$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: EjvWUqMTggyE5uSo+kyrPHAqCQ0mMoWT4uMALYAUYgs= Subject key identifier: E0:D5:C7:F9:CF:C6:71:BD:D4:9A:0E:30:8B:6F:FE:3B:DC:DB:63:5C Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1AF3 Signing time: Fri 30 May 2025 16:29:06 +0000 Manifest this update: Fri 30 May 2025 16:29:05 +0000 Manifest next update: Fri 06 Jun 2025 16:29:05 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: Ik8fxL0SiDOma5PRaPAStKHwpPbPbFK2sDXn54XHeTo=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6910 (0x1afe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: May 30 16:29:05 2025 GMT Not After : Jun 6 16:29:05 2025 GMT Subject: CN=6839dcd2-0881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:8c:26:f4:98:a1:7b:3f:ee:c2:7b:0f:87: f8:3a:b4:4c:02:3f:9e:e7:85:54:e4:d6:5e:9a:d3: 40:ef:7e:d3:bd:4d:4d:d9:2c:29:d5:02:29:11:2d: 38:21:4b:df:7b:8b:61:0c:22:3b:cf:c6:3a:ba:14: f6:76:7b:ca:c0:21:ca:d5:51:5f:21:75:50:f9:ae: ba:5b:7b:da:87:32:7e:b6:fd:d8:86:db:bc:6c:05: 6b:0a:21:ee:e6:a5:ee:6d:cc:86:51:be:8a:d8:3a: 14:12:a5:b3:99:8f:c5:d0:8c:06:c0:63:5b:58:d9: 06:06:52:c1:0f:dd:e9:d3:d4:c8:f5:7a:28:4b:7c: 32:16:0e:93:58:b4:20:08:67:fe:6e:a3:c0:bf:b6: 10:45:45:fd:23:51:81:84:3f:9c:3a:d0:1f:9e:0f: f7:1a:ba:cc:29:2e:bb:6b:97:e3:e4:54:7e:02:18: 1d:e4:1a:49:05:c0:2a:25:41:ac:33:b1:08:25:ee: 79:df:bd:00:41:fc:99:ca:dc:6d:c6:65:38:2a:1f: e8:d6:eb:a2:06:0b:e6:42:af:13:b3:38:01:52:a8: 5a:f8:0d:42:e4:df:10:b3:2d:7e:b1:1d:52:a8:5f: d2:8f:fd:91:83:19:b1:d8:fc:16:85:8e:39:93:33: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:C7:F9:CF:C6:71:BD:D4:9A:0E:30:8B:6F:FE:3B:DC:DB:63:5C X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ad:15:22:42:5a:22:19:76:cb:1d:f1:0d:a4:13:d7:00:97: 7f:b5:35:5a:e9:4a:5f:fc:18:8d:1c:94:99:22:1c:f6:46:d7: ef:db:df:50:24:5d:a5:79:9f:dc:9b:3f:a6:49:22:0c:7c:fb: 86:cb:b1:96:a5:47:84:be:7e:59:e0:64:82:5d:d8:63:50:63: 38:51:2b:26:c1:1e:fd:23:c3:ae:8a:4a:7e:22:9c:ab:d8:f6: 0a:6a:e2:6d:04:8b:03:64:30:e0:a7:af:a6:94:d2:45:13:2b: ea:57:d6:b4:f2:b0:96:76:70:52:20:fa:85:62:92:c9:46:d1: 06:e6:15:8b:bc:6f:97:83:b6:2c:eb:dc:72:be:fb:d3:5c:79: e7:6c:6d:76:fa:b5:dc:7d:fd:6d:a1:2d:bc:59:42:6f:4a:ce: 3c:58:85:5e:e3:a3:da:4f:64:9c:6c:03:55:69:2d:71:47:81: fe:89:58:65:3a:99:5e:34:93:65:7d:63:dc:79:d1:26:e9:98: 10:ed:9a:bb:8b:cd:af:45:da:4d:07:62:9d:26:09:d9:3b:9c: 4a:6e:93:1d:98:13:86:85:c0:4d:49:77:32:2b:4a:db:78:72: 51:80:b3:e5:6a:2f:7f:e1:11:10:8b:5a:be:10:1e:29:5f:37: cd:97:33:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUwNTMwMTYyOTA1WhcNMjUwNjA2MTYyOTA1WjAYMRYwFAYD VQQDEw02ODM5ZGNkMi0wODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssaMJvSYoXs/7sJ7D4f4OrRMAj+e54VU5NZemtNA737TvU1N2Swp1QIpES04 IUvfe4thDCI7z8Y6uhT2dnvKwCHK1VFfIXVQ+a66W3vahzJ+tv3Yhtu8bAVrCiHu 5qXubcyGUb6K2DoUEqWzmY/F0IwGwGNbWNkGBlLBD93p09TI9XooS3wyFg6TWLQg CGf+bqPAv7YQRUX9I1GBhD+cOtAfng/3GrrMKS67a5fj5FR+Ahgd5BpJBcAqJUGs M7EIJe55370AQfyZytxtxmU4Kh/o1uuiBgvmQq8TszgBUqha+A1C5N8Qsy1+sR1S qF/Sj/2Rgxmx2PwWhY45kzO7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODVx/nP xnG91JoOMItv/jvc22NcMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4rRUiQloiGXbLHfENpBPXAJd/tTVa6Upf/BiNHJSZIhz2Rtfv299Q JF2leZ/cmz+mSSIMfPuGy7GWpUeEvn5Z4GSCXdhjUGM4USsmwR79I8Ouikp+Ipyr 2PYKauJtBIsDZDDgp6+mlNJFEyvqV9a08rCWdnBSIPqFYpLJRtEG5hWLvG+Xg7Ys 69xyvvvTXHnnbG12+rXcff1toS28WUJvSs48WIVe46PaT2ScbANVaS1xR4H+iVhl OpleNJNlfWPcedEm6ZgQ7Zq7i82vRdpNB2KdJgnZO5xKbpMdmBOGhcBNSXcyK0rb eHJRgLPlai9/4REQi1q+EB4pXzfNlzOe -----END CERTIFICATE-----Generated at Sat May 31 16:47:50 2025 by rpki-client