$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json) Hash identifier: oPXqUeRMrE48aQsSWOSIHJvy3pGdeqiKAzNFRP2/74o= Subject key identifier: 4F:57:1D:83:56:50:F8:28:8F:4D:4A:9C:98:75:39:C2:7C:DC:1E:BA Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft Manifest number: 0138 Signing time: Sat 31 May 2025 04:07:09 +0000 Manifest this update: Sat 31 May 2025 04:07:08 +0000 Manifest next update: Sat 07 Jun 2025 04:07:08 +0000 Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: oJlBd5at1qodTFxgc412rRZusPj7cPr4EaEhibBqfbg=) 2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=) 3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Validity Not Before: May 31 04:07:08 2025 GMT Not After : Jun 7 04:07:08 2025 GMT Subject: CN=683a806c-7f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:df:de:d1:6a:3e:13:88:93:4b:90:ef:93: f2:06:da:8a:b3:62:14:9d:60:a7:1c:3d:63:87:43: a4:c7:7f:a1:ae:43:c9:7b:93:4d:d2:fe:df:05:a9: a5:d8:ae:15:dd:3a:24:22:48:d4:bb:ea:96:b5:d9: 54:96:65:c3:9d:77:6d:56:32:27:58:2a:65:32:24: 88:f2:aa:ef:fe:b8:ee:4d:5c:5c:bf:10:b0:ba:d4: 9d:75:10:9a:91:85:92:b0:64:17:89:eb:3b:0e:a1: 7c:bd:07:32:e2:f6:7a:72:a4:e0:cc:54:a5:30:bd: 75:00:e5:46:31:57:2b:81:82:09:2a:21:4a:db:64: c9:ce:e6:57:3a:8e:06:71:67:d1:98:71:b8:64:03: 60:dc:91:77:09:fb:b9:42:94:46:b3:69:2b:9f:0d: d4:36:10:29:24:1d:95:57:45:cf:8e:42:9b:c8:23: 90:d1:f7:8a:93:5c:df:ae:2a:8d:0e:cc:f0:b7:d6: 66:b9:8d:05:43:52:74:da:fa:65:3f:90:fc:49:22: ec:a1:f8:42:2f:97:68:77:29:33:62:40:29:18:28: ee:47:d8:87:61:a6:a9:b5:b6:c7:48:dc:36:23:56: 4c:02:71:73:5d:2b:c8:4f:8f:96:92:dc:aa:93:54: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:1D:83:56:50:F8:28:8F:4D:4A:9C:98:75:39:C2:7C:DC:1E:BA X509v3 Authority Key Identifier: keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1e:fc:b1:92:7d:82:49:a3:a6:73:e3:03:14:1a:a5:cf:36: bf:cf:6f:4f:47:82:52:35:15:b2:be:43:b2:e0:9f:c0:52:aa: 17:c6:04:06:b0:5c:b4:cf:a4:b4:ae:34:cb:f0:c6:42:37:e5: ce:32:16:ab:8b:fc:3b:6e:b3:cc:f6:ae:af:4a:84:43:d8:42: 3a:3d:74:ab:62:4e:25:77:3a:c2:2c:3e:8d:70:0d:aa:18:fc: 1e:20:0b:50:e5:14:4c:81:f4:03:80:fb:ed:a3:31:6b:a1:81: 82:2e:b0:11:26:83:3a:67:00:f5:a9:d9:3a:b5:39:6b:2c:cf: 6a:f6:b5:90:4f:17:63:46:b4:8a:0a:2e:53:82:97:c6:40:0a: 68:4f:83:f7:9b:eb:47:e2:a3:0e:14:e6:60:eb:e3:8a:39:75: 7e:40:d9:13:33:5b:d2:85:8b:0e:38:1e:3e:86:74:df:84:e5: cb:5e:b6:d2:03:c0:9d:16:37:84:03:96:d7:55:d7:da:b5:37: f9:26:e8:6a:3a:08:e9:58:c0:e8:b6:d2:a1:4b:f8:30:2d:d3: 97:16:e4:7f:0a:cb:d3:3e:13:c3:5a:34:13:90:11:4a:93:be: 66:92:74:8d:74:e5:0d:50:1d:c4:27:2c:af:3d:e4:49:8c:88: d5:4c:2f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC MjY5NTVFQTEwHhcNMjUwNTMxMDQwNzA4WhcNMjUwNjA3MDQwNzA4WjAYMRYwFAYD VQQDEw02ODNhODA2Yy03ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4znf3tFqPhOIk0uQ75PyBtqKs2IUnWCnHD1jh0Okx3+hrkPJe5NN0v7fBaml 2K4V3TokIkjUu+qWtdlUlmXDnXdtVjInWCplMiSI8qrv/rjuTVxcvxCwutSddRCa kYWSsGQXies7DqF8vQcy4vZ6cqTgzFSlML11AOVGMVcrgYIJKiFK22TJzuZXOo4G cWfRmHG4ZANg3JF3Cfu5QpRGs2krnw3UNhApJB2VV0XPjkKbyCOQ0feKk1zfriqN Dszwt9ZmuY0FQ1J02vplP5D8SSLsofhCL5dodykzYkApGCjuR9iHYaaptbbHSNw2 I1ZMAnFzXSvIT4+Wktyqk1T+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9XHYNW UPgoj01KnJh1OcJ83B66MB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3 YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKHvyxkn2CSaOmc+MDFBqlzza/z29PR4JSNRWyvkOy4J/AUqoXxgQG sFy0z6S0rjTL8MZCN+XOMhari/w7brPM9q6vSoRD2EI6PXSrYk4ldzrCLD6NcA2q GPweIAtQ5RRMgfQDgPvtozFroYGCLrARJoM6ZwD1qdk6tTlrLM9q9rWQTxdjRrSK Ci5TgpfGQApoT4P3m+tH4qMOFOZg6+OKOXV+QNkTM1vShYsOOB4+hnTfhOXLXrbS A8CdFjeEA5bXVdfatTf5JuhqOgjpWMDottKhS/gwLdOXFuR/CsvTPhPDWjQTkBFK k75mknSNdOUNUB3EJyyvPeRJjIjVTC+9 -----END CERTIFICATE-----Generated at Sat May 31 17:41:00 2025 by rpki-client