$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: rEiXOPCurw0UlCsKIIJovMOjuoeL7O29zkMy5J+T4Jk= Subject key identifier: 42:CC:63:5A:C2:BD:8E:A5:11:D1:79:AC:74:E0:AE:57:FA:6F:01:68 Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 05DB Signing time: Fri 30 May 2025 23:12:36 +0000 Manifest this update: Fri 30 May 2025 23:12:36 +0000 Manifest next update: Fri 06 Jun 2025 23:12:36 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: eoOAJFKBZIRUZdxwYbM2T0moEskcv2uXREVdB+vQs5c=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: May 30 23:12:36 2025 GMT Not After : Jun 6 23:12:36 2025 GMT Subject: CN=683a3b64-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:4e:10:92:e1:60:f4:63:bd:81:20:f1:e0: fd:89:a5:6c:64:bf:9e:68:84:15:cb:7c:d7:a2:e4: 21:7c:aa:c2:e7:4d:b8:23:96:58:3c:e6:22:81:ab: 0d:3d:c3:2c:a1:d3:57:1d:1b:b5:69:3f:f2:18:29: 3e:e8:06:44:2f:e2:69:c5:f9:a9:d9:b8:eb:5d:3e: dc:dd:b4:16:c0:aa:08:1b:57:ef:ce:8c:f9:55:34: 41:13:15:fd:0a:b9:e1:c6:f6:e3:26:1e:af:91:99: ea:81:d8:49:d1:65:d7:a9:86:e3:cb:f5:4b:16:b9: 4d:83:0d:64:16:88:26:02:f1:10:ff:fe:e2:4f:7f: ca:18:05:c1:9f:cd:ce:8f:5d:37:91:ce:78:78:8f: 20:6f:df:de:35:c5:b7:00:83:62:a8:a4:6a:73:32: 85:32:d6:24:8d:c8:10:a5:79:ad:0c:f4:da:25:80: 6c:09:e9:d2:69:be:af:9c:c7:d2:60:5d:ae:78:47: 55:da:ce:03:b7:de:3e:3b:74:95:4d:52:a8:ed:14: 35:aa:a2:36:2a:58:1f:84:c4:5c:92:cf:fd:4b:c1: 7e:e9:8f:08:32:89:81:f2:01:93:2d:96:d9:ce:73: d2:13:00:44:48:98:9d:e5:b3:2b:7b:21:7b:bc:c1: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:63:5A:C2:BD:8E:A5:11:D1:79:AC:74:E0:AE:57:FA:6F:01:68 X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c3:9b:ad:43:bf:39:ea:44:7c:e4:1e:0f:d1:f5:b7:00:d5: 0e:0f:d8:b0:52:8d:e0:36:d9:81:a3:a9:15:6d:be:0b:47:28: a7:0a:66:c0:d3:a7:48:f7:a2:56:de:c0:62:a8:d3:91:bc:d7: a4:96:12:38:f8:0c:b8:5e:bf:0f:ab:56:16:41:0d:95:68:11: 04:11:2f:af:0a:ff:14:dc:44:fd:f0:cf:7c:85:86:e4:b6:56: b6:b6:2f:87:cc:24:b2:1f:9f:9f:e1:29:4b:07:9a:a7:8c:21: 52:6c:53:f9:ea:40:7d:86:39:71:de:1a:b1:ce:8c:24:c1:ef: 7b:24:a4:9c:37:e9:32:38:e8:d5:1d:57:3a:14:b6:fe:07:46: 81:87:63:f4:ba:30:98:f2:82:a1:86:20:51:bd:d8:3f:69:e1: 0b:93:d2:d0:86:61:6f:ea:9c:c1:ad:29:b0:a4:c3:e1:11:57: c7:48:87:d0:7f:08:9b:28:04:85:9b:40:9c:ee:55:21:7e:a2: cf:02:d4:c6:e0:6e:5c:3d:ea:d4:4a:17:75:df:fe:86:ba:bb: ea:02:b3:e3:2b:4c:a6:3d:78:5e:c4:20:4d:23:42:9d:d6:39: 3c:da:a4:5d:3d:3f:fe:dc:ac:ea:6a:e6:bd:e1:6d:d6:1e:10: 29:74:ee:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjUwNTMwMjMxMjM2WhcNMjUwNjA2MjMxMjM2WjAYMRYwFAYD VQQDEw02ODNhM2I2NC0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrBOEJLhYPRjvYEg8eD9iaVsZL+eaIQVy3zXouQhfKrC5024I5ZYPOYigasN PcMsodNXHRu1aT/yGCk+6AZEL+Jpxfmp2bjrXT7c3bQWwKoIG1fvzoz5VTRBExX9 CrnhxvbjJh6vkZnqgdhJ0WXXqYbjy/VLFrlNgw1kFogmAvEQ//7iT3/KGAXBn83O j103kc54eI8gb9/eNcW3AINiqKRqczKFMtYkjcgQpXmtDPTaJYBsCenSab6vnMfS YF2ueEdV2s4Dt94+O3SVTVKo7RQ1qqI2KlgfhMRcks/9S8F+6Y8IMomB8gGTLZbZ znPSEwBESJid5bMreyF7vMEvyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELMY1rC vY6lEdF5rHTgrlf6bwFoMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6w5utQ7856kR85B4P0fW3ANUOD9iwUo3gNtmBo6kVbb4LRyinCmbA 06dI96JW3sBiqNORvNeklhI4+Ay4Xr8Pq1YWQQ2VaBEEES+vCv8U3ET98M98hYbk tla2ti+HzCSyH5+f4SlLB5qnjCFSbFP56kB9hjlx3hqxzowkwe97JKScN+kyOOjV HVc6FLb+B0aBh2P0ujCY8oKhhiBRvdg/aeELk9LQhmFv6pzBrSmwpMPhEVfHSIfQ fwibKASFm0Cc7lUhfqLPAtTG4G5cPerUShd13/6GurvqArPjK0ymPXhexCBNI0Kd 1jk82qRdPT/+3Kzqaua94W3WHhApdO5Z -----END CERTIFICATE-----Generated at Sat May 31 16:33:56 2025 by rpki-client