$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: ciA2ctMPR3JzFX2q9+TS5MyMvcCo0datnphscyZ/SjE= Subject key identifier: 8C:BB:17:C4:80:B3:A6:F7:88:58:84:8E:30:C1:40:3F:06:28:17:B4 Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 09B6 Signing time: Fri 30 May 2025 20:11:45 +0000 Manifest this update: Fri 30 May 2025 20:11:44 +0000 Manifest next update: Fri 06 Jun 2025 20:11:44 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: JsVggUWfXHUpgJUpqyUVZDgVDOTdeqzqn717Wl3tYEM=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: May 30 20:11:44 2025 GMT Not After : Jun 6 20:11:44 2025 GMT Subject: CN=683a1101-087a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:4d:19:1b:29:3f:49:d7:6d:20:ff:08:9c: 20:67:f9:7f:e6:21:9d:ed:08:6a:5c:27:99:eb:52: 31:25:e2:64:e6:a5:3f:57:bc:96:42:94:4f:33:89: 97:00:0b:42:8a:bb:e1:35:d0:cf:9c:6b:af:86:83: bd:df:e8:47:d2:70:f6:9d:74:2b:d9:52:96:dc:46: 29:7d:4f:82:dc:2a:67:2c:f1:24:62:60:b7:e7:5c: ad:56:d8:19:27:c5:72:e8:59:d4:3d:a3:a1:3d:58: 00:09:f8:ba:9a:44:66:cb:4b:4b:16:67:ce:7a:b0: 39:bb:4d:22:38:8e:81:a9:02:10:d3:6c:66:87:33: 96:4b:de:0e:54:56:c3:a1:f7:20:e6:be:73:20:51: 0d:0e:6c:0e:bb:fa:3a:17:87:bb:f7:d5:97:28:19: c3:93:dd:4f:50:a5:f3:8c:f6:36:ff:b2:92:37:f0: 23:62:74:6f:ae:de:6e:4e:ea:bd:78:aa:8c:18:a6: 1f:55:c9:21:9d:68:eb:93:10:20:42:67:e4:5d:f7: 60:ca:4a:6b:ca:d6:02:fd:28:3a:84:d1:0b:4b:60: db:8f:ac:76:a6:e9:7b:d2:2a:29:10:d9:3c:30:7e: d5:70:96:d7:ca:2f:be:08:6f:26:21:55:11:5c:2d: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:17:C4:80:B3:A6:F7:88:58:84:8E:30:C1:40:3F:06:28:17:B4 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d0:65:c0:09:31:07:e1:68:db:95:10:48:e0:19:99:d5:95: 4d:91:81:6a:6d:df:a7:3c:89:82:4c:fb:d0:a7:ca:b4:f3:71: f3:a1:06:37:d5:d0:b5:a7:3b:e5:3b:b2:90:24:33:0a:c2:6f: 6d:09:2d:03:8f:f7:21:3d:50:60:3f:52:65:ad:ee:b2:82:d9: 7d:38:ad:58:50:e9:ed:a6:fd:44:4d:25:5b:fe:9f:b8:25:29: 7d:ab:61:86:45:7d:4a:c3:29:04:26:17:1d:6e:68:a8:86:12: f4:6d:a3:dc:19:3f:cf:e6:21:cb:43:76:85:26:09:c1:46:5d: 73:2c:44:e3:a6:81:8c:ae:24:0f:fc:28:70:ea:bd:37:2f:6b: f8:2a:e1:ea:0b:71:ac:50:90:bc:d9:36:fb:99:9b:1e:1a:8c: 2f:5d:58:a0:10:c8:f1:50:2d:54:f9:92:32:4a:92:46:a6:17: e6:25:da:5e:67:31:10:eb:46:f7:10:a6:73:a6:97:ad:4e:86: 07:cf:96:8e:0f:72:a1:e9:2f:f5:17:a5:36:a2:f6:d2:c9:c4: 7f:e7:03:96:94:25:92:1e:8f:1d:cc:ad:c6:8f:18:dc:90:5c: 35:fb:a4:e4:e4:32:6b:a4:c4:1e:b1:f8:e7:a9:e5:7a:a2:76: 77:c6:34:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUwNTMwMjAxMTQ0WhcNMjUwNjA2MjAxMTQ0WjAYMRYwFAYD VQQDEw02ODNhMTEwMS0wODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs71NGRspP0nXbSD/CJwgZ/l/5iGd7QhqXCeZ61IxJeJk5qU/V7yWQpRPM4mX AAtCirvhNdDPnGuvhoO93+hH0nD2nXQr2VKW3EYpfU+C3CpnLPEkYmC351ytVtgZ J8Vy6FnUPaOhPVgACfi6mkRmy0tLFmfOerA5u00iOI6BqQIQ02xmhzOWS94OVFbD ofcg5r5zIFENDmwOu/o6F4e799WXKBnDk91PUKXzjPY2/7KSN/AjYnRvrt5uTuq9 eKqMGKYfVckhnWjrkxAgQmfkXfdgykprytYC/Sg6hNELS2Dbj6x2pul70iopENk8 MH7VcJbXyi++CG8mIVURXC2b8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy7F8SA s6b3iFiEjjDBQD8GKBe0MB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo0GXACTEH4WjblRBI4BmZ1ZVNkYFqbd+nPImCTPvQp8q083HzoQY3 1dC1pzvlO7KQJDMKwm9tCS0Dj/chPVBgP1Jlre6ygtl9OK1YUOntpv1ETSVb/p+4 JSl9q2GGRX1KwykEJhcdbmiohhL0baPcGT/P5iHLQ3aFJgnBRl1zLETjpoGMriQP /Chw6r03L2v4KuHqC3GsUJC82Tb7mZseGowvXVigEMjxUC1U+ZIySpJGphfmJdpe ZzEQ60b3EKZzppetToYHz5aOD3Kh6S/1F6U2ovbSycR/5wOWlCWSHo8dzK3Gjxjc kFw1+6Tk5DJrpMQesfjnqeV6onZ3xjRX -----END CERTIFICATE-----Generated at Sat May 31 17:54:57 2025 by rpki-client