$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: DT97hyZ64vtKJmCaR7tiX6pm+7Zo3ZI6a6KA0iIcSL4= Subject key identifier: F2:F3:9D:6E:14:0C:A9:29:99:A9:0D:2A:9F:0F:D8:45:B3:62:68:7A Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C34 Signing time: Fri 30 May 2025 18:47:54 +0000 Manifest this update: Fri 30 May 2025 18:47:54 +0000 Manifest next update: Fri 06 Jun 2025 18:47:54 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: 8kg7dzuzUJJlRhEhuXUdy6iWUlx0BxW3WncnEaBpjwU=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: May 30 18:47:54 2025 GMT Not After : Jun 6 18:47:54 2025 GMT Subject: CN=6839fd5a-4e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:29:97:c5:cb:0d:2a:41:d6:99:0e:69:6e: 34:61:2b:3a:1c:d0:8f:22:ab:36:7d:b8:d7:74:a9: 56:a8:ae:40:22:f0:d5:c7:03:7d:70:75:15:b1:05: 3f:6d:a1:bd:06:44:96:81:d1:6d:27:bf:aa:88:dd: 1a:a1:4a:36:b5:28:57:e4:a5:00:bd:e1:fe:14:11: 44:16:86:ff:87:02:b3:39:0d:c4:41:f1:82:dc:88: 37:06:04:bd:68:98:b8:e7:84:1d:5c:6d:52:19:67: cb:2c:9f:20:7d:8b:04:1e:53:4a:ec:b1:cc:46:7d: 1f:8a:3c:f5:37:c7:89:ac:18:d6:54:55:00:b1:4f: 6d:68:d9:ce:e9:72:22:8d:05:6a:62:11:9a:3b:5e: f6:b7:b4:8f:d7:b5:c6:59:8b:37:b1:6d:e8:a2:56: 23:6d:ce:ba:f1:5d:3d:69:7a:f5:c7:05:34:9b:b1: 3d:44:8f:49:da:4d:05:03:a5:b9:05:50:99:d2:2c: 52:06:cc:8d:12:49:c7:e8:f2:d3:28:99:21:3f:6b: 33:f4:4f:18:65:a1:bf:3c:ee:b9:72:60:42:0f:5a: 79:eb:d3:23:2f:e4:c3:e9:04:8f:95:b5:38:34:31: b9:3f:77:56:40:c5:18:2c:ec:eb:4f:79:09:cf:7b: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F3:9D:6E:14:0C:A9:29:99:A9:0D:2A:9F:0F:D8:45:B3:62:68:7A X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2f:a8:31:26:e5:78:0e:6b:52:0b:1b:30:c4:e3:7c:94:22: 83:00:2c:a0:e0:05:f4:d1:3b:21:4e:d4:3d:df:a4:dd:ec:31: 98:8d:a6:c2:7d:64:ad:17:fd:35:1d:c5:b7:db:fe:b3:56:9f: 47:18:f8:47:85:c0:68:3f:33:1d:7e:79:37:0f:7f:46:6a:f9: bb:55:c8:e7:c5:05:48:a4:99:e5:f0:5d:f0:ad:34:56:cb:1a: a6:f1:b0:ce:2f:7d:3d:4b:3a:d7:60:2f:4d:73:18:23:bd:13: 50:67:48:01:72:29:d0:a0:14:f0:81:e1:f1:64:92:65:0c:3e: d6:e6:7e:8e:2b:ae:30:9f:03:23:c6:75:69:01:e2:97:57:0b: 0d:98:6a:48:f3:8b:81:50:5a:ab:11:be:8a:74:17:6b:ed:64: b0:c3:e1:d1:a5:23:57:02:2b:a3:1a:ab:da:29:1b:71:29:69: 67:dd:05:b4:f5:a7:7f:8c:e2:60:be:30:f4:fe:20:b5:d2:df: 85:93:ae:79:68:7d:e8:55:df:b2:c7:f7:ad:e1:40:9e:96:8b: e1:3b:19:18:8e:c5:70:ae:fc:c4:e6:f2:ba:6e:c9:67:a8:fe: 7c:1e:eb:4a:b0:91:34:59:6f:a2:25:d6:f3:85:3f:d4:c4:fe: eb:72:e9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNTMwMTg0NzU0WhcNMjUwNjA2MTg0NzU0WjAYMRYwFAYD VQQDEw02ODM5ZmQ1YS00ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK0pl8XLDSpB1pkOaW40YSs6HNCPIqs2fbjXdKlWqK5AIvDVxwN9cHUVsQU/ baG9BkSWgdFtJ7+qiN0aoUo2tShX5KUAveH+FBFEFob/hwKzOQ3EQfGC3Ig3BgS9 aJi454QdXG1SGWfLLJ8gfYsEHlNK7LHMRn0fijz1N8eJrBjWVFUAsU9taNnO6XIi jQVqYhGaO172t7SP17XGWYs3sW3oolYjbc668V09aXr1xwU0m7E9RI9J2k0FA6W5 BVCZ0ixSBsyNEknH6PLTKJkhP2sz9E8YZaG/PO65cmBCD1p569MjL+TD6QSPlbU4 NDG5P3dWQMUYLOzrT3kJz3tLJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLznW4U DKkpmakNKp8P2EWzYmh6MB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADL6gxJuV4DmtSCxswxON8lCKDACyg4AX00TshTtQ936Td7DGYjabC fWStF/01HcW32/6zVp9HGPhHhcBoPzMdfnk3D39Gavm7VcjnxQVIpJnl8F3wrTRW yxqm8bDOL309SzrXYC9NcxgjvRNQZ0gBcinQoBTwgeHxZJJlDD7W5n6OK64wnwMj xnVpAeKXVwsNmGpI84uBUFqrEb6KdBdr7WSww+HRpSNXAiujGqvaKRtxKWln3QW0 9ad/jOJgvjD0/iC10t+Fk655aH3oVd+yx/et4UCelovhOxkYjsVwrvzE5vK6bsln qP58HutKsJE0WW+iJdbzhT/UxP7rcukz -----END CERTIFICATE-----Generated at Sat May 31 17:56:17 2025 by rpki-client