$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: 0J40c987bcy0qPUMP+9pTvUxOtnR9G+VDh9l8j5J11s= Subject key identifier: 9E:8C:88:91:7C:60:48:DD:EF:00:8C:C0:C8:96:7F:B7:C3:A7:03:CA Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 0161 Signing time: Sat 31 May 2025 03:40:48 +0000 Manifest this update: Sat 31 May 2025 03:40:47 +0000 Manifest next update: Sat 07 Jun 2025 03:40:47 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: OOx+bSZrh+D1q16JZN2ZOyRAHZoujaC/5Uf2R7pXRw4=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: May 31 03:40:47 2025 GMT Not After : Jun 7 03:40:47 2025 GMT Subject: CN=683a7a40-d294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:09:5c:8a:8b:d3:b2:b7:b5:03:d3:be:2e: 8a:ec:ad:8d:8d:e2:8b:9e:04:2f:1d:fb:21:00:75: d1:84:51:94:f0:7e:39:d2:11:c0:c0:40:85:4e:f1: 50:40:39:9b:52:8d:a6:96:3d:01:2c:ba:00:92:9c: bf:c5:e5:85:cc:9d:bb:ed:dd:78:1c:81:dd:b2:2e: 47:dd:50:98:e1:ad:80:72:6a:06:c4:fb:c0:03:0d: 60:e2:ac:07:58:a7:a9:bd:b0:c3:4d:bc:09:2b:4d: 78:ae:5b:35:b0:4e:20:8e:db:e1:26:ae:bb:88:04: 52:f5:88:3a:6e:3f:96:e6:72:dc:cc:92:77:a6:a8: 83:fb:d1:ab:d7:22:91:9f:79:fa:bd:f2:90:a1:fa: 3c:6a:71:f2:78:63:3b:06:1b:76:10:63:a6:a1:1f: 42:dc:68:5f:3c:09:27:8b:52:7b:75:31:7d:96:76: 61:51:1d:7a:1d:a2:06:54:32:17:58:e9:18:9f:9a: 2f:7d:b6:4f:41:a0:de:96:9d:d1:a0:fc:64:19:82: 53:c7:50:42:3a:5b:70:73:81:0b:9a:51:53:28:a5: ca:af:c5:be:21:f3:eb:aa:f5:31:08:0a:d0:72:5d: ba:bc:07:7b:e4:77:5e:a5:2c:ae:4f:20:be:79:f9: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:88:91:7C:60:48:DD:EF:00:8C:C0:C8:96:7F:B7:C3:A7:03:CA X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:98:ed:7b:f3:e4:be:86:6d:63:3f:96:b3:36:37:84:d8:aa: 8a:d4:bd:a6:c2:02:4f:34:3a:0a:5a:5b:0b:68:6b:4e:53:c4: 65:d1:80:22:e9:52:ea:b2:b9:c3:db:86:53:32:31:d2:2e:71: a9:5b:d0:10:a3:fc:0d:e1:76:32:6a:d8:86:5d:86:07:88:24: b0:45:a6:e7:59:dc:30:66:c8:4a:27:dc:bf:c3:31:df:75:3c: 31:17:e3:d1:2a:98:09:71:20:eb:ef:db:37:ae:40:df:56:c7: 38:47:81:3e:ea:71:a2:9d:87:64:7f:85:81:69:0c:5a:88:93: 13:06:83:c1:7e:3f:7c:c3:22:65:b8:bc:f9:f3:f7:d9:d9:ea: 35:0b:2a:d2:19:fc:2b:27:bd:37:26:d8:db:ad:6d:0e:53:c6: 5d:f8:4d:ad:90:3a:24:15:5c:7c:87:90:6f:ff:0f:ec:0a:fc: f5:30:95:c6:e0:e9:54:b0:b5:98:60:3e:6d:b9:a9:f5:a0:06: db:9e:93:ad:ed:36:57:cc:4f:85:6c:b4:42:8f:a2:22:f7:38: 0c:b5:09:10:23:83:60:d2:a4:fa:38:7d:97:f1:f2:cd:92:93: 49:5d:48:70:c6:10:64:9b:6e:35:8f:c6:cf:6c:84:eb:43:0d: a7:e3:63:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwNTMxMDM0MDQ3WhcNMjUwNjA3MDM0MDQ3WjAYMRYwFAYD VQQDEw02ODNhN2E0MC1kMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9IJXIqL07K3tQPTvi6K7K2NjeKLngQvHfshAHXRhFGU8H450hHAwECFTvFQ QDmbUo2mlj0BLLoAkpy/xeWFzJ277d14HIHdsi5H3VCY4a2AcmoGxPvAAw1g4qwH WKepvbDDTbwJK014rls1sE4gjtvhJq67iARS9Yg6bj+W5nLczJJ3pqiD+9Gr1yKR n3n6vfKQofo8anHyeGM7Bht2EGOmoR9C3GhfPAkni1J7dTF9lnZhUR16HaIGVDIX WOkYn5ovfbZPQaDelp3RoPxkGYJTx1BCOltwc4ELmlFTKKXKr8W+IfPrqvUxCArQ cl26vAd75HdepSyuTyC+eflquQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6MiJF8 YEjd7wCMwMiWf7fDpwPKMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNmO178+S+hm1jP5azNjeE2KqK1L2mwgJPNDoKWlsLaGtOU8Rl0YAi 6VLqsrnD24ZTMjHSLnGpW9AQo/wN4XYyatiGXYYHiCSwRabnWdwwZshKJ9y/wzHf dTwxF+PRKpgJcSDr79s3rkDfVsc4R4E+6nGinYdkf4WBaQxaiJMTBoPBfj98wyJl uLz58/fZ2eo1CyrSGfwrJ703JtjbrW0OU8Zd+E2tkDokFVx8h5Bv/w/sCvz1MJXG 4OlUsLWYYD5tuan1oAbbnpOt7TZXzE+FbLRCj6Ii9zgMtQkQI4Ng0qT6OH2X8fLN kpNJXUhwxhBkm241j8bPbITrQw2n42O3 -----END CERTIFICATE-----Generated at Sat May 31 17:00:19 2025 by rpki-client