$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: odjKUnP7wKYLqjuOpFD+f/Qqnrrwiv1qI/g5uydJS+c= Subject key identifier: A1:58:C1:E9:17:77:0B:24:EA:43:AD:CC:46:71:7F:F5:4B:7B:49:6F Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 0124 Signing time: Sat 31 May 2025 04:18:55 +0000 Manifest this update: Sat 31 May 2025 04:18:55 +0000 Manifest next update: Sat 07 Jun 2025 04:18:55 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: 8sk2Aqi9zOjUvoFDGgp93UyBemEG77AiDyJajMwaiXU=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: DePAWeNaPf050wbH02MB/3/H4o3AawPKYgaEsO6gzSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: May 31 04:18:55 2025 GMT Not After : Jun 7 04:18:55 2025 GMT Subject: CN=683a832f-8c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:48:e7:d2:1c:2c:01:f9:8c:28:f8:80:66: ab:dd:4b:85:15:7d:6f:58:ed:c7:0b:8e:eb:d4:81: c6:01:18:88:dc:da:b7:6c:0f:ee:b9:ec:62:9c:47: 79:99:c7:af:42:b6:ac:d8:a0:d2:3f:34:82:82:6c: af:b9:10:8d:62:9a:b1:fe:e6:85:39:76:b8:96:a7: d9:15:84:ee:ac:e1:2a:df:26:de:ea:ae:3e:fd:e1: 6f:a8:ab:ed:f3:5b:ac:6e:be:97:99:d8:58:40:6f: 70:c1:29:15:27:d7:c7:c2:60:a4:1c:51:61:ec:cc: c7:52:52:96:5d:22:d8:06:df:eb:00:81:f9:7c:3e: 49:c6:f9:4c:b6:45:2b:a7:4a:15:1d:1c:33:37:cf: a5:5f:95:f1:8f:86:57:08:db:7a:99:4d:31:79:04: d6:3f:a2:33:cc:8e:a9:3c:50:fa:c1:9e:03:6f:a2: 86:cc:15:09:2f:62:14:86:44:e4:2c:9b:cd:c8:7c: cd:a9:39:f0:ce:47:a4:90:5b:08:d0:8d:a7:78:d3: e7:e5:f3:23:d4:5d:53:fd:93:82:d3:fd:1f:d5:b6: ee:dd:d9:4c:8b:73:90:4b:cc:56:76:40:dd:1d:1d: 67:ee:b4:d9:dc:11:3e:79:9c:b8:83:c7:37:04:2f: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:58:C1:E9:17:77:0B:24:EA:43:AD:CC:46:71:7F:F5:4B:7B:49:6F X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ba:f4:36:cd:52:e6:b9:c9:4d:de:90:ae:f1:e7:ea:c7:06: 96:51:03:4c:4e:a3:26:05:7c:37:70:d3:4a:2e:3e:20:45:b2: 2d:56:6e:dd:39:5d:3a:ca:6a:83:7f:a3:71:c2:04:8e:83:26: f6:64:86:54:0c:78:cf:05:43:bf:81:34:7e:a0:bb:3b:6b:d6: 83:1a:00:95:eb:56:1b:ac:16:38:39:e6:50:1d:bd:20:29:62: f1:96:27:5f:56:82:0d:b6:14:dd:b4:46:6b:6f:33:39:af:9a: 0f:37:d3:e5:2c:1f:81:dd:35:62:34:ae:13:0a:06:67:87:4d: 47:9d:ee:86:b0:31:05:3b:7e:d5:7a:84:93:7f:d2:f7:c3:28: b6:a0:a3:ba:de:e6:04:da:5f:f2:61:7b:73:14:07:1d:8d:09: af:5d:98:0e:26:56:ed:a6:74:f2:f2:51:a1:b6:fc:4e:1f:75: f6:35:e9:93:73:e6:6a:92:30:93:69:3c:49:30:28:a4:42:ce: 97:bc:8a:8f:80:45:95:78:e5:d8:6f:e8:6c:76:6b:9e:ef:d3: db:3b:a8:f5:c3:82:13:0b:f2:4f:56:97:95:f5:53:0b:f0:1e: 8e:3e:6c:d3:8d:69:24:e4:7a:d2:77:d8:42:87:36:a4:35:9f: 1c:67:ef:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUwNTMxMDQxODU1WhcNMjUwNjA3MDQxODU1WjAYMRYwFAYD VQQDEw02ODNhODMyZi04YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOxI59IcLAH5jCj4gGar3UuFFX1vWO3HC47r1IHGARiI3Nq3bA/uuexinEd5 mcevQras2KDSPzSCgmyvuRCNYpqx/uaFOXa4lqfZFYTurOEq3ybe6q4+/eFvqKvt 81usbr6XmdhYQG9wwSkVJ9fHwmCkHFFh7MzHUlKWXSLYBt/rAIH5fD5JxvlMtkUr p0oVHRwzN8+lX5Xxj4ZXCNt6mU0xeQTWP6IzzI6pPFD6wZ4Db6KGzBUJL2IUhkTk LJvNyHzNqTnwzkekkFsI0I2neNPn5fMj1F1T/ZOC0/0f1bbu3dlMi3OQS8xWdkDd HR1n7rTZ3BE+eZy4g8c3BC+74wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFYwekX dwsk6kOtzEZxf/VLe0lvMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCduvQ2zVLmuclN3pCu8efqxwaWUQNMTqMmBXw3cNNKLj4gRbItVm7d OV06ymqDf6NxwgSOgyb2ZIZUDHjPBUO/gTR+oLs7a9aDGgCV61YbrBY4OeZQHb0g KWLxlidfVoINthTdtEZrbzM5r5oPN9PlLB+B3TViNK4TCgZnh01Hne6GsDEFO37V eoSTf9L3wyi2oKO63uYE2l/yYXtzFAcdjQmvXZgOJlbtpnTy8lGhtvxOH3X2NemT c+ZqkjCTaTxJMCikQs6XvIqPgEWVeOXYb+hsdmue79PbO6j1w4ITC/JPVpeV9VML 8B6OPmzTjWkk5HrSd9hChzakNZ8cZ+9G -----END CERTIFICATE-----Generated at Sat May 31 16:55:08 2025 by rpki-client