$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: i+HIw+zgVYX7rjjo0r+z3Nu+iHMGaMlIBRoYYUItk0Q= Subject key identifier: 73:E3:CB:89:91:D4:4F:33:8B:F8:E9:C6:4F:36:64:3B:91:0C:B9:EA Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: C0 Signing time: Sat 31 May 2025 05:29:21 +0000 Manifest this update: Sat 31 May 2025 05:29:21 +0000 Manifest next update: Sat 07 Jun 2025 05:29:21 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 807E/0kAxsO+cBTpLZZpLVzCQDV+A6hrbJpWUtBDisc=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: May 31 05:29:21 2025 GMT Not After : Jun 7 05:29:21 2025 GMT Subject: CN=683a93b1-da50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:76:76:af:c9:f8:76:8b:96:ce:61:e2:33: 61:42:d2:cc:af:8d:37:df:ca:9d:a1:5a:a9:e0:c1: 05:aa:bd:b7:34:94:f1:4f:ab:7b:06:3c:b4:03:8f: 10:30:84:d4:2f:65:e0:94:45:21:e0:91:3e:6b:d8: 00:47:e3:47:9a:0f:2f:b9:4d:d8:16:91:7f:68:28: 77:c4:7e:28:00:b7:35:52:a1:1b:4e:b9:87:b9:dd: e0:f7:27:c7:3f:a3:44:8a:07:96:d3:13:a7:f9:d7: 49:73:22:e9:b6:d2:bc:c4:6a:74:17:c6:94:64:8d: 8b:80:96:08:3b:ba:54:fb:ac:f2:46:7c:a6:93:03: 84:8b:e2:48:ea:be:e0:9d:7c:3a:f4:d0:e8:f8:07: b8:48:9c:f4:6c:83:f8:c2:c8:4c:1d:be:e1:3a:77: 14:21:89:ea:f8:33:bc:08:84:0e:d0:c2:ef:5c:f9: 28:38:0b:80:b4:ee:9c:96:4e:ed:d8:43:7b:b6:6d: e6:0f:b1:81:4e:04:1f:57:41:06:fc:22:bf:dc:81: a9:ff:a7:29:ac:2e:e4:9d:de:69:a6:61:de:6b:ee: 70:12:bc:67:db:b5:16:30:47:b9:8f:2d:e2:43:73: ee:60:15:56:70:e5:1c:a8:46:45:c8:d5:7f:74:83: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E3:CB:89:91:D4:4F:33:8B:F8:E9:C6:4F:36:64:3B:91:0C:B9:EA X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b0:e7:9c:91:0f:65:eb:fb:3b:e1:b5:8a:a7:08:32:71:36: 5d:1f:a0:73:72:bf:f8:57:4e:3b:8b:df:5b:3b:a7:41:76:3a: cc:9e:71:64:87:27:35:27:9d:90:e1:08:a0:7e:6d:04:f2:b3: 36:a4:60:bd:75:5a:f2:6b:ef:63:89:fe:15:8e:9d:41:61:51: 0e:a6:b6:38:6c:3b:16:b9:33:e2:dc:dd:7f:11:55:f5:db:6a: dd:71:28:b5:35:c7:9f:bf:19:88:86:34:94:ac:67:31:73:02: e4:48:f2:7f:84:c0:e7:52:4b:12:a9:e7:c0:fb:7d:39:6d:3b: 3b:a1:c9:09:0b:fd:55:26:17:bd:95:89:c3:8b:ac:d7:8c:d6: 47:f6:55:d1:c8:0f:97:11:fb:58:61:7b:d5:9d:2c:94:a3:18: 63:b5:cd:3d:63:5a:9d:40:2b:3b:9a:b9:e8:57:46:a0:d8:70: de:21:e6:b8:32:96:ff:be:c3:67:7d:a2:75:d8:68:46:04:4a: 98:7e:2f:b4:8e:06:df:b4:c8:69:bd:e3:59:2d:03:ef:38:47: a5:84:c2:39:c0:81:45:2a:72:a7:3d:ce:ca:43:4c:24:92:02: 5f:ba:9e:ac:40:97:4f:65:e2:c6:53:37:4d:dc:d6:0e:7b:26: a7:70:f1:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUwNTMxMDUyOTIxWhcNMjUwNjA3MDUyOTIxWjAYMRYwFAYD VQQDEw02ODNhOTNiMS1kYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuF2dq/J+HaLls5h4jNhQtLMr40338qdoVqp4MEFqr23NJTxT6t7Bjy0A48Q MITUL2XglEUh4JE+a9gAR+NHmg8vuU3YFpF/aCh3xH4oALc1UqEbTrmHud3g9yfH P6NEigeW0xOn+ddJcyLpttK8xGp0F8aUZI2LgJYIO7pU+6zyRnymkwOEi+JI6r7g nXw69NDo+Ae4SJz0bIP4wshMHb7hOncUIYnq+DO8CIQO0MLvXPkoOAuAtO6clk7t 2EN7tm3mD7GBTgQfV0EG/CK/3IGp/6cprC7knd5ppmHea+5wErxn27UWMEe5jy3i Q3PuYBVWcOUcqEZFyNV/dIN7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPjy4mR 1E8zi/jpxk82ZDuRDLnqMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1sOeckQ9l6/s74bWKpwgycTZdH6Bzcr/4V047i99bO6dBdjrMnnFk hyc1J52Q4Qigfm0E8rM2pGC9dVrya+9jif4Vjp1BYVEOprY4bDsWuTPi3N1/EVX1 22rdcSi1NcefvxmIhjSUrGcxcwLkSPJ/hMDnUksSqefA+305bTs7ockJC/1VJhe9 lYnDi6zXjNZH9lXRyA+XEftYYXvVnSyUoxhjtc09Y1qdQCs7mrnoV0ag2HDeIea4 Mpb/vsNnfaJ12GhGBEqYfi+0jgbftMhpveNZLQPvOEelhMI5wIFFKnKnPc7KQ0wk kgJfup6sQJdPZeLGUzdN3NYOeyancPGi -----END CERTIFICATE-----Generated at Sat May 31 17:26:14 2025 by rpki-client