$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: D/ZOxa9e5ypslCJ/dAZsciXvRLg+sBUMjD+bCW+Iseg= Subject key identifier: 19:7A:D3:44:8C:6D:55:83:C3:7F:88:FE:76:70:3A:A9:A9:5A:14:39 Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 0796 Signing time: Fri 30 May 2025 21:33:38 +0000 Manifest this update: Fri 30 May 2025 21:33:38 +0000 Manifest next update: Fri 06 Jun 2025 21:33:38 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: 85BM5HcUvE4MjUPBFsNW5cXfP6+N4obOSFeBq0vAhTo=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: May 30 21:33:38 2025 GMT Not After : Jun 6 21:33:38 2025 GMT Subject: CN=683a2432-4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:bd:9c:ad:66:0e:93:29:a3:76:12:be:41: 9f:bf:12:21:19:c7:fe:58:7d:64:cb:88:cf:e5:36: 67:bc:12:ed:6f:91:f6:1c:e6:e4:86:17:d4:61:2e: 33:a0:84:f4:ba:81:61:a2:38:08:93:33:8c:29:4e: 7c:ff:84:0b:95:3b:56:ba:3a:0d:ee:7b:76:fa:1e: ab:ac:47:4b:09:21:ba:3f:55:6e:68:be:5d:8c:6a: aa:51:ee:15:cb:53:8b:ec:60:d6:c3:d3:bf:3f:9c: ad:6c:40:2e:dd:ad:d0:0a:25:a5:04:7a:7a:56:57: fc:2b:96:15:d7:20:61:b5:d8:93:96:d0:b8:b7:41: ce:10:11:75:6e:19:e1:a5:6d:5f:cb:b1:4d:3e:bf: 5d:36:55:8d:26:b9:b4:7e:e5:49:79:31:d4:cc:21: 17:d2:e0:bc:fd:0e:a3:89:dc:08:6e:d5:2f:d7:d4: 8e:fe:fb:cc:be:b9:77:47:a7:49:ed:0a:ed:39:81: 89:59:ea:af:38:dc:4c:16:dd:20:e2:a1:b4:36:d9: 5d:63:13:7a:0e:03:6d:67:6b:1f:c0:33:07:b5:61: 49:94:77:c5:47:a0:f1:1e:a6:6b:92:6d:f3:45:8a: ec:38:dc:c9:d7:db:e4:d7:98:40:68:db:07:02:72: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:D3:44:8C:6D:55:83:C3:7F:88:FE:76:70:3A:A9:A9:5A:14:39 X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:82:05:aa:ab:be:e6:a0:e1:50:c7:0c:f5:2b:32:7a:a6:a5: 31:da:11:bd:70:a3:38:d2:76:d0:6c:cf:58:3d:18:88:fa:af: 3f:f8:de:a9:56:39:e1:7b:a0:e1:79:a7:ab:2b:62:4b:d1:bf: fd:13:f2:27:93:cf:b9:ea:f3:18:48:e5:09:62:20:d2:92:17: 58:af:c4:7d:a6:45:bc:69:7c:cc:b7:45:a9:8b:ec:db:61:0d: f4:79:c5:59:3e:bf:3b:3b:55:69:46:0b:bc:7b:f0:18:24:6f: d4:64:cc:cc:a9:cb:b5:da:07:7e:c1:3b:30:67:d9:f6:59:6e: 05:5c:d2:a3:0e:37:a6:66:99:b2:aa:72:6a:f1:ca:8b:9a:6b: 11:e1:4e:d8:81:4c:2b:bd:c3:5a:25:87:42:c6:49:67:88:45: c1:11:17:7d:6d:5c:fe:8d:0d:76:30:f8:2f:0e:5c:0c:bb:24: 69:23:a2:d4:4e:a5:f4:20:46:17:b6:d5:78:4c:f4:22:58:84: 1b:49:6b:2c:68:fc:1e:69:1b:2f:b6:c2:92:b2:5f:06:6d:ea: 9e:ba:05:9a:ce:8c:7a:71:30:cb:52:83:cb:0d:12:66:47:5d: 57:fb:bd:19:8d:67:38:54:42:0e:e3:1e:d8:4d:9b:1b:cc:49: 38:e7:88:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjUwNTMwMjEzMzM4WhcNMjUwNjA2MjEzMzM4WjAYMRYwFAYD VQQDEw02ODNhMjQzMi00YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUW9nK1mDpMpo3YSvkGfvxIhGcf+WH1ky4jP5TZnvBLtb5H2HObkhhfUYS4z oIT0uoFhojgIkzOMKU58/4QLlTtWujoN7nt2+h6rrEdLCSG6P1VuaL5djGqqUe4V y1OL7GDWw9O/P5ytbEAu3a3QCiWlBHp6Vlf8K5YV1yBhtdiTltC4t0HOEBF1bhnh pW1fy7FNPr9dNlWNJrm0fuVJeTHUzCEX0uC8/Q6jidwIbtUv19SO/vvMvrl3R6dJ 7QrtOYGJWeqvONxMFt0g4qG0NtldYxN6DgNtZ2sfwDMHtWFJlHfFR6DxHqZrkm3z RYrsONzJ19vk15hAaNsHAnIJLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl600SM bVWDw3+I/nZwOqmpWhQ5MB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ggWqq77moOFQxwz1KzJ6pqUx2hG9cKM40nbQbM9YPRiI+q8/+N6p Vjnhe6DheaerK2JL0b/9E/Ink8+56vMYSOUJYiDSkhdYr8R9pkW8aXzMt0Wpi+zb YQ30ecVZPr87O1VpRgu8e/AYJG/UZMzMqcu12gd+wTswZ9n2WW4FXNKjDjemZpmy qnJq8cqLmmsR4U7YgUwrvcNaJYdCxklniEXBERd9bVz+jQ12MPgvDlwMuyRpI6LU TqX0IEYXttV4TPQiWIQbSWssaPweaRsvtsKSsl8GbeqeugWazox6cTDLUoPLDRJm R11X+70ZjWc4VEIO4x7YTZsbzEk454hp -----END CERTIFICATE-----Generated at Sat May 31 17:56:24 2025 by rpki-client