$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: xEw07kCnmPfnMG9AN5j8dWoM1T/OBsfg/0N9vKnQKQ0= Subject key identifier: BA:31:0C:D0:74:59:55:5E:4F:48:30:2E:E0:E4:64:88:43:59:3C:87 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 0409 Signing time: Sat 31 May 2025 00:38:17 +0000 Manifest this update: Sat 31 May 2025 00:38:16 +0000 Manifest next update: Sat 07 Jun 2025 00:38:16 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: eJZdUxnxcYXZgm3zVPdJg2UD7nNZfOXt2AUxgWczRAc=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: May 31 00:38:16 2025 GMT Not After : Jun 7 00:38:16 2025 GMT Subject: CN=683a4f78-ef58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:77:15:2f:f4:b7:97:fe:6b:ab:a2:5b:fb: 85:09:19:c6:f2:41:5d:13:3b:aa:34:3e:4a:c2:05: ed:78:19:5b:3b:84:85:96:42:44:00:53:bf:2e:61: b2:d1:ba:c3:67:fb:4f:5b:54:5e:e3:10:d7:a4:ff: 58:32:11:07:8a:c7:e8:67:9a:7b:66:f0:7d:3d:55: 26:83:2e:3e:f1:c6:90:60:eb:15:2b:05:b0:95:3c: 71:fb:e9:87:ef:f2:fe:e7:99:34:ed:9f:24:2a:0f: b6:3e:9f:eb:31:da:a9:df:83:b7:0c:c4:84:e3:ab: f1:be:7c:19:c1:a0:08:33:8f:24:48:f8:09:0a:ac: 15:2a:d7:76:ce:1b:6c:dd:0f:9f:fb:98:53:ac:ee: 3f:5d:15:26:06:99:c3:70:8b:00:6e:62:33:0e:d5: 14:64:45:a9:36:69:f3:83:44:6e:66:21:e6:b5:de: 98:c4:07:20:75:15:b1:14:b7:a2:ff:5f:de:cb:dd: 76:8a:30:68:b2:ea:0b:9b:f2:fd:e1:95:26:f0:6e: 5f:7b:89:02:c3:20:c5:79:67:11:00:71:24:7f:75: db:12:86:54:67:96:2b:fa:d3:1c:04:79:26:b6:f3: 72:b7:b7:47:2a:63:9a:55:8e:b6:ee:0c:9b:6d:16: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:31:0C:D0:74:59:55:5E:4F:48:30:2E:E0:E4:64:88:43:59:3C:87 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1c:2b:14:2b:04:72:6e:44:bb:b0:10:89:49:7f:ac:84:85: e6:81:d9:77:0c:f5:55:6a:66:43:31:37:4f:b2:2f:a3:d6:3f: 85:6f:3f:bf:9e:7b:3a:f1:3d:62:93:a2:16:6c:ef:94:8b:80: b9:be:4b:cc:45:7a:ee:03:31:ae:bf:16:68:4d:7e:e4:2b:34: 94:d0:ba:75:51:2c:be:62:a7:dc:fc:d3:57:84:55:ca:cd:1a: 19:8e:c3:da:38:17:78:18:fa:0b:eb:96:17:1d:9a:a4:41:9c: c3:a2:da:da:cf:70:f9:60:3d:8c:68:cb:b5:ac:54:c4:5f:0f: 13:c3:93:14:4e:94:9b:a4:c7:cc:d8:27:b4:d8:40:67:4e:f6: b1:79:ed:29:f6:5d:63:6e:34:e1:10:ce:0f:e6:eb:6b:90:90: 4f:5d:56:21:37:eb:35:74:a4:ae:eb:5e:78:43:56:33:cd:cc: 7c:3e:d8:a6:86:fe:c5:bb:33:7c:a4:72:ab:e6:d7:a3:73:37: 25:2e:64:cc:7f:4e:8f:f3:ac:23:92:5c:89:14:13:91:6d:71: 70:db:38:8f:8d:93:1e:b6:29:00:de:ef:a5:af:ee:27:a1:b0: bf:ef:ff:10:6d:23:eb:52:88:15:04:4c:98:25:c4:7a:18:f8: 7c:74:67:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwNTMxMDAzODE2WhcNMjUwNjA3MDAzODE2WjAYMRYwFAYD VQQDEw02ODNhNGY3OC1lZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonB3FS/0t5f+a6uiW/uFCRnG8kFdEzuqND5KwgXteBlbO4SFlkJEAFO/LmGy 0brDZ/tPW1Re4xDXpP9YMhEHisfoZ5p7ZvB9PVUmgy4+8caQYOsVKwWwlTxx++mH 7/L+55k07Z8kKg+2Pp/rMdqp34O3DMSE46vxvnwZwaAIM48kSPgJCqwVKtd2zhts 3Q+f+5hTrO4/XRUmBpnDcIsAbmIzDtUUZEWpNmnzg0RuZiHmtd6YxAcgdRWxFLei /1/ey912ijBosuoLm/L94ZUm8G5fe4kCwyDFeWcRAHEkf3XbEoZUZ5Yr+tMcBHkm tvNyt7dHKmOaVY627gybbRZbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoxDNB0 WVVeT0gwLuDkZIhDWTyHMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEHCsUKwRybkS7sBCJSX+shIXmgdl3DPVVamZDMTdPsi+j1j+Fbz+/ nns68T1ik6IWbO+Ui4C5vkvMRXruAzGuvxZoTX7kKzSU0Lp1USy+Yqfc/NNXhFXK zRoZjsPaOBd4GPoL65YXHZqkQZzDotraz3D5YD2MaMu1rFTEXw8Tw5MUTpSbpMfM 2Ce02EBnTvaxee0p9l1jbjThEM4P5utrkJBPXVYhN+s1dKSu6154Q1Yzzcx8Ptim hv7FuzN8pHKr5tejczclLmTMf06P86wjklyJFBORbXFw2ziPjZMetikA3u+lr+4n obC/7/8QbSPrUogVBEyYJcR6GPh8dGex -----END CERTIFICATE-----Generated at Sat May 31 17:39:17 2025 by rpki-client