$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: L2eS8MjHKTCg3yzlbOSiWUtoV3Ow0cBPl+Krg5Y7Mw8= Subject key identifier: C1:64:60:6D:95:BA:2B:87:AC:8B:2D:45:9A:4C:EC:61:38:E6:10:FE Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0130 Signing time: Sat 31 May 2025 04:12:25 +0000 Manifest this update: Sat 31 May 2025 04:12:25 +0000 Manifest next update: Sat 07 Jun 2025 04:12:25 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: UmNYpjsGxr386dw0qQoYCt5Agtv1uJindrEtIGkv9nA=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: May 31 04:12:25 2025 GMT Not After : Jun 7 04:12:25 2025 GMT Subject: CN=683a81a9-d02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:86:a3:3f:15:25:c0:5e:23:84:86:4b:64: 5a:56:58:d8:1d:de:38:d7:7d:5f:e3:59:d6:65:b9: 03:72:26:fe:b2:95:e1:5c:99:b0:e1:65:cd:1e:32: f0:ff:cd:9a:f2:93:6b:d2:d0:99:e6:c1:22:dc:ce: a3:86:27:78:93:0a:4f:32:e2:67:1f:86:43:04:6d: 6f:c4:7e:d6:59:19:dd:7c:de:ff:46:8a:72:7e:4c: 72:28:3b:54:1f:23:79:51:86:1d:f7:8d:bc:1a:47: 1d:36:e6:73:5a:91:d4:c4:30:c3:be:f2:1b:60:c4: 6f:53:d4:96:d9:66:49:b4:02:64:ac:f9:71:f4:8c: c0:91:e5:60:d5:6a:f5:40:07:09:ef:35:af:d7:d3: 73:35:0f:b0:47:63:6a:f5:b5:c3:8e:af:f4:75:df: 15:13:15:ac:64:e2:81:b7:6d:1c:47:58:89:94:a6: 1f:46:57:d6:1b:62:c9:8d:0a:84:3b:66:a7:db:56: 44:36:08:9e:c4:26:3d:c8:3d:e4:d7:dd:2e:ed:6a: 71:c3:dd:49:8b:02:9d:e0:7f:20:95:a1:68:4c:f2: e1:b1:a3:07:71:45:37:6e:d3:29:d7:ca:a9:59:a5: d0:c7:27:0a:ce:33:f1:e5:dd:cb:35:58:48:cd:f4: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:60:6D:95:BA:2B:87:AC:8B:2D:45:9A:4C:EC:61:38:E6:10:FE X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e0:5d:68:cd:a9:17:c7:1e:d8:aa:25:3f:2c:c4:84:49:ce: 53:a6:34:f5:0c:dd:23:3e:9a:dd:c2:9e:99:ce:21:de:f6:a0: 41:50:46:88:db:2f:30:53:2d:05:c4:0b:35:dd:d5:54:e1:7e: 61:a9:c0:0e:68:f1:e3:1f:94:73:a1:2b:37:0f:4b:07:66:54: 31:07:b1:73:2f:f7:95:0c:39:36:d0:17:2b:c9:93:1d:5c:e7: 5e:8e:76:7a:06:56:20:d2:46:39:b6:8e:a0:bd:5b:d7:c6:54: 6c:63:34:ce:9d:1d:52:b0:84:61:90:ca:4e:98:ed:27:96:60: 21:22:62:1a:38:c0:00:33:62:58:66:23:3f:43:6a:7b:73:bc: d3:cc:7a:7b:39:ae:09:b1:0b:83:f3:f2:dd:4e:16:f8:32:8d: 51:87:be:4f:0d:b1:d6:01:35:ef:21:92:63:48:1a:5a:2a:cd: c7:d1:84:85:24:b7:09:27:66:f3:9e:9b:7e:af:92:d7:52:e9: 7e:6b:1e:5c:f1:6f:f2:43:6d:31:b8:eb:eb:9f:ff:b5:bc:eb: 43:6e:6b:b2:75:0b:08:ea:a1:9e:c4:c5:c2:97:b1:80:c1:41: 9a:e5:fc:eb:4e:0f:dd:26:57:93:b2:7d:04:7e:5f:08:a6:3a: 13:60:05:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUwNTMxMDQxMjI1WhcNMjUwNjA3MDQxMjI1WjAYMRYwFAYD VQQDEw02ODNhODFhOS1kMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4iGoz8VJcBeI4SGS2RaVljYHd44131f41nWZbkDcib+spXhXJmw4WXNHjLw /82a8pNr0tCZ5sEi3M6jhid4kwpPMuJnH4ZDBG1vxH7WWRndfN7/RopyfkxyKDtU HyN5UYYd9428GkcdNuZzWpHUxDDDvvIbYMRvU9SW2WZJtAJkrPlx9IzAkeVg1Wr1 QAcJ7zWv19NzNQ+wR2Nq9bXDjq/0dd8VExWsZOKBt20cR1iJlKYfRlfWG2LJjQqE O2an21ZENgiexCY9yD3k190u7Wpxw91JiwKd4H8glaFoTPLhsaMHcUU3btMp18qp WaXQxycKzjPx5d3LNVhIzfTjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFkYG2V uiuHrIstRZpM7GE45hD+MB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY4F1ozakXxx7YqiU/LMSESc5TpjT1DN0jPprdwp6ZziHe9qBBUEaI 2y8wUy0FxAs13dVU4X5hqcAOaPHjH5RzoSs3D0sHZlQxB7FzL/eVDDk20BcryZMd XOdejnZ6BlYg0kY5to6gvVvXxlRsYzTOnR1SsIRhkMpOmO0nlmAhImIaOMAAM2JY ZiM/Q2p7c7zTzHp7Oa4JsQuD8/LdThb4Mo1Rh75PDbHWATXvIZJjSBpaKs3H0YSF JLcJJ2bznpt+r5LXUul+ax5c8W/yQ20xuOvrn/+1vOtDbmuydQsI6qGexMXCl7GA wUGa5fzrTg/dJleTsn0Efl8IpjoTYAVY -----END CERTIFICATE-----Generated at Sat May 31 15:12:59 2025 by rpki-client