$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: UVUmpoMyrs0ZQWGAgPf8v+MY8OVR49mGTFWGwauoIbI= Subject key identifier: B2:99:B3:DF:1E:0A:42:2C:52:1B:76:09:4B:36:71:A7:3A:E7:95:1F Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 026A Signing time: Thu 05 Jun 2025 01:35:00 +0000 Manifest this update: Thu 05 Jun 2025 01:34:59 +0000 Manifest next update: Thu 12 Jun 2025 01:34:59 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: CeVFJyfACTdI/UEene4Lydy0T5Aam6/cV+kt2/hl/N0=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Jun 5 01:34:59 2025 GMT Not After : Jun 12 01:34:59 2025 GMT Subject: CN=6840f444-4522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:28:d6:13:ec:59:f8:32:95:cd:37:44:d8: 2a:cf:28:a2:23:11:fc:34:9f:06:72:bf:ab:bf:b0: d0:e5:fa:b1:6e:b3:ac:18:0c:a6:41:40:84:bb:0b: ae:71:88:86:70:d4:ac:74:0d:7d:cb:2e:c9:9a:78: 67:98:9c:10:99:71:46:14:22:e5:ee:3c:2c:0a:20: 03:c1:97:37:49:86:15:18:d7:00:2e:4b:12:eb:94: 23:00:68:2e:46:a4:f7:57:09:b9:54:d0:93:2f:15: f3:f3:2e:a3:b2:2b:6f:8c:89:6f:1a:75:76:11:7d: 72:20:1f:b5:12:e1:1f:85:e5:37:31:c7:6f:7b:cb: 42:fe:8d:32:f3:45:87:c8:a3:78:f5:c1:40:fa:d2: 42:ec:cb:e6:05:8d:d4:72:ee:d7:ea:5d:d8:1a:15: 84:89:89:2d:20:c0:ff:e1:de:c3:d7:81:db:8d:67: 32:65:1b:07:15:fe:2f:5b:37:3d:0d:9b:78:02:49: eb:77:22:ce:2c:da:a2:8f:2e:da:c1:ed:7a:fc:67: 3d:9a:0a:f8:06:46:2d:f1:2e:fb:35:60:33:f1:33: c3:88:87:8c:41:a6:7f:e4:a8:e0:67:1e:6f:5c:57: 6b:5d:af:84:85:f3:aa:d9:f0:9a:b4:74:21:33:78: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:B3:DF:1E:0A:42:2C:52:1B:76:09:4B:36:71:A7:3A:E7:95:1F X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:ba:24:16:86:d9:37:75:6d:8f:ae:1d:e1:4c:0c:08:2f: a3:6a:c6:4e:74:83:88:23:1b:0b:94:d7:7c:f1:c1:40:21:f2: 6c:71:d3:28:8f:f9:da:62:82:c3:9a:18:e1:f2:b8:12:2b:df: 71:e2:68:ec:85:e8:d0:6a:75:07:64:a9:d7:79:d5:b2:ea:e0: c8:40:fd:08:b1:60:0e:f3:cd:e0:7f:10:99:50:78:52:ca:a7: ec:4a:16:66:93:65:89:78:15:56:33:3e:d7:82:fc:a0:f8:89: f6:0c:f6:68:91:d7:03:26:28:96:28:0b:e8:ec:71:d4:ae:f8: 05:e2:34:9e:c3:01:3c:8b:6b:67:73:c7:cc:29:9c:01:31:b2: 2e:63:0f:e7:65:da:b2:af:b7:37:73:26:ed:f7:28:8d:d7:61: 3f:dc:9e:0d:a7:81:5e:b0:c7:14:8f:8c:37:91:7f:0f:ad:5b: a9:19:7b:a1:35:e0:d7:04:ce:2c:32:c4:d5:c3:47:e2:eb:fa: 34:b6:a7:f4:a1:51:cb:87:b6:5c:0c:3a:ef:ec:db:37:04:3c: 96:fb:d9:89:a6:2f:3e:fe:e5:34:5c:03:e8:23:64:8b:10:d1: 6d:53:de:7b:05:38:c4:d4:98:36:24:23:34:76:97:55:04:e7: d8:66:44:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUwNjA1MDEzNDU5WhcNMjUwNjEyMDEzNDU5WjAYMRYwFAYD VQQDEw02ODQwZjQ0NC00NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29oo1hPsWfgylc03RNgqzyiiIxH8NJ8Gcr+rv7DQ5fqxbrOsGAymQUCEuwuu cYiGcNSsdA19yy7JmnhnmJwQmXFGFCLl7jwsCiADwZc3SYYVGNcALksS65QjAGgu RqT3Vwm5VNCTLxXz8y6jsitvjIlvGnV2EX1yIB+1EuEfheU3Mcdve8tC/o0y80WH yKN49cFA+tJC7MvmBY3Ucu7X6l3YGhWEiYktIMD/4d7D14HbjWcyZRsHFf4vWzc9 DZt4AknrdyLOLNqijy7awe16/Gc9mgr4BkYt8S77NWAz8TPDiIeMQaZ/5KjgZx5v XFdrXa+EhfOq2fCatHQhM3hEBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKZs98e CkIsUht2CUs2cac655UfMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEPLokFobZN3Vtj64d4UwMCC+jasZOdIOIIxsLlNd88cFAIfJscdMo j/naYoLDmhjh8rgSK99x4mjshejQanUHZKnXedWy6uDIQP0IsWAO883gfxCZUHhS yqfsShZmk2WJeBVWMz7Xgvyg+In2DPZokdcDJiiWKAvo7HHUrvgF4jSewwE8i2tn c8fMKZwBMbIuYw/nZdqyr7c3cybt9yiN12E/3J4Np4FesMcUj4w3kX8PrVupGXuh NeDXBM4sMsTVw0fi6/o0tqf0oVHLh7ZcDDrv7Ns3BDyW+9mJpi8+/uU0XAPoI2SL ENFtU957BTjE1Jg2JCM0dpdVBOfYZkSe -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:12 2025 by rpki-client