$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json) Hash identifier: yLskm8JWeAW69EwXZmmQV6Dx0nrEVINheIvw17KCYbQ= Subject key identifier: 6C:9C:86:11:91:93:AC:0F:98:C4:8F:01:19:D6:C6:45:E2:D0:36:04 Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft Manifest number: C8 Signing time: Sat 31 May 2025 05:22:01 +0000 Manifest this update: Sat 31 May 2025 05:22:00 +0000 Manifest next update: Sat 07 Jun 2025 05:22:00 +0000 Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: C3RsTYWpx3kEIS31zP9xOYe+/hFHLcPO+RYp3TlkN2c=) 2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: tBki4iy/q8HliVYsXbIzEJgcPuIm2NjXgIYSPz8ugw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Validity Not Before: May 31 05:22:00 2025 GMT Not After : Jun 7 05:22:00 2025 GMT Subject: CN=683a91f8-fd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:34:b3:86:6f:5f:0d:3d:2d:c0:b2:92:2d: b5:c5:4e:62:3c:59:3c:ab:7a:f9:72:23:42:af:e5: 99:0e:b9:a6:d2:1c:d7:da:53:7e:08:88:97:da:6b: c9:f3:d8:fe:34:fe:58:5c:d7:7d:e5:9a:45:be:0e: 85:82:92:97:5e:bf:a2:b6:a8:d1:e8:e9:b0:5f:a2: bd:74:da:f7:db:8a:1e:96:cb:35:b9:fe:78:a5:3e: 68:ef:9a:87:d3:ea:26:62:ce:7b:5c:f6:b1:e9:9a: 0d:4e:1b:5b:09:3d:4e:83:b6:e3:4d:0d:60:29:98: 85:b1:f0:ba:ce:95:96:31:05:ee:80:23:4b:5c:9e: c1:bd:d2:31:0f:94:79:aa:9b:d9:58:b2:3d:65:bd: de:9c:b3:f1:15:aa:88:a9:71:b6:e1:8f:aa:d9:43: 41:7f:3f:f3:e6:3f:dd:f4:21:19:56:be:81:17:e0: 88:44:9d:c0:fb:e9:b3:20:04:b4:0c:cc:c9:b1:80: 42:7a:19:d1:03:aa:61:f7:e9:00:30:69:5e:a2:fd: b6:c8:6a:db:29:2e:fb:33:fd:72:1e:ef:63:1a:ea: 9e:bc:fc:0b:97:b6:90:33:b2:16:af:ae:66:ad:0a: 7f:90:21:3d:f6:84:c9:03:4c:65:fe:99:1a:2f:7a: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9C:86:11:91:93:AC:0F:98:C4:8F:01:19:D6:C6:45:E2:D0:36:04 X509v3 Authority Key Identifier: keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:2e:53:13:7f:97:11:30:a2:16:00:17:66:0d:05:34:73: 45:b1:33:3a:67:c5:a9:18:8f:7e:34:67:e2:ef:e9:b5:fa:23: 87:d1:e0:33:5f:11:8e:03:97:0d:b4:36:4f:10:80:ae:85:2f: 06:4e:b1:70:c4:2f:df:3f:f0:c8:df:cc:51:b0:31:56:fd:26: 16:9c:22:3d:c7:fb:8f:1b:9a:c5:62:de:8f:bc:86:0b:d6:c4: 4b:f4:4b:7c:b1:66:50:ba:8b:4e:78:d0:6f:0b:47:18:37:8b: 6f:3c:2b:54:2a:57:8d:92:65:3c:1c:9e:56:d7:5f:51:5d:a2: 68:26:8e:72:95:4b:39:7f:0d:88:85:95:98:1a:29:48:77:6b: a2:6b:91:e1:1a:3e:a6:fb:cb:3f:1b:cd:68:ae:c5:6c:8f:ad: 1a:1f:ab:d5:72:e3:5c:cf:0e:e6:44:89:b5:07:65:9c:79:c9: 62:ba:73:e2:0c:cf:1d:0c:41:15:71:ad:ad:48:e7:aa:2e:01: bf:83:2b:2e:97:0c:35:a3:95:ca:16:4d:ff:bb:22:73:af:84: 99:e3:6d:d2:66:81:c0:13:3f:40:d0:44:f0:e2:d8:bc:68:3d: ce:d3:a1:4b:8e:77:57:7e:ca:23:e2:16:97:09:6c:b5:b2:ae: 87:b2:5d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NzUxMTAvBgNVBAUTKENBMjQ1ODMxMDZGQjU0OTg0Qzc4MTU4OTVFM0UxOUVE Rjc5Qzk4QkYwHhcNMjUwNTMxMDUyMjAwWhcNMjUwNjA3MDUyMjAwWjAYMRYwFAYD VQQDEw02ODNhOTFmOC1mZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqQ0s4ZvXw09LcCyki21xU5iPFk8q3r5ciNCr+WZDrmm0hzX2lN+CIiX2mvJ 89j+NP5YXNd95ZpFvg6FgpKXXr+itqjR6OmwX6K9dNr324oelss1uf54pT5o75qH 0+omYs57XPax6ZoNThtbCT1Og7bjTQ1gKZiFsfC6zpWWMQXugCNLXJ7BvdIxD5R5 qpvZWLI9Zb3enLPxFaqIqXG24Y+q2UNBfz/z5j/d9CEZVr6BF+CIRJ3A++mzIAS0 DMzJsYBCehnRA6ph9+kAMGleov22yGrbKS77M/1yHu9jGuqevPwLl7aQM7IWr65m rQp/kCE99oTJA0xl/pkaL3qazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGychhGR k6wPmMSPARnWxkXi0DYEMB8GA1UdIwQYMBaAFMokWDEG+1SYTHgViV4+Ge33nJi/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY3NS85MTVBMjg2NjBF QjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZKaE1lQldKWGo0WjdmZWNt TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21MOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY3NS85MTVBMjg2NjBFQjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZK aE1lQldKWGo0WjdmZWNtTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADaC5TE3+XETCiFgAXZg0FNHNFsTM6Z8WpGI9+NGfi7+m1+iOH0eAz XxGOA5cNtDZPEICuhS8GTrFwxC/fP/DI38xRsDFW/SYWnCI9x/uPG5rFYt6PvIYL 1sRL9Et8sWZQuotOeNBvC0cYN4tvPCtUKleNkmU8HJ5W119RXaJoJo5ylUs5fw2I hZWYGilId2uia5HhGj6m+8s/G81orsVsj60aH6vVcuNczw7mRIm1B2WcecliunPi DM8dDEEVca2tSOeqLgG/gysulww1o5XKFk3/uyJzr4SZ423SZoHAEz9A0ETw4ti8 aD3O06FLjndXfsoj4haXCWy1sq6Hsl0n -----END CERTIFICATE-----Generated at Sat May 31 15:26:37 2025 by rpki-client