$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: 6JpcFR/7vxWWfDUA3KYuA8zttCBthypPgbcab1VcMIU= Subject key identifier: 34:3A:81:FD:59:27:D0:E1:61:3F:E5:12:71:00:E0:9E:69:6B:B2:B1 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0F03 Signing time: Fri 30 May 2025 21:39:18 +0000 Manifest this update: Fri 30 May 2025 21:39:18 +0000 Manifest next update: Fri 06 Jun 2025 21:39:18 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: UJ7nWwFRQQt9l5jO2hQ5VF5cga84gLX6eGr7eaU/w1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: May 30 21:39:18 2025 GMT Not After : Jun 6 21:39:18 2025 GMT Subject: CN=683a2586-6aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:a3:c6:e6:63:cc:42:3c:b7:4e:56:ab:ce: 7c:97:7e:0b:cd:d2:ef:a3:1f:49:a9:44:76:b0:7e: 8d:78:cb:a2:2c:cc:b9:a3:31:87:84:03:d4:63:b4: 56:01:56:63:60:bb:aa:a6:13:66:78:33:bc:13:28: 3b:71:6b:55:7e:1a:cf:d1:54:25:7d:8e:72:89:31: f6:88:e9:43:8d:5c:8b:d1:f8:80:99:ec:7a:98:ff: f8:81:07:4a:fa:93:58:ab:41:7c:a2:0e:cf:ed:52: 4b:12:bd:2c:a9:b6:92:a2:a3:23:9d:ed:f0:ee:3c: 39:fd:21:7f:50:7b:19:bb:26:fc:24:3d:e8:a4:8b: 0c:7a:45:6e:1c:ff:9c:34:8b:1b:eb:d6:9d:9b:58: 02:10:4e:8d:11:c5:17:ac:ff:d8:8f:fd:0e:5e:46: d4:4e:7f:38:7e:42:81:18:21:61:29:4e:6d:dd:8d: 80:6b:91:90:f8:ff:5b:93:39:1f:34:a9:7a:40:78: 43:47:9b:61:e3:4b:fc:35:57:6c:61:db:65:c1:24: 9a:4f:81:08:ec:87:87:6d:37:2c:f7:04:61:a2:f4: 4a:c0:ae:a3:fb:13:18:fe:b1:e4:f9:50:5d:80:10: a1:73:04:b2:cf:63:a5:8c:ae:0d:02:6f:85:98:1c: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:81:FD:59:27:D0:E1:61:3F:E5:12:71:00:E0:9E:69:6B:B2:B1 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:de:a4:12:4d:e0:d5:17:d7:8c:65:7b:60:84:c3:dc:9d:68: ae:fe:4f:55:d9:a5:e7:cf:bc:72:9b:c2:81:13:7f:dc:65:48: 6a:1b:f4:2f:84:f7:a7:3c:9a:48:8a:8b:f8:17:8b:b0:fe:71: a7:ff:b5:1d:dd:45:47:30:86:5a:f1:70:12:d3:14:63:9a:60: b5:69:eb:1f:f3:60:f6:c1:25:30:33:cf:3b:95:08:a4:a9:54: 8b:d3:14:3a:8c:f9:65:54:d8:53:fa:2e:47:d5:40:62:52:08: 07:4b:fb:c1:00:53:2c:86:83:ff:bd:5a:73:54:f7:64:8d:99: 11:b7:ec:ed:e7:2c:6d:f2:eb:2c:57:da:09:18:c6:cb:bc:9a: d2:50:64:a7:5d:52:ff:8c:70:b2:b1:a2:f6:42:3d:05:dd:fa: 9e:2d:c5:36:1e:4c:b2:6d:9a:ec:94:d4:6e:50:62:d8:7c:46: dd:b3:da:2e:6c:71:a0:a6:0c:a0:90:8f:c2:a7:3d:ef:32:22: fb:fd:e9:46:f7:44:d6:61:7d:c6:02:56:84:c8:08:b4:f4:8b: c7:fe:2c:53:fc:79:d0:ef:5b:a3:0b:5d:5e:73:b2:94:f0:b4: eb:14:38:b4:12:9e:3c:6c:42:12:6f:b4:ae:c2:6d:14:cc:9b: 0e:95:05:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUwNTMwMjEzOTE4WhcNMjUwNjA2MjEzOTE4WjAYMRYwFAYD VQQDEw02ODNhMjU4Ni02YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DijxuZjzEI8t05Wq858l34LzdLvox9JqUR2sH6NeMuiLMy5ozGHhAPUY7RW AVZjYLuqphNmeDO8Eyg7cWtVfhrP0VQlfY5yiTH2iOlDjVyL0fiAmex6mP/4gQdK +pNYq0F8og7P7VJLEr0sqbaSoqMjne3w7jw5/SF/UHsZuyb8JD3opIsMekVuHP+c NIsb69adm1gCEE6NEcUXrP/Yj/0OXkbUTn84fkKBGCFhKU5t3Y2Aa5GQ+P9bkzkf NKl6QHhDR5th40v8NVdsYdtlwSSaT4EI7IeHbTcs9wRhovRKwK6j+xMY/rHk+VBd gBChcwSyz2OljK4NAm+FmBybbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ6gf1Z J9DhYT/lEnEA4J5pa7KxMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3qQSTeDVF9eMZXtghMPcnWiu/k9V2aXnz7xym8KBE3/cZUhqG/Qv hPenPJpIiov4F4uw/nGn/7Ud3UVHMIZa8XAS0xRjmmC1aesf82D2wSUwM887lQik qVSL0xQ6jPllVNhT+i5H1UBiUggHS/vBAFMshoP/vVpzVPdkjZkRt+zt5yxt8uss V9oJGMbLvJrSUGSnXVL/jHCysaL2Qj0F3fqeLcU2HkyybZrslNRuUGLYfEbds9ou bHGgpgygkI/Cpz3vMiL7/elG90TWYX3GAlaEyAi09IvH/ixT/HnQ71ujC11ec7KU 8LTrFDi0Ep48bEISb7Suwm0UzJsOlQWN -----END CERTIFICATE-----Generated at Sat May 31 16:34:59 2025 by rpki-client