$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: J0Oh1w7KFl8EepVyThwcEuhX2DLDDn3m+CSOmtsVyK0= Subject key identifier: 53:B0:29:D3:01:3E:15:A7:FD:7A:00:A7:90:AB:70:81:67:C6:B3:72 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D42 Signing time: Fri 30 May 2025 18:10:58 +0000 Manifest this update: Fri 30 May 2025 18:10:58 +0000 Manifest next update: Fri 06 Jun 2025 18:10:58 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: eyECKnrKuv2Say6goRpn71KQbJelohbTzk7r4WW+WSY=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: May 30 18:10:58 2025 GMT Not After : Jun 6 18:10:58 2025 GMT Subject: CN=6839f4b2-6b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:31:79:8f:e6:a9:58:00:0a:13:f6:bc:69: 44:ef:61:9b:f5:00:29:5f:c8:ad:f4:fc:dc:0b:c6: 69:1c:f4:17:de:0a:66:b1:dd:64:2c:95:8e:db:46: c9:49:97:99:64:63:43:f8:ee:42:1f:8c:5c:51:9f: a5:66:e1:cd:5a:9b:95:1b:ed:be:97:56:ee:51:8a: bb:4d:65:31:db:10:e7:03:b5:bf:0a:1b:01:3d:4a: df:55:16:fc:93:57:ea:6d:f2:aa:0e:ea:fc:60:9a: 30:21:87:1c:58:68:e1:b2:b4:ad:bc:db:e6:d4:d5: 7f:32:93:6a:98:c6:4a:87:f5:1a:32:05:93:e5:fd: db:2e:58:32:45:77:c2:b5:2b:4f:78:62:d5:27:30: fc:ee:f5:96:e5:1e:1c:58:e5:34:25:56:2a:6f:27: 56:14:df:6d:82:b3:21:7f:d1:5e:b2:09:05:6f:6b: 0f:42:1b:8c:a1:a7:ff:b2:7a:2c:f7:f4:c7:9b:4f: 86:a9:1f:4e:b8:2c:6f:69:c1:0c:b1:f8:fc:74:a0: 22:0a:57:0c:45:ae:30:a9:8e:dd:0e:df:92:15:a0: 24:21:52:8c:5f:2d:bf:59:08:30:64:db:1f:41:d6: a9:a2:13:df:68:2c:c4:d5:01:57:56:b8:4f:d7:71: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:29:D3:01:3E:15:A7:FD:7A:00:A7:90:AB:70:81:67:C6:B3:72 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ca:93:60:4e:cb:18:4d:43:66:95:4c:e3:94:5a:43:05:5d: e2:83:e7:46:f4:3d:dd:08:ac:7c:db:ff:24:f9:ef:1e:ab:43: 10:d5:90:62:3a:84:4f:54:ca:79:7f:57:4b:97:4b:ab:94:96: 96:67:82:d2:dd:6f:f0:df:b3:1f:d4:83:43:e8:d1:33:6d:09: 92:7e:d7:04:0f:7c:17:65:a0:cd:ec:d4:ce:e7:95:65:42:24: b3:9d:81:34:a4:6f:67:af:25:a9:09:f1:43:2d:d3:19:2a:27: 4c:1e:43:c2:ae:ef:9b:32:e8:8b:5c:90:76:64:83:e2:79:bc: 42:41:0f:08:f5:38:59:68:10:1d:f1:b0:64:bc:76:93:64:3b: b6:3f:75:ef:ab:57:61:c4:66:67:d4:3a:43:9d:2c:ac:0c:7f: 0c:d7:e1:a5:14:5b:f7:77:11:62:b8:71:2c:4e:83:66:57:b2: 7d:79:d8:4e:9e:d5:76:4d:74:54:39:02:17:a0:23:bd:b3:d9: 9a:51:04:5c:31:86:45:a1:5d:b6:eb:f7:a6:b9:be:e8:1d:a0: 7d:82:02:89:30:2c:94:ee:48:be:b4:22:c9:09:74:d0:b1:a6: 4c:de:a6:8d:c6:37:4a:17:e9:d4:75:b5:05:b8:55:ed:23:87: 8b:9e:da:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwNTMwMTgxMDU4WhcNMjUwNjA2MTgxMDU4WjAYMRYwFAYD VQQDEw02ODM5ZjRiMi02YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvoxeY/mqVgAChP2vGlE72Gb9QApX8it9PzcC8ZpHPQX3gpmsd1kLJWO20bJ SZeZZGND+O5CH4xcUZ+lZuHNWpuVG+2+l1buUYq7TWUx2xDnA7W/ChsBPUrfVRb8 k1fqbfKqDur8YJowIYccWGjhsrStvNvm1NV/MpNqmMZKh/UaMgWT5f3bLlgyRXfC tStPeGLVJzD87vWW5R4cWOU0JVYqbydWFN9tgrMhf9FesgkFb2sPQhuMoaf/snos 9/THm0+GqR9OuCxvacEMsfj8dKAiClcMRa4wqY7dDt+SFaAkIVKMXy2/WQgwZNsf QdapohPfaCzE1QFXVrhP13HciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOwKdMB PhWn/XoAp5CrcIFnxrNyMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ypNgTssYTUNmlUzjlFpDBV3ig+dG9D3dCKx82/8k+e8eq0MQ1ZBi OoRPVMp5f1dLl0urlJaWZ4LS3W/w37Mf1IND6NEzbQmSftcED3wXZaDN7NTO55Vl QiSznYE0pG9nryWpCfFDLdMZKidMHkPCru+bMuiLXJB2ZIPiebxCQQ8I9ThZaBAd 8bBkvHaTZDu2P3Xvq1dhxGZn1DpDnSysDH8M1+GlFFv3dxFiuHEsToNmV7J9edhO ntV2TXRUOQIXoCO9s9maUQRcMYZFoV226/emub7oHaB9ggKJMCyU7ki+tCLJCXTQ saZM3qaNxjdKF+nUdbUFuFXtI4eLntqt -----END CERTIFICATE-----Generated at Sat May 31 17:42:42 2025 by rpki-client