$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: c7IbMTSvI8G/LPKkfFaEV519iRrcbnq+kVORZxE2gT0= Subject key identifier: 9C:47:88:1F:66:11:ED:68:CA:6A:46:35:43:EE:71:32:21:2B:60:19 Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 0415 Signing time: Thu 05 Jun 2025 00:16:57 +0000 Manifest this update: Thu 05 Jun 2025 00:16:56 +0000 Manifest next update: Thu 12 Jun 2025 00:16:56 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: q5l1ZiZmfvWuy/MLh8+H6tAMrH2VxcPZSFKVjZivkPs=) 2: 8C891848A8C511EC8F560C42C4F9AE02.roa (hash: lF0CFYohN2oja301WKea0PFfbTXXVh54QBYO4Syk2bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Jun 5 00:16:56 2025 GMT Not After : Jun 12 00:16:56 2025 GMT Subject: CN=6840e1f9-8114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:94:a0:f4:10:f3:04:4b:c8:1b:e5:bc:1f: dd:53:10:cc:e7:00:0b:73:05:c3:a5:54:f8:f2:54: be:ff:ff:92:6c:da:e5:c3:58:60:aa:39:a9:50:a6: d0:5f:f7:7f:d1:f9:21:8b:92:7d:35:82:15:69:75: 28:41:c6:02:49:fd:b7:99:81:76:88:dd:42:44:0f: 20:ee:97:95:49:26:96:50:96:f8:d3:8d:75:2d:d3: ee:56:68:4f:e7:3f:f9:89:31:66:3e:eb:53:35:ea: 66:69:a0:52:5a:da:2f:4f:e0:ef:10:c2:99:a4:30: 28:1c:a3:f6:83:b1:b3:0f:43:af:b9:1d:a7:95:30: fa:1c:16:1d:6e:9e:44:70:bc:31:c8:cf:7e:c2:89: 8d:fb:a6:79:78:93:a7:bf:0f:c0:21:42:a3:a8:81: 1b:2f:b7:2e:7c:3c:77:cf:57:64:35:d4:93:59:35: bf:64:3c:f3:25:0b:b3:97:2e:25:99:d4:b6:3e:81: 50:c2:6c:d5:71:a5:d5:2c:75:f3:69:d7:8f:0a:a3: 64:9a:70:e7:96:a8:3e:c8:03:28:dd:c5:20:00:3b: 3b:c7:62:21:01:71:93:08:dc:1b:b4:e9:18:1c:e2: 66:64:2c:b0:b2:37:d7:9e:71:ed:17:40:44:f6:c2: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:47:88:1F:66:11:ED:68:CA:6A:46:35:43:EE:71:32:21:2B:60:19 X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fb:b1:61:93:47:55:66:3e:a1:ed:34:36:0c:21:2d:5e:8b: e6:41:00:4d:df:a8:a3:9f:d0:fc:80:48:f5:40:50:b1:0a:2a: f2:04:73:46:1e:8f:b1:60:63:5f:9b:05:f0:e9:86:9a:8e:98: e4:c2:af:dd:27:45:d6:a9:f7:02:29:49:ff:c9:c2:fd:ae:da: 64:d4:e4:16:5f:94:e9:f5:5f:7e:7d:cc:6f:5e:3e:8a:8c:fc: ae:37:09:d4:90:af:b4:a9:6c:d8:13:4d:e7:5c:07:a5:b2:a1: 3b:40:b2:98:b7:cb:9f:5e:1b:60:36:5b:8a:56:a7:77:5f:5e: df:d7:24:84:24:b2:0e:dd:ae:f1:fb:c9:b5:dc:66:4a:7b:44: d1:b6:f6:ab:c0:ae:25:ef:22:5e:21:e1:c3:ff:ee:54:e1:f7: a4:96:3f:55:ae:a2:49:be:02:9e:22:23:86:56:c5:b7:97:f1: af:3c:e0:b7:25:b1:ca:e7:56:e2:f5:27:a8:9d:93:71:4b:b1: 73:a6:47:20:ab:01:d9:3d:3b:d3:96:2c:9d:e2:33:60:3b:5d: 01:4d:d8:1f:9d:40:67:69:0d:01:0f:41:80:dc:05:96:ff:5c: 87:01:43:77:fc:78:50:71:a0:84:57:49:23:2a:31:9c:17:20: b9:1f:af:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjUwNjA1MDAxNjU2WhcNMjUwNjEyMDAxNjU2WjAYMRYwFAYD VQQDEw02ODQwZTFmOS04MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVqUoPQQ8wRLyBvlvB/dUxDM5wALcwXDpVT48lS+//+SbNrlw1hgqjmpUKbQ X/d/0fkhi5J9NYIVaXUoQcYCSf23mYF2iN1CRA8g7peVSSaWUJb40411LdPuVmhP 5z/5iTFmPutTNepmaaBSWtovT+DvEMKZpDAoHKP2g7GzD0OvuR2nlTD6HBYdbp5E cLwxyM9+womN+6Z5eJOnvw/AIUKjqIEbL7cufDx3z1dkNdSTWTW/ZDzzJQuzly4l mdS2PoFQwmzVcaXVLHXzadePCqNkmnDnlqg+yAMo3cUgADs7x2IhAXGTCNwbtOkY HOJmZCywsjfXnnHtF0BE9sJydQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxHiB9m Ee1oympGNUPucTIhK2AZMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9+7Fhk0dVZj6h7TQ2DCEtXovmQQBN36ijn9D8gEj1QFCxCiryBHNG Ho+xYGNfmwXw6Yaajpjkwq/dJ0XWqfcCKUn/ycL9rtpk1OQWX5Tp9V9+fcxvXj6K jPyuNwnUkK+0qWzYE03nXAelsqE7QLKYt8ufXhtgNluKVqd3X17f1ySEJLIO3a7x +8m13GZKe0TRtvarwK4l7yJeIeHD/+5U4feklj9VrqJJvgKeIiOGVsW3l/GvPOC3 JbHK51bi9SeonZNxS7FzpkcgqwHZPTvTliyd4jNgO10BTdgfnUBnaQ0BD0GA3AWW /1yHAUN3/HhQcaCEV0kjKjGcFyC5H69T -----END CERTIFICATE-----Generated at Thu Jun 5 20:11:22 2025 by rpki-client