$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json) Hash identifier: 6uUDeU+jZz6y4hQYuTjMoprVgVQ6bSmWM49x36kFX38= Subject key identifier: 83:DF:96:6F:27:68:04:7B:C2:09:95:4F:49:4F:85:02:64:38:0E:3B Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft Manifest number: 0D Signing time: Sat 31 May 2025 07:38:08 +0000 Manifest this update: Sat 31 May 2025 07:38:07 +0000 Manifest next update: Sat 07 Jun 2025 07:38:07 +0000 Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: hY5yXRCNajCIYS2L/PWlrb6CJerrcRM00QkDRhYPLSo=) 2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 3bcDVvnCHw6LlppchOqrgSyXHliARmZhxXNaF8dSpvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Validity Not Before: May 31 07:38:07 2025 GMT Not After : Jun 7 07:38:07 2025 GMT Subject: CN=683ab1df-ffaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:dc:92:17:61:a5:28:74:42:4c:0a:46:8e: 78:bd:57:d8:c0:39:a3:45:f8:9d:b6:44:be:fc:06: 3b:e4:8a:1b:9b:c9:51:7c:44:79:37:5b:e1:df:8b: fe:16:31:91:0d:26:7e:a1:c5:22:7a:e3:6f:13:5f: cc:5c:b7:0f:ac:06:dd:12:00:a7:62:e4:3f:18:cc: 97:d5:d7:ba:6b:68:27:f1:a7:11:ee:bd:2a:c6:9f: 51:87:b1:8f:87:2f:a1:21:ea:a8:9b:62:21:98:48: 1b:20:b4:a7:f5:1b:65:50:39:a0:c7:45:cb:e5:05: 78:76:bb:5e:f1:0a:b2:87:39:3a:b1:1c:69:83:42: 50:02:15:3a:1c:a7:0a:04:7d:0d:eb:95:fd:25:85: 03:12:24:2d:db:ff:61:28:96:03:6d:ee:ab:b8:c4: a4:10:a1:ba:cc:cb:f4:78:07:ee:e2:3d:1e:f4:08: 24:7d:43:25:ef:07:bd:03:49:a0:d7:36:da:24:5b: f5:e2:ac:b8:a1:24:ac:5b:58:81:e7:c1:fd:d3:19: 9f:58:6a:0a:b3:af:c8:43:89:4b:0b:99:99:12:7b: c1:8b:f8:8c:b2:8f:bd:ba:eb:25:0e:8b:eb:8e:1f: cc:ab:e9:20:98:0d:bf:be:dd:14:8b:2a:a5:08:bb: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DF:96:6F:27:68:04:7B:C2:09:95:4F:49:4F:85:02:64:38:0E:3B X509v3 Authority Key Identifier: keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ef:77:50:ee:d8:c4:e6:1f:99:a1:fd:7f:a5:23:6d:ba:a5: 70:19:3f:f8:fc:3a:0f:ff:5d:e0:4c:f9:31:47:1c:4e:44:c1: c5:0b:30:c2:33:32:79:91:db:94:8c:c4:2d:bd:fb:26:0a:3b: 84:fe:e3:56:28:30:51:da:ab:74:72:bd:27:67:e7:d3:a5:3c: 5f:88:0c:f5:00:af:e5:8e:6c:bd:1e:f1:88:a2:bb:02:a0:e4: 39:9d:ac:23:c8:d5:28:f6:19:fc:88:3c:35:ff:70:74:84:54: 2f:3d:df:ff:12:c8:8a:ae:cf:1e:f8:71:4b:43:b8:92:66:03: 99:a6:dc:e1:a9:24:d0:eb:06:c2:7c:5b:80:91:64:67:f5:9c: 36:ac:34:6b:09:bd:54:d8:c2:30:c2:39:41:d4:09:af:bc:2e: bb:e0:1d:2e:c5:3c:da:c1:4c:5f:f5:58:3a:c9:c2:f3:5f:2a: 30:7e:64:f8:c1:87:d2:e7:6f:ad:90:38:33:c5:13:f3:16:ae: 19:b9:a5:1e:27:b8:8f:d8:23:5e:ca:41:0d:a1:a5:5a:b9:9b: bc:d3:62:f8:49:e0:d4:91:77:9a:82:6d:47:ef:5a:44:55:05: a8:6c:b3:af:53:30:22:4e:01:01:cf:e7:90:fa:24:5b:46:78: a7:a8:66:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTMwRjExMC8GA1UEBRMoQ0JCMzVCREZBMzVBOEJFQjI3MDlBNERCQjMyRTNEMjE2 MkVDMUZBODAeFw0yNTA1MzEwNzM4MDdaFw0yNTA2MDcwNzM4MDdaMBgxFjAUBgNV BAMTDTY4M2FiMWRmLWZmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX5NySF2GlKHRCTApGjni9V9jAOaNF+J22RL78BjvkihubyVF8RHk3W+Hfi/4W MZENJn6hxSJ6428TX8xctw+sBt0SAKdi5D8YzJfV17praCfxpxHuvSrGn1GHsY+H L6Eh6qibYiGYSBsgtKf1G2VQOaDHRcvlBXh2u17xCrKHOTqxHGmDQlACFTocpwoE fQ3rlf0lhQMSJC3b/2EolgNt7qu4xKQQobrMy/R4B+7iPR70CCR9QyXvB70DSaDX NtokW/XirLihJKxbWIHnwf3TGZ9Yagqzr8hDiUsLmZkSe8GL+Iyyj7266yUOi+uO H8yr6SCYDb++3RSLKqUIuy6vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg9+Wbydo BHvCCZVPSU+FAmQ4DjswHwYDVR0jBBgwFoAUy7Nb36Nai+snCaTbsy49IWLsH6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMzBGLzcyRTJDNDI0MkE0 MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1zbkNhVGJzeTQ5SVdMc0g2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTdOYjM2TmFpLXNuQ2FUYnN5NDlJV0xzSDZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MzBGLzcyRTJDNDI0MkE0MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1z bkNhVGJzeTQ5SVdMc0g2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIfvd1Du2MTmH5mh/X+lI226pXAZP/j8Og//XeBM+TFHHE5EwcULMMIz MnmR25SMxC29+yYKO4T+41YoMFHaq3RyvSdn59OlPF+IDPUAr+WObL0e8YiiuwKg 5DmdrCPI1Sj2GfyIPDX/cHSEVC893/8SyIquzx74cUtDuJJmA5mm3OGpJNDrBsJ8 W4CRZGf1nDasNGsJvVTYwjDCOUHUCa+8LrvgHS7FPNrBTF/1WDrJwvNfKjB+ZPjB h9Lnb62QODPFE/MWrhm5pR4nuI/YI17KQQ2hpVq5m7zTYvhJ4NSRd5qCbUfvWkRV Bahss69TMCJOAQHP55D6JFtGeKeoZtE= -----END CERTIFICATE-----Generated at Sat May 31 17:11:20 2025 by rpki-client