$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: wy7hMmTuvfil5L3gP6k/c4hNMn7GnVRc5HilsqqoUTE= Subject key identifier: 04:8A:A7:A6:08:E4:26:1F:71:8B:B4:57:D9:38:05:C2:B2:14:37:A9 Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 0149 Signing time: Sat 31 May 2025 04:06:08 +0000 Manifest this update: Sat 31 May 2025 04:06:07 +0000 Manifest next update: Sat 07 Jun 2025 04:06:07 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: ifBgPX1an5Ni/GS9y+ZVKpLCcbB3nTd6tbO09gw4/kQ=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: /lY6MRoQmBol07GaZSzAkv2Tfx/7fsrdKUpKLuZMxDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: May 31 04:06:07 2025 GMT Not After : Jun 7 04:06:07 2025 GMT Subject: CN=683a8030-2506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:ea:b4:ab:f5:29:43:0e:9b:74:b8:76:1b: 57:1f:8b:b0:61:57:13:70:ae:45:e7:92:8a:aa:04: 3b:b5:4f:02:7e:f7:90:e5:ec:21:f2:79:a8:05:53: 1e:cd:80:a1:f7:f1:61:0d:76:2a:69:3e:b5:8e:59: af:38:17:cf:61:5e:a9:0f:47:bb:7b:15:dc:37:11: 3c:e1:85:51:53:3a:eb:2d:25:14:1c:b9:c1:16:cc: 7a:7b:5f:af:9b:01:f2:41:e1:7c:27:e3:7d:9b:3f: 3b:8a:71:40:cd:fe:64:1d:6d:54:1d:10:8d:2b:fd: ff:c1:5c:1a:6a:41:70:39:7f:83:9f:eb:ec:6d:4c: 03:c3:93:19:bf:25:07:bd:6c:4e:07:bd:28:eb:53: e1:b0:82:c2:06:f2:0c:61:1c:25:52:f8:33:39:b0: c6:0d:49:6e:ac:bb:22:ef:a8:eb:32:82:74:78:69: 1d:0a:49:89:15:e7:d7:d6:cd:c7:42:79:88:46:fd: 32:b8:5b:fb:e1:df:8e:de:5c:1a:81:ed:20:17:d6: 4f:17:1a:e4:60:ce:32:20:c4:20:75:21:f6:91:5e: de:dc:be:1a:99:43:1a:8e:7d:89:41:c6:37:58:db: 6d:3d:ad:79:2c:8d:b0:89:a4:e8:ab:d3:10:6c:28: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:A7:A6:08:E4:26:1F:71:8B:B4:57:D9:38:05:C2:B2:14:37:A9 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e9:42:66:9d:61:0b:19:81:07:ed:a0:82:d5:04:08:43:52: f0:18:0f:1e:06:d0:62:87:5e:7b:d3:7f:64:2d:ea:b6:28:15: 58:79:fd:74:b2:f0:0d:d6:78:15:f9:e1:58:73:6a:f0:ff:b6: 20:fe:1d:b2:c6:c7:6b:dd:5c:c2:c6:3f:60:74:a0:cf:36:fc: 31:e4:88:b9:83:7e:68:60:13:bf:60:d0:c5:2d:3f:db:f4:f4: ca:4b:97:47:aa:78:82:e2:55:90:cb:69:9e:1a:95:0d:39:96: 63:50:ce:ee:36:13:2d:be:c9:7c:9e:b9:d2:46:50:7a:de:6e: 0a:19:8c:4d:a3:64:3c:42:5f:28:0c:e2:db:58:45:6a:ca:2a: 19:b7:36:01:b5:24:5c:4c:76:97:59:d6:e7:64:ff:7d:1d:f5: 1a:ff:bd:13:51:3c:fc:24:68:aa:99:84:1b:a6:8c:d5:a7:9e: ea:d4:4f:d1:c8:9b:c2:1a:75:dd:71:22:f2:2e:f8:f2:b9:8d: 8e:7d:d7:d9:1b:f7:d1:80:78:24:3f:2a:62:27:d6:ac:5b:03: e5:6a:a5:ab:8a:f4:bf:a1:06:21:df:43:d6:46:7b:15:8b:35: e0:5b:54:6a:c1:60:c0:fb:fe:64:58:6e:68:32:0a:0d:88:39: f0:a0:4b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjUwNTMxMDQwNjA3WhcNMjUwNjA3MDQwNjA3WjAYMRYwFAYD VQQDEw02ODNhODAzMC0yNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OfqtKv1KUMOm3S4dhtXH4uwYVcTcK5F55KKqgQ7tU8CfveQ5ewh8nmoBVMe zYCh9/FhDXYqaT61jlmvOBfPYV6pD0e7exXcNxE84YVRUzrrLSUUHLnBFsx6e1+v mwHyQeF8J+N9mz87inFAzf5kHW1UHRCNK/3/wVwaakFwOX+Dn+vsbUwDw5MZvyUH vWxOB70o61PhsILCBvIMYRwlUvgzObDGDUlurLsi76jrMoJ0eGkdCkmJFefX1s3H QnmIRv0yuFv74d+O3lwage0gF9ZPFxrkYM4yIMQgdSH2kV7e3L4amUMajn2JQcY3 WNttPa15LI2wiaToq9MQbChwDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASKp6YI 5CYfcYu0V9k4BcKyFDepMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK6UJmnWELGYEH7aCC1QQIQ1LwGA8eBtBih157039kLeq2KBVYef10 svAN1ngV+eFYc2rw/7Yg/h2yxsdr3VzCxj9gdKDPNvwx5Ii5g35oYBO/YNDFLT/b 9PTKS5dHqniC4lWQy2meGpUNOZZjUM7uNhMtvsl8nrnSRlB63m4KGYxNo2Q8Ql8o DOLbWEVqyioZtzYBtSRcTHaXWdbnZP99HfUa/70TUTz8JGiqmYQbpozVp57q1E/R yJvCGnXdcSLyLvjyuY2OfdfZG/fRgHgkPypiJ9asWwPlaqWrivS/oQYh30PWRnsV izXgW1RqwWDA+/5kWG5oMgoNiDnwoEs+ -----END CERTIFICATE-----Generated at Sat May 31 17:40:56 2025 by rpki-client