$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: zvOGevaGeKWVZm3ehNKc8xz5Qnc9nwzOMtsePc72R6k= Subject key identifier: 37:93:C8:B9:7E:DD:5D:1C:20:F8:45:0F:99:65:99:6A:23:7F:65:E3 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 04B9 Signing time: Sat 31 May 2025 00:05:16 +0000 Manifest this update: Sat 31 May 2025 00:05:15 +0000 Manifest next update: Sat 07 Jun 2025 00:05:15 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: 54jSV9TLi1iQpoqwWfg7gnACmspIGMMhTgLQOGRbQU4=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: May 31 00:05:15 2025 GMT Not After : Jun 7 00:05:15 2025 GMT Subject: CN=683a47bb-d76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:f6:4a:b2:85:4e:a3:e7:ba:a7:e1:23:b4: e6:d3:f9:f8:e3:4c:cb:9d:82:fd:97:c0:b0:a6:b8: a9:d4:e3:b3:a6:7b:5d:0e:93:0a:68:0b:79:99:52: 8d:9c:bf:60:9a:59:4c:7f:ee:8b:79:72:19:0b:11: 16:f9:c7:c7:70:bb:61:f4:59:ee:1e:60:54:d9:37: 09:0d:f4:eb:0b:3e:b7:4f:77:2b:28:f8:8b:4e:0a: 9a:03:74:20:55:3c:9e:5b:0c:ae:9f:96:04:e8:6a: 1e:7c:a1:f8:56:a7:c7:11:74:d8:ea:b9:7a:98:b5: 72:cc:5b:2f:60:86:f5:97:d9:42:07:e6:ac:57:d7: 71:e3:77:d1:d3:ef:c8:1c:73:29:e6:8b:39:ed:7c: fe:e7:ed:dc:13:db:11:ea:f8:4c:7c:7d:45:10:2a: 38:af:e8:d4:cd:ba:21:7a:39:02:81:e2:b4:a0:c5: 22:b7:08:97:52:d7:48:5b:29:fb:eb:7b:97:8a:f9: c4:0b:35:65:a1:e8:25:34:71:c2:ba:48:e1:e3:c1: 62:00:33:f3:0f:61:e3:7e:bd:20:eb:95:8f:45:cc: c4:50:fa:59:7b:36:94:3d:09:9d:15:7b:aa:97:28: 7f:3c:0d:4c:22:4d:7f:48:55:01:ea:65:54:55:b3: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:C8:B9:7E:DD:5D:1C:20:F8:45:0F:99:65:99:6A:23:7F:65:E3 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:9f:7f:e1:4d:c3:dd:63:76:86:fe:7b:43:9c:fd:db:43: b1:cf:bc:91:37:b8:80:58:f4:ec:e1:67:bd:c1:5d:fd:ef:98: 45:e7:4a:7b:b6:52:30:63:49:90:14:e3:68:a2:20:bb:55:b0: 62:24:5d:d0:58:77:02:73:17:ea:76:7f:48:9c:66:e6:19:84: 30:84:07:fa:cc:9a:46:fa:a9:8f:3a:6f:af:05:99:fe:b3:fe: 92:99:45:65:2f:34:4e:c0:18:0d:f1:00:38:69:16:a2:c9:96: d6:68:92:0f:70:64:3d:f3:59:65:72:b2:d8:06:d2:7f:62:84: 39:f1:36:fa:c7:f2:e1:92:92:f2:52:b5:0e:d4:05:38:d0:8a: e0:df:92:83:a3:c3:ec:c8:94:41:4e:73:7f:8a:68:31:6c:1d: 53:e1:96:dc:bb:f1:b8:0e:ff:75:2f:cc:d6:3b:de:5c:9e:97: 19:57:ac:a7:26:13:75:fc:94:b1:0c:7c:22:93:da:f4:bb:a6: 8a:e4:05:1a:ab:e3:3d:57:c0:ba:4d:2d:9e:f0:ea:62:4b:ff: 4f:b3:c1:5d:15:32:30:87:8f:fb:b4:7a:a9:7d:41:b5:36:15: d4:ff:34:19:3e:23:e8:29:ac:e6:ee:3d:15:71:56:d2:fe:b3: 36:86:05:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUwNTMxMDAwNTE1WhcNMjUwNjA3MDAwNTE1WjAYMRYwFAYD VQQDEw02ODNhNDdiYi1kNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxT2SrKFTqPnuqfhI7Tm0/n440zLnYL9l8Cwprip1OOzpntdDpMKaAt5mVKN nL9gmllMf+6LeXIZCxEW+cfHcLth9FnuHmBU2TcJDfTrCz63T3crKPiLTgqaA3Qg VTyeWwyun5YE6GoefKH4VqfHEXTY6rl6mLVyzFsvYIb1l9lCB+asV9dx43fR0+/I HHMp5os57Xz+5+3cE9sR6vhMfH1FECo4r+jUzbohejkCgeK0oMUitwiXUtdIWyn7 63uXivnECzVloeglNHHCukjh48FiADPzD2Hjfr0g65WPRczEUPpZezaUPQmdFXuq lyh/PA1MIk1/SFUB6mVUVbNokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeTyLl+ 3V0cIPhFD5llmWojf2XjMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFi59/4U3D3WN2hv57Q5z920Oxz7yRN7iAWPTs4We9wV3975hF50p7 tlIwY0mQFONooiC7VbBiJF3QWHcCcxfqdn9InGbmGYQwhAf6zJpG+qmPOm+vBZn+ s/6SmUVlLzROwBgN8QA4aRaiyZbWaJIPcGQ981llcrLYBtJ/YoQ58Tb6x/LhkpLy UrUO1AU40Irg35KDo8PsyJRBTnN/imgxbB1T4Zbcu/G4Dv91L8zWO95cnpcZV6yn JhN1/JSxDHwik9r0u6aK5AUaq+M9V8C6TS2e8OpiS/9Ps8FdFTIwh4/7tHqpfUG1 NhXU/zQZPiPoKazm7j0VcVbS/rM2hgW9 -----END CERTIFICATE-----Generated at Sat May 31 17:22:09 2025 by rpki-client