$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: vbqn8dReS0inPf+6+GCIo5RGodvBJKW3yNs3kjPaHzQ= Subject key identifier: 8A:7A:52:93:E6:DD:26:C7:3D:CC:DE:DA:4F:77:0A:CE:FB:F2:C3:50 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 0614 Signing time: Sat 31 May 2025 00:03:35 +0000 Manifest this update: Sat 31 May 2025 00:03:34 +0000 Manifest next update: Sat 07 Jun 2025 00:03:34 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: syKah3gy0IA+Jd2qSpJxRgyEKmlSB/iGJSbGrXiPQY0=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: May 31 00:03:34 2025 GMT Not After : Jun 7 00:03:34 2025 GMT Subject: CN=683a4757-f7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:ef:c2:05:aa:b6:75:5d:77:90:6b:d5:b5: da:18:89:10:b3:63:66:4f:60:15:f7:ad:68:dc:2f: 70:b2:03:dc:0e:b1:9e:2a:a0:56:85:28:8e:35:89: 19:d4:aa:05:e4:a5:ee:00:d5:98:bc:bc:61:61:63: 48:11:c1:a4:56:8f:f8:84:90:88:6c:45:83:9a:15: bd:fe:fd:f9:ac:72:2e:41:5b:d1:b8:c7:94:3b:b9: 34:03:6b:89:92:79:65:27:64:01:4b:67:c5:1f:d0: e5:65:f8:da:e7:c5:1a:32:e9:de:24:ab:a4:e7:5e: cc:74:c1:da:43:39:31:c6:c9:9f:01:e7:ca:74:ba: e2:dd:8e:51:38:9e:3a:1b:f7:a7:60:3f:34:9c:12: f8:ff:e4:0a:17:c4:2f:25:cd:1a:99:5d:d8:9f:38: 12:0e:1e:ec:0a:3d:6a:ca:c2:d8:16:25:9e:ae:5f: 78:02:e4:67:94:1b:54:71:44:b4:62:3f:12:9f:e8: 21:2d:8e:ea:c0:14:b7:ab:8e:e2:82:4d:55:fb:44: 74:d0:f0:10:6f:3d:a6:51:d4:a1:e1:d2:91:b1:f1: 38:a6:2b:1a:94:43:64:38:f4:bc:f9:97:cb:9b:75: 47:f7:1e:4f:6a:03:27:58:53:78:d8:5d:39:29:fa: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7A:52:93:E6:DD:26:C7:3D:CC:DE:DA:4F:77:0A:CE:FB:F2:C3:50 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a1:fc:2a:c6:6a:a4:57:57:44:5a:ce:b6:62:48:77:bc:c9: 86:38:62:8d:d3:8b:71:74:5e:80:c5:1d:94:64:c1:f4:1a:cf: d6:df:84:db:c5:00:9a:74:1a:b8:34:ec:b8:b1:46:85:11:d6: a1:df:21:af:ab:ee:51:c9:dd:67:e6:e3:8a:91:ed:90:2f:bf: e3:ce:7d:31:35:37:14:42:cf:d0:55:d4:b7:04:b4:2a:af:9a: ef:5d:e8:01:5e:0f:b7:6c:9c:cc:6c:82:a8:31:ba:be:b8:e8: 8d:85:0f:71:cd:b5:a7:6b:92:0d:9a:dc:bd:e1:ad:de:31:69: af:b1:88:b1:8c:d3:cd:0e:ea:be:68:b1:d5:5d:14:de:31:ec: 99:4d:2f:67:39:1d:94:b3:c8:8a:05:f9:1f:f4:c9:7d:fb:4d: b0:a6:62:b0:6e:15:5a:3e:b4:9f:fa:50:bb:f3:57:73:56:7d: cf:0a:8f:35:72:76:f5:4b:54:71:7b:d8:57:2d:c5:b4:37:bd: 17:93:e6:13:8b:00:04:9c:59:78:cb:e5:e7:18:69:79:73:72: 72:02:9a:85:f1:d5:7e:ea:95:63:ce:41:f1:7a:eb:2b:fa:c4: d6:8a:a3:32:95:dc:01:aa:4e:35:06:d8:4c:52:72:d3:9e:69: ef:2e:99:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwNTMxMDAwMzM0WhcNMjUwNjA3MDAwMzM0WjAYMRYwFAYD VQQDEw02ODNhNDc1Ny1mN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16LvwgWqtnVdd5Br1bXaGIkQs2NmT2AV961o3C9wsgPcDrGeKqBWhSiONYkZ 1KoF5KXuANWYvLxhYWNIEcGkVo/4hJCIbEWDmhW9/v35rHIuQVvRuMeUO7k0A2uJ knllJ2QBS2fFH9DlZfja58UaMuneJKuk517MdMHaQzkxxsmfAefKdLri3Y5ROJ46 G/enYD80nBL4/+QKF8QvJc0amV3YnzgSDh7sCj1qysLYFiWerl94AuRnlBtUcUS0 Yj8Sn+ghLY7qwBS3q47igk1V+0R00PAQbz2mUdSh4dKRsfE4pisalENkOPS8+ZfL m3VH9x5PagMnWFN42F05KfocywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIp6UpPm 3SbHPcze2k93Cs778sNQMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxofwqxmqkV1dEWs62Ykh3vMmGOGKN04txdF6AxR2UZMH0Gs/W34Tb xQCadBq4NOy4sUaFEdah3yGvq+5Ryd1n5uOKke2QL7/jzn0xNTcUQs/QVdS3BLQq r5rvXegBXg+3bJzMbIKoMbq+uOiNhQ9xzbWna5INmty94a3eMWmvsYixjNPNDuq+ aLHVXRTeMeyZTS9nOR2Us8iKBfkf9Ml9+02wpmKwbhVaPrSf+lC781dzVn3PCo81 cnb1S1Rxe9hXLcW0N70Xk+YTiwAEnFl4y+XnGGl5c3JyApqF8dV+6pVjzkHxeusr +sTWiqMyldwBqk41BthMUnLTnmnvLpkI -----END CERTIFICATE-----Generated at Sat May 31 17:01:13 2025 by rpki-client