$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json) Hash identifier: jrHHFNHfi813PTd3AFRnJiou38VqYzklGz0dlIbmWOU= Subject key identifier: 43:7B:92:3A:43:10:E6:C9:63:45:EB:09:92:03:AB:B2:3E:A6:85:90 Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft Manifest number: CF Signing time: Tue 03 Jun 2025 05:34:45 +0000 Manifest this update: Tue 03 Jun 2025 05:34:45 +0000 Manifest next update: Tue 10 Jun 2025 05:34:45 +0000 Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: Pk3ZG3K41PWlpJ3XGsJ0chP6g4Eee3e836emSk24N3g=) 2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=) 3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: LUt9DJS6Jpbs8PDzvIpOLhLuEq85uifRo0wnGTYcGuc=) 4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: 08jGNnEflD8e5x3Cs8u4vH+jCRzHFAlUOBfwuUSSNb0=) 5: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 1i0d6pr2ELd59qaQmu9345pITiiNAhlVL8hxc+i1TcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Validity Not Before: Jun 3 05:34:45 2025 GMT Not After : Jun 10 05:34:45 2025 GMT Subject: CN=683e8975-9ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:10:37:29:7f:fa:33:25:91:60:b2:db:7f: 7e:1e:e9:2f:f4:33:af:57:0e:a3:77:3e:c4:40:0e: 16:56:89:08:f5:af:4e:4f:83:08:a3:ac:e8:1c:9f: ba:7a:f3:83:40:67:9c:90:a1:9c:1b:37:a2:23:54: e7:7b:5d:3d:53:b5:a9:5a:80:fd:42:81:a4:b2:0b: 4a:2a:87:81:a0:b0:59:f9:d9:c0:9a:bc:53:9f:21: e8:9e:4b:a5:a6:d1:21:2b:9b:fc:89:e4:eb:52:db: e9:7a:fc:32:ad:27:4a:02:12:8b:5a:7a:80:18:52: d8:f4:2a:44:9d:71:7c:26:62:8e:ed:23:0c:b7:db: c0:d9:dd:50:dc:73:49:49:1a:ed:b6:0a:3b:9b:31: 30:c7:c0:50:12:6e:0c:a2:55:57:9d:5e:75:30:51: 11:b9:37:1d:e0:2c:af:07:50:3a:8c:9f:c1:a1:0d: 3f:a8:97:ff:f5:8e:6d:47:a5:a9:ec:ea:7e:17:e7: de:86:01:2c:98:f8:b5:68:d2:34:dc:a4:44:d0:9b: ed:f2:83:95:d7:29:c5:4b:fa:97:66:18:6e:39:8e: 2a:81:c8:74:43:53:59:15:c5:c7:21:e9:a4:22:5e: cc:c3:aa:dc:fc:df:ff:6c:bb:b4:a0:fa:6d:b6:11: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7B:92:3A:43:10:E6:C9:63:45:EB:09:92:03:AB:B2:3E:A6:85:90 X509v3 Authority Key Identifier: keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4f:e7:0e:8a:9d:2d:d3:03:f7:c7:46:e7:09:eb:6b:2b:fd: ec:76:a7:15:6f:6b:14:ea:7d:97:56:f4:52:3e:de:63:2d:af: dd:4f:c6:b1:12:b2:ce:d7:f4:8a:c2:07:b8:bf:b6:43:24:04: 65:0e:98:51:88:f9:bc:61:39:71:7c:61:c2:a4:b2:9b:3a:15: 58:b2:52:e1:2f:a6:48:92:c7:cc:86:f6:41:5e:32:84:da:1d: 18:b3:51:7b:d0:e7:49:30:25:83:95:21:e9:ee:57:fe:45:ae: 37:d5:4f:74:6c:97:b0:ac:67:35:a0:9a:7e:b7:30:66:90:75: 5e:ed:39:92:5d:1e:4f:93:0f:a3:1b:60:cd:6c:89:f8:1f:ac: 2c:f9:74:98:d9:de:3c:a1:75:f0:82:1d:c7:26:fc:e8:01:02: a5:cc:d6:76:0b:61:f3:47:c1:f4:ad:88:8e:19:eb:48:7d:97: 78:6e:f3:f4:34:14:64:be:06:fe:b4:74:18:e1:43:0d:6e:35: 5e:be:fe:53:7c:cd:b3:d6:1d:f3:32:c8:dc:b7:20:60:d0:50: 7c:f0:0f:53:ee:ed:ec:3a:59:08:dc:94:dd:d1:ca:e8:4d:11: f4:53:a7:87:fc:09:10:e8:20:9a:a0:91:14:71:6d:12:95:66: 94:8b:aa:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2 MzZBNDI1MEEwHhcNMjUwNjAzMDUzNDQ1WhcNMjUwNjEwMDUzNDQ1WjAYMRYwFAYD VQQDEw02ODNlODk3NS05ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EoQNyl/+jMlkWCy239+Hukv9DOvVw6jdz7EQA4WVokI9a9OT4MIo6zoHJ+6 evODQGeckKGcGzeiI1Tne109U7WpWoD9QoGksgtKKoeBoLBZ+dnAmrxTnyHonkul ptEhK5v8ieTrUtvpevwyrSdKAhKLWnqAGFLY9CpEnXF8JmKO7SMMt9vA2d1Q3HNJ SRrttgo7mzEwx8BQEm4MolVXnV51MFERuTcd4CyvB1A6jJ/BoQ0/qJf/9Y5tR6Wp 7Op+F+fehgEsmPi1aNI03KRE0Jvt8oOV1ynFS/qXZhhuOY4qgch0Q1NZFcXHIemk Il7Mw6rc/N//bLu0oPptthGkPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN7kjpD EObJY0XrCZIDq7I+poWQMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG ajA5enRIamMyRnBqYWtKUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtT+cOip0t0wP3x0bnCetrK/3sdqcVb2sU6n2XVvRSPt5jLa/dT8ax ErLO1/SKwge4v7ZDJARlDphRiPm8YTlxfGHCpLKbOhVYslLhL6ZIksfMhvZBXjKE 2h0Ys1F70OdJMCWDlSHp7lf+Ra431U90bJewrGc1oJp+tzBmkHVe7TmSXR5Pkw+j G2DNbIn4H6ws+XSY2d48oXXwgh3HJvzoAQKlzNZ2C2HzR8H0rYiOGetIfZd4bvP0 NBRkvgb+tHQY4UMNbjVevv5TfM2z1h3zMsjctyBg0FB88A9T7u3sOlkI3JTd0cro TRH0U6eH/AkQ6CCaoJEUcW0SlWaUi6qx -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:02 2025 by rpki-client