$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: pOWtVc0ku4xJaj78Iz7iQDAt6mq6R2Q0+2qkyjpC1TI= Subject key identifier: 5C:D9:DD:6C:C2:5A:20:C0:62:19:27:1F:1B:5B:99:A0:FD:EE:EF:50 Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 015F Signing time: Sat 31 May 2025 03:39:24 +0000 Manifest this update: Sat 31 May 2025 03:39:23 +0000 Manifest next update: Sat 07 Jun 2025 03:39:23 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: ynIHU0flOaJBOrWyzqarqPWmdztb8f5B7xPBunKWz4Q=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: mEyirxNNF/HUjbME+0mygxI2/51XwzfUXk7qYYI6cLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: May 31 03:39:23 2025 GMT Not After : Jun 7 03:39:23 2025 GMT Subject: CN=683a79ec-5b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:a9:fe:a4:85:5e:1a:5b:89:45:2f:b0:f1: 8f:bc:25:27:38:6a:39:4e:31:9f:35:b3:50:8d:f0: 7e:ad:f9:bf:b8:46:9c:d0:9d:55:14:3f:d4:5c:c1: 04:0f:41:a5:b8:a8:5b:db:83:64:87:0b:82:9a:6d: ff:a8:7c:a5:ca:51:f8:1f:67:0b:23:a4:e8:8c:85: e7:88:1e:79:3c:32:6f:e1:8b:80:76:1d:22:16:e0: 8b:4f:4f:dc:b2:02:a0:5c:0d:25:e1:6a:ab:ef:9d: 7e:f6:cd:a9:86:42:e5:72:05:d6:3c:bb:b4:cd:65: ac:8c:cc:64:ce:b3:72:4d:bd:f5:f0:54:b6:24:5b: 8b:de:19:4d:da:76:6b:f0:7c:ac:58:31:74:49:57: de:34:6e:be:0e:34:23:eb:e8:49:cf:62:b5:21:4d: b3:d3:62:3e:c4:c5:82:72:d8:28:a5:4e:91:9e:c4: 16:e1:6a:33:4b:42:09:d3:dd:f2:a5:f1:18:9e:91: af:1c:70:01:7f:bc:33:98:06:67:18:21:e0:40:a5: 51:13:30:01:d8:a7:e7:82:ba:0b:ca:8a:3b:0b:88: fc:42:e5:30:c9:28:7c:e8:61:7b:dc:f5:f7:65:28: 6b:15:ca:53:97:3b:4c:b3:98:25:89:d3:51:67:e4: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:DD:6C:C2:5A:20:C0:62:19:27:1F:1B:5B:99:A0:FD:EE:EF:50 X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:d2:e4:f0:29:44:40:ed:1f:6a:a5:ab:3d:27:a2:c5:1f: 72:27:d5:7c:c2:87:d3:90:15:d2:d9:aa:3e:6e:9f:7f:75:a1: 0b:0a:6f:27:b3:5d:9e:49:75:69:01:77:55:64:86:e8:9e:29: 28:a0:2e:ff:65:74:63:c3:7e:77:24:81:23:37:ff:dd:05:d4: 90:17:0f:57:7b:86:a4:ed:6e:c0:4b:bb:0c:8e:d1:78:be:76: dd:c9:49:0e:28:d5:de:85:c2:25:43:bb:50:c9:f8:40:34:5e: 30:e2:e0:35:0a:27:27:b5:a7:ff:00:ba:52:58:a6:4a:b3:d9: dd:b8:2e:5e:48:64:5d:3d:28:42:d2:c4:1e:f9:e1:d0:bd:99: 57:cb:03:bc:6a:5f:82:1a:73:ee:51:3c:c7:a7:29:68:9a:60: c1:88:f5:2e:40:77:01:79:50:d2:d5:6d:c2:5a:50:62:ba:6a: 44:79:c5:32:e6:4e:a7:ea:db:87:20:ee:01:28:22:a7:30:4b: 87:03:44:03:2b:12:82:fc:ba:a8:2f:5f:0c:24:1c:ec:c5:2e: 6b:10:f1:49:a1:98:32:59:a6:db:59:fc:09:a6:f1:41:05:90: 04:a4:ca:2b:1d:e6:46:03:71:f7:50:5e:5e:a1:c5:51:ec:47: e3:fb:2f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjUwNTMxMDMzOTIzWhcNMjUwNjA3MDMzOTIzWjAYMRYwFAYD VQQDEw02ODNhNzllYy01YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh6p/qSFXhpbiUUvsPGPvCUnOGo5TjGfNbNQjfB+rfm/uEac0J1VFD/UXMEE D0GluKhb24NkhwuCmm3/qHylylH4H2cLI6TojIXniB55PDJv4YuAdh0iFuCLT0/c sgKgXA0l4Wqr751+9s2phkLlcgXWPLu0zWWsjMxkzrNyTb318FS2JFuL3hlN2nZr 8HysWDF0SVfeNG6+DjQj6+hJz2K1IU2z02I+xMWCctgopU6RnsQW4WozS0IJ093y pfEYnpGvHHABf7wzmAZnGCHgQKVREzAB2KfngroLyoo7C4j8QuUwySh86GF73PX3 ZShrFcpTlztMs5glidNRZ+RSJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzZ3WzC WiDAYhknHxtbmaD97u9QMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASpNLk8ClEQO0faqWrPSeixR9yJ9V8wofTkBXS2ao+bp9/daELCm8n s12eSXVpAXdVZIbonikooC7/ZXRjw353JIEjN//dBdSQFw9Xe4ak7W7AS7sMjtF4 vnbdyUkOKNXehcIlQ7tQyfhANF4w4uA1Cicntaf/ALpSWKZKs9nduC5eSGRdPShC 0sQe+eHQvZlXywO8al+CGnPuUTzHpylommDBiPUuQHcBeVDS1W3CWlBiumpEecUy 5k6n6tuHIO4BKCKnMEuHA0QDKxKC/LqoL18MJBzsxS5rEPFJoZgyWabbWfwJpvFB BZAEpMorHeZGA3H3UF5eocVR7Efj+y8x -----END CERTIFICATE-----Generated at Sat May 31 17:26:12 2025 by rpki-client