$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: BZvoXiLfx0Vdw8NjS6LdhsvnUE6iK9nN8AU5vzf8EqI= Subject key identifier: AB:8A:10:79:CD:C6:AE:62:2C:C4:F9:E1:EC:17:6B:D4:9C:96:CD:83 Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: E8 Signing time: Sat 31 May 2025 05:02:22 +0000 Manifest this update: Sat 31 May 2025 05:02:21 +0000 Manifest next update: Sat 07 Jun 2025 05:02:21 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: IhrzEneQQh8ebEldTPsJiHmyYhqqavuXIslHO6vk1GM=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: May 31 05:02:21 2025 GMT Not After : Jun 7 05:02:21 2025 GMT Subject: CN=683a8d5d-869c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:e6:a1:f4:30:a0:65:be:3b:a1:5b:81:6b: 1f:a5:6f:ec:53:62:8d:96:3a:a9:40:02:df:f6:7a: 74:ed:a5:95:34:d1:ad:90:0a:56:28:92:e8:a4:a5: 8f:8a:da:0c:2d:5a:7d:de:14:41:c6:24:b0:0a:4d: 0f:09:d1:6e:ef:90:c2:fe:88:86:b8:f0:b3:ff:ec: f1:fd:87:70:bb:54:fb:63:36:db:c8:4c:1b:05:cc: 16:1c:93:6f:ef:af:aa:65:30:f1:fa:7e:d4:c7:11: 98:fb:63:be:19:fd:c8:f1:20:5b:d6:35:6f:48:a1: 25:e8:03:8a:f8:46:03:5b:84:9e:00:e5:bb:b2:50: 67:08:38:cd:6b:02:c6:bb:b2:e1:31:2e:79:bd:2a: 29:fc:67:84:db:2e:75:69:93:1e:30:32:ea:c6:08: f0:da:c1:ab:df:d4:4d:e7:8c:c4:1a:3d:0b:26:a4: aa:99:d1:01:55:aa:91:a1:2a:f1:4e:50:5b:77:5f: b7:3f:c5:df:8a:c9:8a:df:3c:20:bf:97:d8:e2:50: 99:61:53:35:b8:46:5c:cc:39:47:af:86:07:58:ad: cf:30:44:b5:50:18:86:b1:7e:a6:55:3d:fe:03:50: 06:eb:33:37:fe:a4:fe:f8:ee:b0:62:a7:75:70:0b: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8A:10:79:CD:C6:AE:62:2C:C4:F9:E1:EC:17:6B:D4:9C:96:CD:83 X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7a:fb:71:bc:3b:71:dd:f7:e2:02:4a:c5:92:65:a3:cd:e6: dd:39:20:34:24:83:9d:13:be:d5:ca:10:39:e7:67:aa:04:61: e5:8d:a4:a3:4a:aa:b2:90:74:61:8a:1a:83:5c:38:9d:d9:4c: 9a:96:e8:ad:28:ee:9c:e8:ea:39:e4:10:03:60:07:ee:bc:25: 8f:62:80:36:4c:d9:46:24:13:e2:53:14:87:11:38:0b:54:00: 53:ed:0c:9f:f8:b6:07:c8:1f:bf:77:09:27:81:c3:9b:30:c5: 9c:c4:e4:e8:ea:13:71:9e:d2:43:17:80:55:46:80:b5:dd:b9: 28:8d:db:29:27:ab:ef:45:d5:cf:29:0a:b8:22:87:5d:3b:55: aa:38:4b:1d:ee:19:14:0e:9b:f1:c6:42:08:31:a7:dc:c5:1c: e5:6a:e4:08:88:f8:17:b8:bd:85:33:66:5f:7f:c3:66:0b:fe: 49:9a:d0:3d:dc:80:2b:6f:94:c6:3f:0d:d6:d5:9d:f4:71:85: c9:38:1c:0f:c1:6e:96:ca:22:42:a3:fb:80:38:bd:1b:1a:56: 83:63:ee:2a:b9:20:1b:3c:89:41:16:d0:35:6e:3b:d3:55:6f: b6:bc:c2:73:d3:e8:21:24:23:ed:3d:39:90:84:41:72:2a:fb: 25:24:35:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjUwNTMxMDUwMjIxWhcNMjUwNjA3MDUwMjIxWjAYMRYwFAYD VQQDEw02ODNhOGQ1ZC04NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomzmofQwoGW+O6FbgWsfpW/sU2KNljqpQALf9np07aWVNNGtkApWKJLopKWP itoMLVp93hRBxiSwCk0PCdFu75DC/oiGuPCz/+zx/Ydwu1T7YzbbyEwbBcwWHJNv 76+qZTDx+n7UxxGY+2O+Gf3I8SBb1jVvSKEl6AOK+EYDW4SeAOW7slBnCDjNawLG u7LhMS55vSop/GeE2y51aZMeMDLqxgjw2sGr39RN54zEGj0LJqSqmdEBVaqRoSrx TlBbd1+3P8XfismK3zwgv5fY4lCZYVM1uEZczDlHr4YHWK3PMES1UBiGsX6mVT3+ A1AG6zM3/qT++O6wYqd1cAsCGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuKEHnN xq5iLMT54ewXa9Scls2DMB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVevtxvDtx3ffiAkrFkmWjzebdOSA0JIOdE77VyhA552eqBGHljaSj SqqykHRhihqDXDid2UyaluitKO6c6Oo55BADYAfuvCWPYoA2TNlGJBPiUxSHETgL VABT7Qyf+LYHyB+/dwkngcObMMWcxOTo6hNxntJDF4BVRoC13bkojdspJ6vvRdXP KQq4IoddO1WqOEsd7hkUDpvxxkIIMafcxRzlauQIiPgXuL2FM2Zff8NmC/5JmtA9 3IArb5TGPw3W1Z30cYXJOBwPwW6WyiJCo/uAOL0bGlaDY+4quSAbPIlBFtA1bjvT VW+2vMJz0+ghJCPtPTmQhEFyKvslJDXv -----END CERTIFICATE-----Generated at Sat May 31 17:42:43 2025 by rpki-client