$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: Hw8ezV1oekgIUFHOfC0AZu0uvw0F/z3vRVhhlKQi1Q8= Subject key identifier: 8E:29:4E:45:D8:0A:05:EE:4A:C5:93:EB:55:96:57:A6:C2:5D:6B:C5 Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 0394 Signing time: Sat 31 May 2025 00:59:28 +0000 Manifest this update: Sat 31 May 2025 00:59:28 +0000 Manifest next update: Sat 07 Jun 2025 00:59:28 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: ZzBHKslnC+94JMATNmqoisSoS5ZtY7EfBoNZANpXDv0=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: May 31 00:59:28 2025 GMT Not After : Jun 7 00:59:28 2025 GMT Subject: CN=683a5470-30a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:4e:58:f5:1d:ac:ce:7c:40:11:4c:a9:3a: 97:d0:2e:47:db:1e:53:b4:14:c0:97:b3:2d:a7:f9: 91:4b:7a:24:03:8a:43:df:b8:73:cc:b0:db:62:22: 9f:78:5c:0d:ad:0a:4c:f0:48:89:dc:e4:85:48:a8: 2a:52:15:23:ae:43:ea:e9:e5:a4:af:1e:26:24:8d: bc:13:31:0a:7f:5c:87:37:fa:ab:04:c0:62:8e:15: 71:11:36:43:df:12:87:6a:95:55:50:de:1d:23:09: de:ed:fb:66:d7:ee:13:63:8f:da:3b:49:98:af:09: 92:9e:c4:70:6d:4a:f4:8d:1f:e2:bc:96:ba:ce:8c: 2a:ad:b3:99:27:81:9e:23:48:6f:c0:26:60:1d:ab: b8:95:9e:e5:8c:d1:18:5e:d5:1e:0b:9b:1a:be:39: 56:91:16:f4:73:d7:e2:47:c9:da:fb:57:79:33:c2: 86:3b:b1:df:64:06:3b:ce:41:42:f2:3c:ab:90:21: 6a:8c:14:08:c9:5b:71:2b:72:f5:a7:5a:fd:91:b6: 63:af:b5:08:a7:08:5d:76:80:bf:2d:db:df:e0:bc: af:87:59:ed:ba:61:55:63:3b:04:4d:8c:9a:15:49: 3c:81:62:50:7f:61:c4:a8:82:54:27:af:7b:e4:2b: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:4E:45:D8:0A:05:EE:4A:C5:93:EB:55:96:57:A6:C2:5D:6B:C5 X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:16:00:e5:93:d9:08:88:05:7e:0a:9b:f2:60:32:cb:e3:ef: 7f:c1:4e:da:9e:3b:ad:49:12:b9:2e:63:f0:08:60:6b:73:3d: fd:fd:3a:a5:e7:1c:8a:ee:a0:84:49:00:32:61:a9:c6:8b:b5: 37:da:81:ed:be:b5:bb:6a:69:08:34:20:cb:9a:55:5e:6d:16: dc:9e:91:7d:50:5d:68:b4:94:21:48:34:d6:56:0b:54:00:a1: 67:f5:64:01:11:88:d9:eb:0a:3e:e9:7d:af:ee:d5:0b:0d:cb: a7:26:72:21:bc:25:e8:6a:34:4b:e6:18:e6:77:a7:81:a3:aa: 0e:1f:e5:04:67:4c:28:43:fc:bc:bb:6d:7f:7c:25:56:a5:01: e1:0a:dc:72:e1:7c:f1:4c:c3:ad:2f:05:bf:46:9d:26:a5:6d: b6:67:bf:73:82:89:30:ba:68:fd:17:76:50:70:46:49:0e:2b: b1:cd:39:24:45:ad:9f:b8:ad:09:67:00:19:75:e8:74:2d:27: e2:86:4f:f1:d4:f1:80:96:20:fa:c0:13:80:f5:27:55:e7:38: b8:bd:c6:20:aa:bc:8b:87:97:06:e2:c3:94:f1:d6:9d:9a:1f: 96:62:ed:32:a8:ba:56:a7:60:e8:45:93:07:4c:4f:d8:94:03: 67:9e:33:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjUwNTMxMDA1OTI4WhcNMjUwNjA3MDA1OTI4WjAYMRYwFAYD VQQDEw02ODNhNTQ3MC0zMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmp5OWPUdrM58QBFMqTqX0C5H2x5TtBTAl7Mtp/mRS3okA4pD37hzzLDbYiKf eFwNrQpM8EiJ3OSFSKgqUhUjrkPq6eWkrx4mJI28EzEKf1yHN/qrBMBijhVxETZD 3xKHapVVUN4dIwne7ftm1+4TY4/aO0mYrwmSnsRwbUr0jR/ivJa6zowqrbOZJ4Ge I0hvwCZgHau4lZ7ljNEYXtUeC5savjlWkRb0c9fiR8na+1d5M8KGO7HfZAY7zkFC 8jyrkCFqjBQIyVtxK3L1p1r9kbZjr7UIpwhddoC/Ldvf4Lyvh1ntumFVYzsETYya FUk8gWJQf2HEqIJUJ6975CtsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4pTkXY CgXuSsWT61WWV6bCXWvFMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FgDlk9kIiAV+CpvyYDLL4+9/wU7anjutSRK5LmPwCGBrcz39/Tql 5xyK7qCESQAyYanGi7U32oHtvrW7amkINCDLmlVebRbcnpF9UF1otJQhSDTWVgtU AKFn9WQBEYjZ6wo+6X2v7tULDcunJnIhvCXoajRL5hjmd6eBo6oOH+UEZ0woQ/y8 u21/fCVWpQHhCtxy4XzxTMOtLwW/Rp0mpW22Z79zgokwumj9F3ZQcEZJDiuxzTkk Ra2fuK0JZwAZdeh0LSfihk/x1PGAliD6wBOA9SdV5zi4vcYgqryLh5cG4sOU8dad mh+WYu0yqLpWp2DoRZMHTE/YlANnnjOV -----END CERTIFICATE-----Generated at Sat May 31 16:46:53 2025 by rpki-client