$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json) Hash identifier: q+y3iyU2GD+1HTRT7BK7gjBeQGNUsoPfKl7dimaYcuE= Subject key identifier: C2:C9:A2:20:8D:C8:40:07:1A:7B:B2:F5:0E:F5:BC:49:CA:C1:C5:8E Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft Manifest number: 45 Signing time: Sat 31 May 2025 07:00:16 +0000 Manifest this update: Sat 31 May 2025 07:00:15 +0000 Manifest next update: Sat 07 Jun 2025 07:00:15 +0000 Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: ctSr+lIcKY86c8ETsHvCf0Jp0Oi1mT1fIzrgGlmWEYY=) 2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Validity Not Before: May 31 07:00:15 2025 GMT Not After : Jun 7 07:00:15 2025 GMT Subject: CN=683aa900-a623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:b2:12:92:30:42:a5:42:f7:13:03:1f:d6: 05:a5:ae:30:dd:c8:78:89:31:b2:50:b4:56:2a:a1: e1:50:0a:96:9e:64:44:84:f9:a0:8f:1f:5d:18:be: 39:b0:b9:ab:bc:bb:9e:63:31:fd:c7:21:95:1e:b0: fc:83:ab:fd:aa:af:e2:e3:1b:de:fd:67:03:b3:7c: 91:60:5b:3f:16:cc:e7:94:3b:06:94:a6:3c:57:6c: 2c:58:cb:e9:8a:82:8f:9f:be:43:55:19:0c:30:66: 55:11:06:f4:35:95:61:d3:00:73:55:59:96:9b:01: 6b:4d:7e:91:a2:37:a8:cd:28:b1:47:01:ae:7d:e1: cf:2d:b7:ff:45:19:16:11:8f:3f:e9:cb:2c:5d:fd: db:30:46:75:eb:41:90:b4:b3:0a:ef:c6:77:ee:7d: 31:6a:ad:a4:31:24:59:cd:61:a4:95:da:11:df:ec: 6f:cb:6a:a7:bf:af:b7:00:fd:e6:fd:c6:1e:2a:63: 5f:d0:b1:e1:de:36:7b:e5:fd:c3:d2:6b:79:0b:53: 49:75:74:9e:93:22:c1:26:d4:c5:75:e6:2a:de:70: 3f:ab:f0:1c:b0:b1:a0:bd:e2:58:19:3e:94:53:2a: 42:51:fd:38:6f:01:a1:43:9a:d9:1c:26:54:04:03: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:A2:20:8D:C8:40:07:1A:7B:B2:F5:0E:F5:BC:49:CA:C1:C5:8E X509v3 Authority Key Identifier: keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:1b:34:86:f1:04:de:0b:8a:f7:68:5b:1f:c7:36:cd:21: 03:58:b4:92:4e:c4:c0:cf:9a:de:83:99:57:d1:76:a7:23:13: e4:b8:1d:98:21:c5:6b:7c:0b:d5:99:c8:09:74:c7:e5:76:41: 76:11:e5:24:fc:68:7a:2b:5b:cf:dc:ac:60:a3:56:91:f9:3d: 0c:b6:a8:38:2a:9c:95:6b:4d:cb:0b:d4:12:26:42:33:1f:31: bf:0e:48:ad:f5:01:0b:3b:7c:70:cf:5e:4c:d9:15:af:9c:ab: b6:d0:2f:da:45:97:8b:6f:f2:3a:cb:46:2b:ee:e0:e9:85:d0: 5a:df:bd:f3:ac:b3:3b:b5:78:6f:6f:49:07:f5:ef:6f:1f:af: 2a:09:42:13:64:cf:2f:22:ba:43:a5:1b:0a:0d:0a:03:20:98: ed:d8:95:b8:4e:c2:5c:2d:28:c8:55:4c:af:6c:77:ca:64:73: 5b:6f:7a:f4:56:1d:d0:aa:17:3a:a6:14:cb:93:c6:a1:1f:cf: e2:a0:65:a0:b5:ff:c2:55:01:3d:3d:96:04:d9:4f:3d:95:fb: 5b:4d:c3:4e:42:aa:11:8e:28:39:e6:2a:fd:5c:61:b9:c3:15: 50:52:9e:97:16:d6:d8:e5:83:da:17:cf:fc:0c:9d:da:9a:f8: 5a:05:05:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OENDMzExMC8GA1UEBRMoQzkxNkFFNUE5NTIwQjVGNjc2N0U3OUM5MTVBRkExQkY2 RTQ5MTg5OTAeFw0yNTA1MzEwNzAwMTVaFw0yNTA2MDcwNzAwMTVaMBgxFjAUBgNV BAMTDTY4M2FhOTAwLWE2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjlbISkjBCpUL3EwMf1gWlrjDdyHiJMbJQtFYqoeFQCpaeZESE+aCPH10Yvjmw uau8u55jMf3HIZUesPyDq/2qr+LjG979ZwOzfJFgWz8WzOeUOwaUpjxXbCxYy+mK go+fvkNVGQwwZlURBvQ1lWHTAHNVWZabAWtNfpGiN6jNKLFHAa594c8tt/9FGRYR jz/pyyxd/dswRnXrQZC0swrvxnfufTFqraQxJFnNYaSV2hHf7G/Laqe/r7cA/eb9 xh4qY1/QseHeNnvl/cPSa3kLU0l1dJ6TIsEm1MV15irecD+r8BywsaC94lgZPpRT KkJR/ThvAaFDmtkcJlQEAxhdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwsmiII3I QAcae7L1DvW8ScrBxY4wHwYDVR0jBBgwFoAUyRauWpUgtfZ2fnnJFa+hv25JGJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Q0MzL0VEREEzNkUyRDcy MzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJhdVdwVWd0ZloyZm5uSkZhLWh2MjVKR0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Q0MzL0VEREEzNkUyRDcyMzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZa MmZubkpGYS1odjI1SkdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFstGzSG8QTeC4r3aFsfxzbNIQNYtJJOxMDPmt6DmVfRdqcjE+S4HZgh xWt8C9WZyAl0x+V2QXYR5ST8aHorW8/crGCjVpH5PQy2qDgqnJVrTcsL1BImQjMf Mb8OSK31AQs7fHDPXkzZFa+cq7bQL9pFl4tv8jrLRivu4OmF0FrfvfOsszu1eG9v SQf1728fryoJQhNkzy8iukOlGwoNCgMgmO3YlbhOwlwtKMhVTK9sd8pkc1tvevRW HdCqFzqmFMuTxqEfz+KgZaC1/8JVAT09lgTZTz2V+1tNw05CqhGOKDnmKv1cYbnD FVBSnpcW1tjlg9oXz/wMndqa+FoFBeI= -----END CERTIFICATE-----Generated at Sat May 31 17:04:49 2025 by rpki-client