$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: WIhZDgn7C/F0GuW9loxX/iU697HLrOWosaGBz96Brew= Subject key identifier: 90:C6:99:B2:65:AE:18:AD:87:4E:31:C0:3A:B0:65:48:AC:BA:99:99 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 85 Signing time: Sun 01 Jun 2025 06:17:41 +0000 Manifest this update: Sun 01 Jun 2025 06:17:40 +0000 Manifest next update: Sun 08 Jun 2025 06:17:40 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: AK1ClIC12mRGzRjKlN/tjVGI5Y196GBLDyNulIZfZ0E=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Jun 1 06:17:40 2025 GMT Not After : Jun 8 06:17:40 2025 GMT Subject: CN=683bf084-c99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:a9:18:92:07:af:1b:5a:4c:0b:f9:e2:e9: d9:b8:5d:c4:e6:27:c2:6d:ca:82:b0:43:73:93:3b: bf:62:53:52:1f:d8:df:4d:45:fe:e7:8e:12:1d:e0: 77:4b:29:aa:2b:ef:f0:5b:3c:a5:23:87:c4:38:26: f3:6f:2a:e2:41:52:28:e1:52:e6:60:a4:00:04:11: 1f:8f:9c:7b:90:e2:6f:c6:ac:27:23:df:05:50:a7: e5:a2:69:81:e5:4d:09:c7:78:10:79:ea:82:df:d1: 55:48:2d:c5:5d:90:33:fb:9f:20:a4:27:8a:18:29: 50:a0:3b:38:1b:b9:c9:7d:92:08:48:64:bf:67:c0: d5:dd:a7:37:ad:7d:22:b7:fa:f2:61:d2:10:2f:b0: cd:93:3f:de:97:93:ad:ba:a4:38:c3:07:9a:8d:2b: 01:5c:9e:bb:59:e1:72:95:2f:e7:61:6c:9b:98:f3: 13:7a:28:d4:a6:d8:0c:58:7a:b6:22:6b:66:81:80: 71:eb:43:d4:c3:08:74:1f:96:ef:a5:38:b3:85:d7: 98:4b:f5:42:bb:49:1e:53:04:96:a7:06:49:cf:2d: bf:5a:07:51:98:cd:5a:2d:19:40:fc:ba:94:9d:34: aa:ba:f0:d7:7f:28:82:86:60:21:3e:7d:e6:b1:48: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:99:B2:65:AE:18:AD:87:4E:31:C0:3A:B0:65:48:AC:BA:99:99 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:09:bc:8a:f7:86:84:13:15:9c:98:23:e7:39:21:5f:43: 90:91:a3:27:2d:7a:f9:0f:d5:77:af:79:59:46:c3:b4:97:4c: b5:35:6d:78:9d:ab:8a:c4:41:b1:d1:db:33:09:71:15:62:b8: 8d:2d:a4:ac:ec:69:d6:3e:fa:a5:e8:83:69:8e:e9:7d:8f:9a: 71:30:d5:a8:5b:27:0d:33:70:bf:4c:f3:09:d5:59:6c:fa:85: 41:05:ec:cf:62:ac:b4:23:13:71:9f:0e:17:99:27:11:2d:fb: 83:81:22:a5:13:83:cd:71:0f:40:5d:8a:ee:cc:0a:22:8d:f5: d8:52:b6:80:eb:67:83:9f:db:09:a9:a0:ce:33:01:86:42:9b: 4f:3e:48:c3:cd:42:c3:ff:76:5d:f7:f6:72:18:97:10:50:5d: 20:25:3f:b0:69:08:9a:f1:02:f8:9e:77:4b:81:34:9c:5d:ef: dd:0b:18:bf:57:9a:54:8b:f1:cb:b5:5a:10:ba:d3:aa:7c:27: 64:de:9c:fa:7c:5b:74:a3:47:00:5e:70:3f:60:92:6b:5d:42: c6:c0:4c:af:4b:d9:ec:8d:6b:b5:4b:1c:a1:46:2f:b1:c5:27: 33:29:e9:d0:2e:0d:8b:04:68:b7:2c:b1:f2:9a:2d:b7:1f:68: 83:82:91:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUwNjAxMDYxNzQwWhcNMjUwNjA4MDYxNzQwWjAYMRYwFAYD VQQDEw02ODNiZjA4NC1jOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7mpGJIHrxtaTAv54unZuF3E5ifCbcqCsENzkzu/YlNSH9jfTUX+544SHeB3 SymqK+/wWzylI4fEOCbzbyriQVIo4VLmYKQABBEfj5x7kOJvxqwnI98FUKflommB 5U0Jx3gQeeqC39FVSC3FXZAz+58gpCeKGClQoDs4G7nJfZIISGS/Z8DV3ac3rX0i t/ryYdIQL7DNkz/el5OtuqQ4wweajSsBXJ67WeFylS/nYWybmPMTeijUptgMWHq2 ImtmgYBx60PUwwh0H5bvpTizhdeYS/VCu0keUwSWpwZJzy2/WgdRmM1aLRlA/LqU nTSquvDXfyiChmAhPn3msUjNawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDGmbJl rhith04xwDqwZUisupmZMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvfAm8iveGhBMVnJgj5zkhX0OQkaMnLXr5D9V3r3lZRsO0l0y1NW14 nauKxEGx0dszCXEVYriNLaSs7GnWPvql6INpjul9j5pxMNWoWycNM3C/TPMJ1Vls +oVBBezPYqy0IxNxnw4XmScRLfuDgSKlE4PNcQ9AXYruzAoijfXYUraA62eDn9sJ qaDOMwGGQptPPkjDzULD/3Zd9/ZyGJcQUF0gJT+waQia8QL4nndLgTScXe/dCxi/ V5pUi/HLtVoQutOqfCdk3pz6fFt0o0cAXnA/YJJrXULGwEyvS9nsjWu1SxyhRi+x xSczKenQLg2LBGi3LLHymi23H2iDgpHE -----END CERTIFICATE-----Generated at Mon Jun 2 18:43:00 2025 by rpki-client