:b6:9d:fd:0c:60:72:1d:f8:a0:c0:dd:4f: 0a:5f:d6:18:8e:6e:af:98:0f:5b:f9:8c:39:16:ff: 72:da:2e:1a:ed:5b:b0:04:53:0d:c6:24:46:0a:ba: 6b:72:5e:e0:00:16:96:46:e6:c9:4a:7e:c6:30:33: 21:fe:08:95:0b:9c:dc:ff:62:8e:22:b9:8e:93:06: dd:82:5e:ab:30:20:8b:5c:f9:16:1e:dc:8a:31:d0: cd:e2:48:92:67:7d:5a:b9:e0:4f:da:cb:b3:99:24: f2:c9:7c:6d:fb:04:a1:3f:c6:f5:5c:eb:74:b1:e4: d2:6e:14:bf:49:cb:c9:2e:81:5e:35:50:73:bb:3c: ef:bc:87:b3:a3:bc:25:be:7c:6b:76:b5:11:f5:85: a8:7b:21:86:67:4e:0d:40:78:fe:ba:1c:aa:8d:46: 6e:37:32:74:98:ad:4c:9b:a0:52:c3:ef:38:da:3e: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:4B:2B:1A:F5:8D:C3:B9:A6:85:C8:2D:BD:4A:C1:30:E4:C8:2F X509v3 Authority Key Identifier: keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f1:aa:8b:28:2b:7f:27:60:36:7d:92:52:7c:4f:7f:9b:a1: 72:42:40:89:8c:33:57:92:aa:b4:e8:a0:45:07:b3:1c:39:c4: 68:9e:22:fa:b5:e9:41:ff:3a:53:2e:40:3f:e8:c7:c7:7a:00: 2b:c3:c2:2a:b1:64:e0:5b:a0:34:24:92:68:a5:df:f2:40:e2: 0e:bb:5d:be:4f:82:06:ee:ff:f6:0f:ba:ff:0e:19:66:e6:88: 90:0e:91:de:b1:21:71:e5:4a:a4:16:17:e2:62:33:87:bf:48: 30:bf:a7:c5:6e:de:0c:2f:82:f3:b9:d3:f5:ae:c1:d9:11:90: 83:50:a7:f5:4d:4b:70:63:72:87:0f:6d:57:67:ca:6e:bf:0e: cc:bf:a7:45:35:8d:ef:41:82:5a:06:3c:69:fc:1e:a4:d3:25: 70:7c:de:2e:cb:09:3f:d5:96:e2:53:8f:6b:1c:12:3a:39:cf: c9:78:76:20:78:e7:7a:5c:4f:c6:6b:1c:9a:5f:b4:cc:70:98: e9:f0:8c:be:93:a2:08:67:bd:ad:50:88:35:11:cb:e2:52:b3: 0c:48:e6:30:52:83:5a:5b:be:2d:e3:17:4a:d1:01:f2:76:aa: 6c:ac:6a:2c:90:1f:4a:c5:56:15:4d:4d:cd:3a:35:41:af:3b: df:e8:9d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKEM4QzI1QzYzREVGNTY3MDBENjU3RkM0Mzk5NEE1NTFG RTQwQ0NEQzcwHhcNMjUwNTMxMDAyOTMzWhcNMjUwNjA3MDAyOTMzWjAYMRYwFAYD VQQDEw02ODNhNGQ2ZC05NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWCp71mBUu9rhpydT6TY2X3z7+9S/szmiGlES3hoA96q12U94iDIeesW4zoS vK9pPpMWp3okKTKkPlxMBGDH2CqHDgYmkVuI4SY97w62nf0MYHId+KDA3U8KX9YY jm6vmA9b+Yw5Fv9y2i4a7VuwBFMNxiRGCrprcl7gABaWRubJSn7GMDMh/giVC5zc /2KOIrmOkwbdgl6rMCCLXPkWHtyKMdDN4kiSZ31aueBP2suzmSTyyXxt+wShP8b1 XOt0seTSbhS/ScvJLoFeNVBzuzzvvIezo7wlvnxrdrUR9YWoeyGGZ04NQHj+uhyq jUZuNzJ0mK1Mm6BSw+842j4nBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMqSysa 9Y3DuaaFyC29SsEw5MgvMB8GA1UdIwQYMBaAFMjCXGPe9WcA1lf8Q5lKVR/kDM3H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3RFdWX3hEbVVwVkgtUU16 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lNSmNZOTcxWndEV1ZfeERtVXBWSC1RTXpjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3 RFdWX3hEbVVwVkgtUU16Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ8aqLKCt/J2A2fZJSfE9/m6FyQkCJjDNXkqq06KBFB7McOcRoniL6 telB/zpTLkA/6MfHegArw8IqsWTgW6A0JJJopd/yQOIOu12+T4IG7v/2D7r/Dhlm 5oiQDpHesSFx5UqkFhfiYjOHv0gwv6fFbt4ML4LzudP1rsHZEZCDUKf1TUtwY3KH D21XZ8puvw7Mv6dFNY3vQYJaBjxp/B6k0yVwfN4uywk/1ZbiU49rHBI6Oc/JeHYg eOd6XE/GaxyaX7TMcJjp8Iy+k6IIZ72tUIg1EcviUrMMSOYwUoNaW74t4xdK0QHy dqpsrGoskB9KxVYVTU3NOjVBrzvf6J3/ -----END CERTIFICATE-----Generated at Sat May 31 17:11:21 2025 by rpki-client