$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: USftb3n1unhbPvtkmr79dXr2bxkNx7HLuBuCXBtD6Oo= Subject key identifier: 1C:C7:C4:B1:F1:36:A6:6E:D8:E2:0D:28:F8:82:82:1A:45:5A:6B:D3 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 040D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 03EB Signing time: Sat 31 May 2025 00:52:53 +0000 Manifest this update: Sat 31 May 2025 00:52:53 +0000 Manifest next update: Sat 07 Jun 2025 00:52:53 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: TNBxubgxeJo1f3vN1mK8b4Jxr10p5XE3Kkdw3Z1MSxI=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=) 3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=) 4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: lMiBlwaFpcrZorN/PTmNEcsYWTw6s909rOUpGpYxp6s=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: May 31 00:52:53 2025 GMT Not After : Jun 7 00:52:53 2025 GMT Subject: CN=683a52e5-6ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:4b:af:a6:28:dd:f9:af:99:29:d4:0d:9b: 76:3e:e5:59:2d:61:57:d7:49:be:f1:d0:bf:ce:71: 97:b0:78:24:0b:21:05:39:6b:d3:03:1a:c1:7a:50: 06:55:17:77:32:b4:68:e4:bb:03:e3:87:5f:47:90: a0:cc:e5:72:2d:69:89:34:9e:d6:9d:25:68:c6:ee: ac:23:94:e9:0c:96:0b:f5:14:26:a2:c0:07:0b:25: 16:13:71:24:44:f4:22:8e:a6:b5:ee:ba:10:2d:5a: 71:3a:dd:24:1e:d6:cd:32:b1:34:8e:0b:1b:64:c2: 9b:1b:06:d9:60:b5:a3:eb:7c:9d:60:92:da:59:23: de:ae:00:b0:53:b9:3a:39:31:83:d9:82:48:3e:ae: 99:09:02:ea:92:c3:00:1f:63:52:58:99:8f:cb:78: bb:d0:c2:dd:eb:4e:54:b1:85:42:ba:e0:83:0a:1f: 9d:f5:1b:60:4a:f2:91:98:5a:58:05:53:ab:3f:72: 3a:c4:f3:29:1e:09:38:f4:a4:5e:5e:f6:78:6b:a7: 10:4e:94:b8:f9:6e:8b:57:a8:d5:a4:70:75:47:d5: c2:0e:74:ff:c3:e6:8c:c5:58:eb:46:1c:a6:c3:46: 51:b5:3e:7a:cf:a8:b7:9c:3d:19:68:5d:5f:c8:bd: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:C4:B1:F1:36:A6:6E:D8:E2:0D:28:F8:82:82:1A:45:5A:6B:D3 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:0f:44:65:98:2c:78:98:93:77:48:38:8f:ab:e4:47:1f: 3b:b4:b0:6f:fa:3a:f4:5a:7a:f2:5c:c8:e8:09:57:75:73:89: f4:14:99:d1:c5:d2:c6:20:2f:19:81:7e:5a:7e:95:e7:7c:3c: 34:26:ac:0a:92:13:36:4a:3c:7e:f3:27:ac:c5:cc:59:4a:7a: 18:44:6f:a2:d3:06:7b:41:af:e1:25:26:d3:a1:88:f6:9d:29: f5:84:c0:c5:11:74:95:7e:bc:5d:fd:bf:97:a6:15:aa:f3:aa: 8e:46:22:af:0d:61:f0:c2:5a:20:01:58:31:fe:ec:1e:67:ab: b4:90:64:ec:2c:a9:3b:6b:b8:11:75:a8:d4:0f:c6:cc:41:38: f3:45:73:86:63:4c:47:f9:a4:29:3f:6d:7b:de:35:11:c7:42: 57:68:a2:16:ca:c2:e2:23:7c:7f:ad:00:05:cc:1c:f2:30:86: de:11:7b:a6:54:40:b8:47:be:86:a5:29:b9:f4:58:a8:37:80: ce:db:cc:c5:24:82:11:f5:f6:1a:f6:1e:3e:68:e2:1c:f4:a4: 23:dc:bf:49:e7:a5:4b:5e:0c:6e:23:df:37:eb:f3:cf:f8:1c: 04:48:7a:4b:22:f8:86:8d:08:e4:1b:7b:75:ba:72:3c:c2:60: ae:20:b7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUwNTMxMDA1MjUzWhcNMjUwNjA3MDA1MjUzWjAYMRYwFAYD VQQDEw02ODNhNTJlNS02ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx5Lr6Yo3fmvmSnUDZt2PuVZLWFX10m+8dC/znGXsHgkCyEFOWvTAxrBelAG VRd3MrRo5LsD44dfR5CgzOVyLWmJNJ7WnSVoxu6sI5TpDJYL9RQmosAHCyUWE3Ek RPQijqa17roQLVpxOt0kHtbNMrE0jgsbZMKbGwbZYLWj63ydYJLaWSPergCwU7k6 OTGD2YJIPq6ZCQLqksMAH2NSWJmPy3i70MLd605UsYVCuuCDCh+d9RtgSvKRmFpY BVOrP3I6xPMpHgk49KReXvZ4a6cQTpS4+W6LV6jVpHB1R9XCDnT/w+aMxVjrRhym w0ZRtT56z6i3nD0ZaF1fyL0tvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzHxLHx NqZu2OINKPiCghpFWmvTMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZbw9EZZgseJiTd0g4j6vkRx87tLBv+jr0WnryXMjoCVd1c4n0FJnR xdLGIC8ZgX5afpXnfDw0JqwKkhM2Sjx+8yesxcxZSnoYRG+i0wZ7Qa/hJSbToYj2 nSn1hMDFEXSVfrxd/b+XphWq86qORiKvDWHwwlogAVgx/uweZ6u0kGTsLKk7a7gR dajUD8bMQTjzRXOGY0xH+aQpP2173jURx0JXaKIWysLiI3x/rQAFzBzyMIbeEXum VEC4R76GpSm59FioN4DO28zFJIIR9fYa9h4+aOIc9KQj3L9J56VLXgxuI9836/PP +BwESHpLIviGjQjkG3t1unI8wmCuILfx -----END CERTIFICATE-----Generated at Sat May 31 14:49:41 2025 by rpki-client