$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: 5Zd94DKUbFmXVV13Hmy5X2AefZhjjaR8RvPJUFq+XH8= Subject key identifier: 24:33:66:52:47:F7:21:65:57:32:80:2F:E3:75:AA:C6:66:6D:0C:61 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B5E Signing time: Sat 31 May 2025 16:14:34 +0000 Manifest this update: Sat 31 May 2025 16:14:33 +0000 Manifest next update: Sat 07 Jun 2025 16:14:33 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: +vvsj7cPQsbyb9FTOg3ux8xNXLXwtMURdlzHV+zzLCM=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7016 (0x1b68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: May 31 16:14:33 2025 GMT Not After : Jun 7 16:14:33 2025 GMT Subject: CN=683b2ae9-cf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:3f:c7:c5:b2:2a:e5:37:45:68:f1:16:e7: f8:70:79:fb:13:62:a7:9d:98:c4:ad:8a:fc:4a:63: 41:20:27:5e:59:f9:d1:c3:f4:c8:f1:21:b2:eb:09: 8f:34:7b:26:1f:fa:fb:57:1a:72:62:5a:af:f7:5a: 75:cf:a8:10:81:2a:87:79:64:66:c5:f2:62:b9:d4: 4c:c6:d8:cd:1a:12:db:c4:1a:9c:0b:54:bc:9b:ea: 1c:31:f7:fd:b1:7e:99:41:57:21:f5:d7:2c:0f:fb: 7d:ee:fe:19:93:95:97:f0:4f:76:d5:30:db:e9:5e: 8e:75:44:b4:e6:88:cd:be:52:9f:1e:09:d3:1f:1a: 71:4a:8f:2a:bb:ad:3c:6a:99:08:50:09:49:54:4d: de:e9:9b:3a:21:37:ba:31:2e:a7:47:c5:f4:65:55: cc:f7:d3:5d:80:14:3f:5d:ce:6e:86:b0:58:73:10: 5d:89:ce:90:e1:e9:a1:1e:9a:9b:aa:64:08:c3:c3: 77:64:11:a2:d2:35:e5:85:d3:40:2b:52:ac:ee:fc: ea:3c:e8:5e:40:1e:a7:f4:a0:24:ac:71:70:d5:1a: c6:d6:44:ea:f7:81:0c:00:53:6c:d0:0a:19:31:c6: ad:45:6d:92:30:87:ef:ff:07:ed:88:0c:e4:c3:bf: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:66:52:47:F7:21:65:57:32:80:2F:E3:75:AA:C6:66:6D:0C:61 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:45:0b:c0:6d:96:af:dd:32:59:32:a1:11:91:32:cb:b3:c5: 3a:c2:a4:45:2a:91:78:09:79:45:9c:9b:2f:6c:ac:1f:e3:66: a5:7f:73:44:f4:41:e8:c8:f6:2a:ce:26:0a:9e:31:db:f1:2c: 56:a4:46:8d:c0:46:ab:ab:e7:bd:9f:23:31:65:54:80:f7:01: 14:48:af:a3:ce:b1:67:cb:05:f5:57:b5:57:53:25:5d:cb:33: bf:ee:c2:55:04:26:57:26:70:4d:73:67:33:3e:bc:b0:4d:7e: 5f:02:51:5c:0a:1c:2a:b9:d8:67:b9:d7:22:f3:9d:07:02:a4: d8:5c:c8:ff:68:58:76:b0:3a:4e:69:0f:3f:c7:6f:b2:9f:8c: 74:d3:5b:5a:38:97:ec:01:9a:68:b7:98:65:97:cf:cd:cc:ca: 7d:c0:43:d4:cb:9f:f6:fe:a7:3d:66:b0:c9:34:91:2d:9a:50: ef:b7:a1:9e:c5:7c:c2:6c:52:ad:68:1c:b7:a1:d4:0f:b3:6e: b6:19:b0:53:cf:51:9a:63:f1:78:bd:04:df:c2:1b:dc:a3:2d: d7:8a:a5:24:c1:55:fe:8d:6a:6a:d9:24:5b:6d:89:07:70:69: 23:f8:93:3b:e7:4c:36:f0:f6:01:43:cd:dd:94:a7:4f:f6:6c: 09:3a:63:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwNTMxMTYxNDMzWhcNMjUwNjA3MTYxNDMzWjAYMRYwFAYD VQQDEw02ODNiMmFlOS1jZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXo/x8WyKuU3RWjxFuf4cHn7E2KnnZjErYr8SmNBICdeWfnRw/TI8SGy6wmP NHsmH/r7VxpyYlqv91p1z6gQgSqHeWRmxfJiudRMxtjNGhLbxBqcC1S8m+ocMff9 sX6ZQVch9dcsD/t97v4Zk5WX8E921TDb6V6OdUS05ojNvlKfHgnTHxpxSo8qu608 apkIUAlJVE3e6Zs6ITe6MS6nR8X0ZVXM99NdgBQ/Xc5uhrBYcxBdic6Q4emhHpqb qmQIw8N3ZBGi0jXlhdNAK1Ks7vzqPOheQB6n9KAkrHFw1RrG1kTq94EMAFNs0AoZ McatRW2SMIfv/wftiAzkw7+/3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQzZlJH 9yFlVzKAL+N1qsZmbQxhMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJRQvAbZav3TJZMqERkTLLs8U6wqRFKpF4CXlFnJsvbKwf42alf3NE 9EHoyPYqziYKnjHb8SxWpEaNwEarq+e9nyMxZVSA9wEUSK+jzrFnywX1V7VXUyVd yzO/7sJVBCZXJnBNc2czPrywTX5fAlFcChwqudhnudci850HAqTYXMj/aFh2sDpO aQ8/x2+yn4x001taOJfsAZpot5hll8/NzMp9wEPUy5/2/qc9ZrDJNJEtmlDvt6Ge xXzCbFKtaBy3odQPs262GbBTz1GaY/F4vQTfwhvcoy3XiqUkwVX+jWpq2SRbbYkH cGkj+JM750w28PYBQ83dlKdP9mwJOmNM -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client