$ rpki-client -vvf rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft File: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft (raw, json) Hash identifier: vtpNUxI05SnO6fz6KSmuVb/+6zoFNYqZpstC5iIj/g0= Subject key identifier: 66:9B:46:70:A1:91:57:1F:23:8F:86:56:42:7C:AF:1C:58:B5:6B:D2 Authority key identifier: 63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 Certificate issuer: /CN=A9188593/serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft Manifest number: 2D Signing time: Sat 31 May 2025 07:16:17 +0000 Manifest this update: Sat 31 May 2025 07:16:17 +0000 Manifest next update: Sat 07 Jun 2025 07:16:17 +0000 Files and hashes: 1: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl (hash: sruNLASq4uuQCDsYM6Sn6eEZa4TlaqLEc4xZ44y80oA=) 2: A60DE226FA6611EFA2492D77C4F9AE02.roa (hash: EaDsWh2ev+tCV5xfJvG7800tAekhxcSYZkZKsSGYDqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188593, serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Validity Not Before: May 31 07:16:17 2025 GMT Not After : Jun 7 07:16:17 2025 GMT Subject: CN=683aacc1-b6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:fd:f8:8b:19:f5:d4:2e:d5:61:29:29:72: 99:aa:eb:d8:00:c6:a9:2a:ca:16:39:35:ef:3e:b9: ac:e2:42:b0:0c:05:c7:58:23:d3:88:0d:e1:b8:86: a7:d6:54:e7:60:c5:fe:0c:5e:28:23:1f:2d:2b:cb: 7e:0a:3a:13:f2:ef:13:32:38:fe:49:7d:78:35:b3: 32:0c:b8:60:27:e6:e8:4d:a1:7e:c7:d0:45:be:a2: 0d:8e:9b:64:6b:96:a9:2b:f6:8b:fd:c3:8d:14:b3: 7a:eb:f7:0b:38:da:72:86:b7:6a:30:a5:36:86:be: 76:42:81:0f:b2:ea:78:0a:5f:48:ff:40:8e:35:5b: f2:49:cd:7a:28:f2:d4:41:08:43:d2:38:cf:39:07: d3:02:04:3f:2e:7b:7d:de:46:46:27:18:cb:e4:45: c6:74:2d:6a:38:a5:34:4a:11:dd:a1:04:b7:63:6f: 40:39:0f:4e:c7:e1:ce:40:01:19:e2:98:ae:68:1d: 74:fa:3f:d2:fe:f1:2e:2d:3e:9b:60:12:b6:19:cb: f5:4c:5a:26:c3:1e:69:32:37:92:b9:1b:e9:1d:c6: ad:9c:88:8b:4d:c8:30:67:af:13:c9:62:2f:22:2d: 0f:5d:8c:e6:f1:d3:d3:39:35:33:fa:39:db:7a:75: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:46:70:A1:91:57:1F:23:8F:86:56:42:7C:AF:1C:58:B5:6B:D2 X509v3 Authority Key Identifier: keyid:63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e6:7f:31:4a:6e:ff:47:28:00:93:ff:9a:10:18:69:e3:15: 08:37:94:87:41:1f:b6:b1:3a:81:e2:c9:7c:93:2b:76:73:3c: 74:b3:96:eb:b1:84:27:05:02:08:46:7d:9d:f8:59:41:22:e8: 0e:55:9e:c9:72:49:b3:b4:da:e1:25:9e:5c:1f:02:23:c1:08: 6c:38:4f:a4:0f:88:da:43:0b:57:09:01:41:f8:95:50:7f:33: d8:ea:10:4a:cd:9a:d7:5d:38:bd:c7:2f:30:09:90:4f:cf:5a: a8:ac:9d:be:0e:18:a3:24:ce:4d:e3:00:21:4a:fb:bb:89:2d: 45:2e:bc:55:d0:df:75:bb:d9:cf:e4:f6:cf:42:77:bc:de:67: db:eb:80:94:24:d3:44:73:9b:fb:d6:20:2c:34:9e:cb:a2:db: 31:42:0e:4f:55:24:15:29:4c:2c:fa:fb:d3:2a:47:fa:c7:bf: 79:c5:e9:e8:45:1d:9c:a1:cb:84:7c:1b:a2:8c:70:82:60:24: e6:0d:9b:3e:29:59:88:f3:70:88:d6:d4:bf:dc:e6:9e:95:b1: 7e:61:12:03:9e:e0:dc:47:53:ff:86:be:df:b1:f3:41:97:a4: ad:eb:97:96:7f:d0:52:61:31:4c:3f:51:5d:f9:fe:a5:c8:04: 01:58:b3:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODU5MzExMC8GA1UEBRMoNjM2RkQxNDBEMDlFQ0E0RDE4RUYyQ0I3M0FFREIxMjQ3 OUZEQ0M5OTAeFw0yNTA1MzEwNzE2MTdaFw0yNTA2MDcwNzE2MTdaMBgxFjAUBgNV BAMTDTY4M2FhY2MxLWI2YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChYf34ixn11C7VYSkpcpmq69gAxqkqyhY5Ne8+uaziQrAMBcdYI9OIDeG4hqfW VOdgxf4MXigjHy0ry34KOhPy7xMyOP5JfXg1szIMuGAn5uhNoX7H0EW+og2Om2Rr lqkr9ov9w40Us3rr9ws42nKGt2owpTaGvnZCgQ+y6ngKX0j/QI41W/JJzXoo8tRB CEPSOM85B9MCBD8ue33eRkYnGMvkRcZ0LWo4pTRKEd2hBLdjb0A5D07H4c5AARni mK5oHXT6P9L+8S4tPptgErYZy/VMWibDHmkyN5K5G+kdxq2ciItNyDBnrxPJYi8i LQ9djObx09M5NTP6Odt6dYMPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZptGcKGR Vx8jj4ZWQnyvHFi1a9IwHwYDVR0jBBgwFoAUY2/RQNCeyk0Y7yy3Ou2xJHn9zJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NTkzLzFEMTU1OTg2RkE2 NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWswWTd5eTNPdTJ4SkhuOXpK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTJfUlFOQ2V5azBZN3l5M091MnhKSG45ekprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NTkzLzFEMTU1OTg2RkE2NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWsw WTd5eTNPdTJ4SkhuOXpKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHmfzFKbv9HKACT/5oQGGnjFQg3lIdBH7axOoHiyXyTK3ZzPHSzluux hCcFAghGfZ34WUEi6A5VnslySbO02uElnlwfAiPBCGw4T6QPiNpDC1cJAUH4lVB/ M9jqEErNmtddOL3HLzAJkE/PWqisnb4OGKMkzk3jACFK+7uJLUUuvFXQ33W72c/k 9s9Cd7zeZ9vrgJQk00Rzm/vWICw0nsui2zFCDk9VJBUpTCz6+9MqR/rHv3nF6ehF HZyhy4R8G6KMcIJgJOYNmz4pWYjzcIjW1L/c5p6VsX5hEgOe4NxHU/+Gvt+x80GX pK3rl5Z/0FJhMUw/UV35/qXIBAFYsyQ= -----END CERTIFICATE-----Generated at Sat May 31 17:48:44 2025 by rpki-client