$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json) Hash identifier: n1WP5GFgPfqULDdhx2bmBQ/YIxmZFVJPOOYKlZBCZug= Subject key identifier: C0:28:B1:58:3D:19:EF:B2:A8:F2:29:75:CE:12:1F:54:62:6E:66:B6 Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft Manifest number: 0165 Signing time: Sat 31 May 2025 03:34:51 +0000 Manifest this update: Sat 31 May 2025 03:34:50 +0000 Manifest next update: Sat 07 Jun 2025 03:34:50 +0000 Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: xxZDoTT3NuMOCdvq0XmHH1LxxfqLAFsfZl6JVuSeL+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Validity Not Before: May 31 03:34:50 2025 GMT Not After : Jun 7 03:34:50 2025 GMT Subject: CN=683a78db-0f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:f4:af:6e:3f:2c:0b:37:fa:18:02:11:42: d9:b4:1c:ca:6e:b0:9a:a3:fe:91:3b:61:cc:89:d8: c0:e1:5d:6e:31:0b:c9:b3:1e:e9:b5:28:67:39:4a: 95:bd:8d:73:af:d5:7d:b4:36:27:0e:09:9f:3d:d0: fe:53:bd:d4:e4:f1:f3:ee:a0:49:6a:f0:24:38:96: c9:35:fb:3b:77:14:16:87:81:8d:ef:d8:18:45:ff: 93:74:3c:4b:79:88:80:15:85:cc:ef:17:70:63:ae: 58:01:ac:3b:a8:24:a5:d0:36:df:96:5a:99:4b:10: f9:49:88:ef:af:b0:17:b2:79:ff:fe:40:a9:4d:68: de:c5:c5:7b:77:b8:e3:0f:16:2b:69:82:b8:b5:21: 47:d8:a7:0b:90:73:08:b7:95:74:1b:3c:22:60:4d: 1e:85:41:34:1e:27:e7:af:eb:13:85:47:29:b0:84: df:7c:bd:80:ea:d6:65:91:0c:38:a9:35:cb:68:fe: ee:2d:73:f1:d4:03:61:72:b7:e7:fe:bb:c3:6e:35: 0a:cf:34:da:16:ac:20:be:ba:27:2e:8c:76:64:d8: 2c:81:79:df:78:6c:da:1b:54:c6:1f:07:4d:57:4f: f8:0d:f9:da:73:91:f5:0f:a5:28:5b:7e:29:67:79: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:28:B1:58:3D:19:EF:B2:A8:F2:29:75:CE:12:1F:54:62:6E:66:B6 X509v3 Authority Key Identifier: keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d4:69:84:9b:81:3f:a5:a7:30:7b:54:f5:b5:0b:51:24:9b: 46:c4:7f:7d:2a:44:d6:a5:16:49:fe:93:3d:53:38:51:b0:ed: 37:73:55:b4:f1:99:09:4e:74:ee:94:6b:1a:cc:ea:ba:27:e2: 8a:cd:7e:33:9d:91:33:d0:33:af:c9:85:a5:60:58:d0:33:7d: 18:6e:5d:19:cb:a2:9a:a8:cc:96:d1:b4:b4:f7:a1:dc:27:d5: d4:f8:49:7a:09:fe:9a:0f:29:78:f2:b3:c8:94:08:c1:7e:77: 2f:9f:a4:ac:6f:fe:35:01:f5:ad:dd:6c:00:2d:d1:b0:c3:44: 1e:65:1d:e1:87:17:05:bf:71:0a:25:17:72:e3:06:8a:58:88: b7:35:45:e5:df:58:94:da:8d:cd:97:f4:1d:6b:3e:c8:92:23: c2:89:12:f5:de:8c:c3:0a:56:66:41:16:33:88:14:1c:2c:94: e1:3e:bb:bb:12:68:67:93:fe:d9:47:80:fe:d5:05:3c:a8:37: ba:23:a0:b0:8d:40:11:42:35:9d:83:b9:e9:05:78:9a:55:0a: 8a:84:55:e0:4b:02:c0:1d:7e:96:a0:aa:3c:f6:f1:00:4e:36: 17:3a:c6:0a:74:44:3f:82:06:c1:5f:2e:ed:c5:ca:23:93:7d: 56:4c:8a:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3NjYxMTAvBgNVBAUTKEM5NTBFNzg3NUEzREVFRTA4MkQ5Q0M1MDM1MDBCRkRF Nzc3MDg2RTEwHhcNMjUwNTMxMDMzNDUwWhcNMjUwNjA3MDMzNDUwWjAYMRYwFAYD VQQDEw02ODNhNzhkYi0wZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj70r24/LAs3+hgCEULZtBzKbrCao/6RO2HMidjA4V1uMQvJsx7ptShnOUqV vY1zr9V9tDYnDgmfPdD+U73U5PHz7qBJavAkOJbJNfs7dxQWh4GN79gYRf+TdDxL eYiAFYXM7xdwY65YAaw7qCSl0DbfllqZSxD5SYjvr7AXsnn//kCpTWjexcV7d7jj DxYraYK4tSFH2KcLkHMIt5V0GzwiYE0ehUE0Hifnr+sThUcpsITffL2A6tZlkQw4 qTXLaP7uLXPx1ANhcrfn/rvDbjUKzzTaFqwgvronLox2ZNgsgXnfeGzaG1TGHwdN V0/4Dfnac5H1D6UoW34pZ3lfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAosVg9 Ge+yqPIpdc4SH1Ribma2MB8GA1UdIwQYMBaAFMlQ54daPe7ggtnMUDUAv953cIbh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzc2Ni9EQjdDRDg4NDE2 NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1Q0MyY3hRTlFDXzNuZHdo dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWRG5oMW85N3VDQzJjeFFOUUNfM25kd2h1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzc2Ni9EQjdDRDg4NDE2NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1 Q0MyY3hRTlFDXzNuZHdodUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1GmEm4E/pacwe1T1tQtRJJtGxH99KkTWpRZJ/pM9UzhRsO03c1W0 8ZkJTnTulGsazOq6J+KKzX4znZEz0DOvyYWlYFjQM30Ybl0Zy6KaqMyW0bS096Hc J9XU+El6Cf6aDyl48rPIlAjBfncvn6Ssb/41AfWt3WwALdGww0QeZR3hhxcFv3EK JRdy4waKWIi3NUXl31iU2o3Nl/Qdaz7IkiPCiRL13ozDClZmQRYziBQcLJThPru7 Emhnk/7ZR4D+1QU8qDe6I6CwjUARQjWdg7npBXiaVQqKhFXgSwLAHX6WoKo89vEA TjYXOsYKdEQ/ggbBXy7txcojk31WTIqe -----END CERTIFICATE-----Generated at Sat May 31 17:12:56 2025 by rpki-client