$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: RGT1trS+FkMfFGSsCSmBBAKISc/FuKL/UWX2bhUqBlQ= Subject key identifier: FD:ED:61:D8:58:E7:A5:3A:44:18:DE:41:D8:84:11:03:79:5C:6E:CC Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0C42 Signing time: Fri 30 May 2025 19:40:24 +0000 Manifest this update: Fri 30 May 2025 19:40:24 +0000 Manifest next update: Fri 06 Jun 2025 19:40:24 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: uJUOTbhM/OzYLtEBU35sJieqnmgaYPGrfkB2e7OdhSY=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: eILOAPk7hEfHA4Xc/eZDuicer6q0kZbC4fsjNG1XiFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: May 30 19:40:24 2025 GMT Not After : Jun 6 19:40:24 2025 GMT Subject: CN=683a09a8-5d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:76:d3:9b:7f:4a:10:ec:0b:58:0c:ef:9e: 26:d0:88:33:58:7e:86:ea:f5:45:9f:87:6a:7f:45: af:4b:11:bb:d1:d5:5e:13:53:5e:be:7f:60:1e:21: cb:3c:e5:86:61:5c:95:ad:0e:a5:03:bb:58:45:e2: 3d:61:32:70:06:45:d2:5a:89:c5:2b:ce:45:65:a3: 31:bf:ec:9a:cd:d3:d1:ab:39:70:26:9a:c5:6d:0f: c3:69:58:ae:fc:e7:e7:43:95:8c:e9:f0:49:cd:d0: 65:9f:45:61:f0:ae:97:6b:d3:1b:93:6c:14:bf:44: dc:e2:84:24:8d:c4:4b:cd:c0:ad:3b:c9:11:03:56: e8:11:22:b9:d0:0f:d3:a3:f1:44:81:dd:c8:3d:de: 5a:26:ba:9a:b3:b6:55:47:a3:65:7d:4b:7f:91:42: 1d:0a:19:0e:c2:42:f7:f1:85:32:c6:4d:50:92:4b: 32:6e:93:04:77:50:d8:74:ac:9b:9c:cf:36:b3:df: 1b:88:5e:de:af:f8:6a:4e:bb:c0:c6:5e:b5:33:f8: 4b:13:dc:45:25:fc:10:c2:e9:ad:b0:86:47:7e:5f: 56:28:f4:09:a9:fb:52:e8:df:6a:02:36:21:26:8f: c6:93:db:c7:aa:1e:93:60:20:8c:b2:f1:1c:c5:0a: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:61:D8:58:E7:A5:3A:44:18:DE:41:D8:84:11:03:79:5C:6E:CC X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f4:12:5b:69:71:44:ec:0f:2b:56:3d:17:4b:6e:b4:80:12: 05:e6:56:2a:3a:4d:d0:c9:e9:c6:93:3e:63:2c:d6:e0:0f:f4: 90:b3:53:f3:ac:c3:cc:11:c7:6d:4e:a8:69:71:01:06:74:6c: 74:5f:93:9f:36:bc:98:1c:ff:ee:09:e9:d5:4e:8b:54:bf:7d: d9:e9:65:a9:d7:6b:b8:b5:39:fb:4d:76:cb:0a:4f:c9:81:84: 79:98:4d:c0:3f:2e:7c:22:2b:d3:9a:e9:3a:1b:93:20:36:0c: 29:2a:b4:59:22:72:43:c7:2b:e8:90:f2:23:4d:ca:14:09:f2: e4:84:e4:8f:b5:22:05:27:ba:4f:52:7e:a1:9c:23:fb:b4:04: 85:1d:5c:4f:96:37:c4:bf:a1:75:98:b7:e6:03:8c:03:fd:6b: d5:0b:8b:b7:c7:ab:c6:2f:cf:99:e5:2a:29:64:f7:5d:51:39: a7:0e:76:db:ff:60:54:c7:66:69:ab:b0:cc:6c:cb:17:f1:fd: 7c:6d:54:43:4d:a2:a2:62:c5:9f:d4:44:94:1d:a7:2d:db:ab: ae:1e:7c:1d:60:e3:bb:b5:86:bf:dc:a4:05:01:ab:2b:fb:91: a9:ae:0e:11:85:c5:5e:2c:b4:27:71:2c:63:2d:34:f2:c5:3d: db:83:d9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUwNTMwMTk0MDI0WhcNMjUwNjA2MTk0MDI0WjAYMRYwFAYD VQQDEw02ODNhMDlhOC01ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaR205t/ShDsC1gM754m0IgzWH6G6vVFn4dqf0WvSxG70dVeE1Nevn9gHiHL POWGYVyVrQ6lA7tYReI9YTJwBkXSWonFK85FZaMxv+yazdPRqzlwJprFbQ/DaViu /OfnQ5WM6fBJzdBln0Vh8K6Xa9Mbk2wUv0Tc4oQkjcRLzcCtO8kRA1boESK50A/T o/FEgd3IPd5aJrqas7ZVR6NlfUt/kUIdChkOwkL38YUyxk1QkksybpMEd1DYdKyb nM82s98biF7er/hqTrvAxl61M/hLE9xFJfwQwumtsIZHfl9WKPQJqftS6N9qAjYh Jo/Gk9vHqh6TYCCMsvEcxQom0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3tYdhY 56U6RBjeQdiEEQN5XG7MMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR9BJbaXFE7A8rVj0XS260gBIF5lYqOk3QyenGkz5jLNbgD/SQs1Pz rMPMEcdtTqhpcQEGdGx0X5OfNryYHP/uCenVTotUv33Z6WWp12u4tTn7TXbLCk/J gYR5mE3APy58IivTmuk6G5MgNgwpKrRZInJDxyvokPIjTcoUCfLkhOSPtSIFJ7pP Un6hnCP7tASFHVxPljfEv6F1mLfmA4wD/WvVC4u3x6vGL8+Z5SopZPddUTmnDnbb /2BUx2Zpq7DMbMsX8f18bVRDTaKiYsWf1ESUHact26uuHnwdYOO7tYa/3KQFAasr +5Gprg4RhcVeLLQncSxjLTTyxT3bg9ld -----END CERTIFICATE-----Generated at Sat May 31 17:39:14 2025 by rpki-client