$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft File: yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json) Hash identifier: nizgHkEmelVQEXUg5K+VT3DLsgNp2EL4HDFmps6bI5g= Subject key identifier: 43:8D:88:87:44:AC:1C:1E:92:E3:10:AA:C7:B9:8C:1C:DB:0E:81:A2 Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft Manifest number: 018A Signing time: Sat 31 May 2025 03:15:29 +0000 Manifest this update: Sat 31 May 2025 03:15:28 +0000 Manifest next update: Sat 07 Jun 2025 03:15:28 +0000 Files and hashes: 1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: xhHq0+FDqTsiMRvoEPd/HxgDh8Hf4y9BgL98tKxYvHo=) 2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: W0hL1B4Pu9Y3eTRJdGcmU+N0LKwGZJeiFs+2ym6914M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065, serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: May 31 03:15:28 2025 GMT Not After : Jun 7 03:15:28 2025 GMT Subject: CN=683a7451-8c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:bc:a1:3f:a1:13:d4:c0:c6:34:82:42:6f: 4e:55:97:20:0e:21:38:a1:25:22:f5:90:af:27:ae: 76:fa:97:b1:ce:68:b2:62:ec:4a:7e:98:ea:5e:1f: 4f:59:c9:9f:f9:eb:86:c7:ea:00:78:b8:94:f0:7e: ea:f0:b1:7e:d4:75:aa:df:ae:9a:71:8b:34:53:f4: a7:f7:91:fd:19:80:c0:e8:96:24:8f:f5:ba:6b:26: a6:23:ca:0d:a4:52:66:3a:83:b5:11:9c:9a:9d:49: b6:31:5f:3c:c9:bb:b9:ae:da:86:58:2f:12:48:45: 21:32:e3:ed:ab:76:df:62:22:b0:29:71:d1:5c:6f: e1:98:69:06:65:28:16:e8:9d:44:7c:5d:81:fe:53: de:07:99:52:54:7d:d2:e9:2e:e7:97:a5:a9:66:e0: 2d:e9:1a:45:10:1d:ce:44:87:69:4a:c3:d4:bb:8a: 59:3f:93:9e:a0:a3:b4:4c:9e:66:03:b2:5d:e9:99: 16:4a:90:d0:1b:f6:e2:34:a9:df:f6:e3:1a:44:c8: 33:7b:32:37:cc:88:c4:08:9b:1b:e7:c1:fd:81:b0: 72:6c:07:1a:5d:5f:1c:0e:3c:a6:04:52:bc:3d:b4: d5:01:2d:24:c2:ed:04:ff:20:80:6a:69:2e:e9:db: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:88:87:44:AC:1C:1E:92:E3:10:AA:C7:B9:8C:1C:DB:0E:81:A2 X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4c:d8:79:17:8b:e5:a7:3a:58:5a:49:55:c2:64:2d:62:c9: 5d:93:8d:3a:b9:a5:ef:1d:c9:05:85:0b:32:89:0d:3c:0d:13: cc:e0:b2:a2:7b:2a:1a:ea:73:48:a8:e5:87:38:7f:89:5c:88: 1b:95:09:70:a7:fb:a4:cf:30:bc:22:18:73:61:28:32:39:f4: 21:84:26:75:53:f8:77:db:4e:9b:ab:9c:e4:fb:e9:ef:d5:22: 11:35:f5:19:bc:ce:2f:a9:fd:03:24:3e:26:d4:4a:27:ca:98: 78:be:5b:75:9c:4a:3f:29:d8:2c:0a:da:11:38:79:10:8e:db: a7:0d:f3:49:a1:ac:4f:43:2d:07:59:1c:ea:84:97:7a:0d:e6: 86:35:14:9c:46:1f:e2:72:82:a1:53:44:e2:c0:a3:82:78:d4: e1:25:b3:a4:23:41:91:55:f5:6e:3e:e5:1d:51:91:4f:c7:f8: b3:a3:d7:08:50:f2:dd:75:89:0d:c8:8f:9c:59:35:73:4b:72: a3:79:fb:69:85:6c:27:ee:31:8d:9d:17:d1:5c:28:ca:53:03: 97:f9:cf:71:f6:15:56:43:55:2c:9c:af:4a:2e:0d:f4:9c:3b: 35:20:77:00:73:25:56:34:19:ab:36:e3:d8:6e:8f:9c:f9:cb: 8e:66:7f:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwNjUxMTAvBgNVBAUTKEM4N0ZEM0UyNDA4OEE0RDlERjFDNUQwMjY4NTIwOEU5 MEE2MUVGRjcwHhcNMjUwNTMxMDMxNTI4WhcNMjUwNjA3MDMxNTI4WjAYMRYwFAYD VQQDEw02ODNhNzQ1MS04YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmC8oT+hE9TAxjSCQm9OVZcgDiE4oSUi9ZCvJ652+pexzmiyYuxKfpjqXh9P Wcmf+euGx+oAeLiU8H7q8LF+1HWq366acYs0U/Sn95H9GYDA6JYkj/W6ayamI8oN pFJmOoO1EZyanUm2MV88ybu5rtqGWC8SSEUhMuPtq3bfYiKwKXHRXG/hmGkGZSgW 6J1EfF2B/lPeB5lSVH3S6S7nl6WpZuAt6RpFEB3ORIdpSsPUu4pZP5OeoKO0TJ5m A7Jd6ZkWSpDQG/biNKnf9uMaRMgzezI3zIjECJsb58H9gbBybAcaXV8cDjymBFK8 PbTVAS0kwu0E/yCAamku6dvccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEONiIdE rBwekuMQqse5jBzbDoGiMB8GA1UdIwQYMBaAFMh/0+JAiKTZ3xxdAmhSCOkKYe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA2NS8xQTI1RDI3NEU1 MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBObmZIRjBDYUZJSTZRcGg3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA2NS8xQTI1RDI3NEU1MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBO bmZIRjBDYUZJSTZRcGg3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTNh5F4vlpzpYWklVwmQtYsldk406uaXvHckFhQsyiQ08DRPM4LKi eyoa6nNIqOWHOH+JXIgblQlwp/ukzzC8IhhzYSgyOfQhhCZ1U/h3206bq5zk++nv 1SIRNfUZvM4vqf0DJD4m1Eonyph4vlt1nEo/KdgsCtoROHkQjtunDfNJoaxPQy0H WRzqhJd6DeaGNRScRh/icoKhU0TiwKOCeNThJbOkI0GRVfVuPuUdUZFPx/izo9cI UPLddYkNyI+cWTVzS3KjeftphWwn7jGNnRfRXCjKUwOX+c9x9hVWQ1UsnK9KLg30 nDs1IHcAcyVWNBmrNuPYbo+c+cuOZn+t -----END CERTIFICATE-----Generated at Sat May 31 15:18:04 2025 by rpki-client