$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft File: Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json) Hash identifier: IZoHN2jPE9hJtVT2v2cPmO/KUkR6usgSMIrrGeSdQ1k= Subject key identifier: 60:F3:44:9B:76:BB:5A:DF:1E:32:86:DC:01:85:96:5A:44:C8:E4:D9 Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81 Certificate issuer: /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft Manifest number: EF Signing time: Tue 13 May 2025 04:30:49 +0000 Manifest this update: Tue 13 May 2025 04:30:49 +0000 Manifest next update: Tue 20 May 2025 04:30:49 +0000 Files and hashes: 1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: AQhQ8m3h5ziqICbfQZuRDirK4VnXFcFSY8dge2wP2Gw=) 2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: HaM1uGW7CpLpf57Ix2SDrMkVRudstrm9oD5WtSudmS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881 Validity Not Before: May 13 04:30:49 2025 GMT Not After : May 20 04:30:49 2025 GMT Subject: CN=6822caf9-d47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:b7:e2:01:76:ce:15:fa:f5:01:62:70:71: 25:fd:3f:d9:4d:42:1b:b5:fe:23:30:48:a8:54:b7: f7:20:c9:ef:4b:31:fa:0b:bd:3f:88:e4:14:bb:7d: 74:23:4e:b7:54:70:28:a6:28:a1:df:6c:63:ec:06: f5:ed:33:d9:c4:9a:86:53:28:fc:77:17:28:23:08: 93:8a:8b:89:90:db:33:8f:c5:97:a2:c4:10:60:87: 4b:84:47:83:57:70:63:ae:28:a1:cf:6f:d3:b0:e9: 31:4e:bf:25:3e:bd:ae:ff:1b:e4:3e:a3:cf:e4:24: 02:af:de:51:c7:13:33:b3:58:86:78:8a:98:65:22: d7:cf:39:b2:53:9d:b1:df:1e:72:9a:08:51:3c:1e: b8:39:4f:98:14:64:8c:9a:5d:d6:36:4a:39:f8:c8: e6:50:dd:53:9e:28:2e:ae:97:a8:8e:e9:1f:53:62: 9d:1e:b9:b3:5c:6f:0b:28:e4:c9:f1:72:89:2c:0a: c5:0b:c5:db:1e:29:9b:fa:7b:ca:41:73:bd:0b:eb: 1e:03:41:23:44:b5:e6:98:f2:c0:6e:3d:b4:be:76: dd:11:bd:1d:f0:c5:de:70:16:4e:62:60:34:07:bc: 43:8b:27:b8:9a:17:84:27:c8:0c:35:08:c0:f5:62: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:44:9B:76:BB:5A:DF:1E:32:86:DC:01:85:96:5A:44:C8:E4:D9 X509v3 Authority Key Identifier: keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:8d:05:51:3f:25:b1:ec:99:e0:e8:0b:19:9d:96:a9:7d: 86:22:32:49:5e:83:5e:d4:99:c4:20:8d:0d:20:8d:56:38:89: 09:93:a4:bf:aa:82:fc:99:38:ac:90:46:5e:df:81:bb:d4:88: 24:d9:32:b4:21:04:ed:79:26:b3:c0:9f:c9:85:58:e1:23:44: 95:85:06:33:f1:a2:7b:b0:15:78:6e:3a:31:7e:4e:35:dd:30: f5:f5:aa:81:de:d4:fe:ad:11:7a:87:0c:1b:fd:8f:0c:01:72: 5f:cd:c7:c4:15:09:e2:c1:27:87:e2:c4:cc:9a:6d:f6:aa:c3: db:a1:59:38:8c:c7:48:18:82:6c:ec:d4:e4:dc:61:9e:cc:dc: 45:74:12:6f:f1:51:d4:fb:39:23:5e:d7:d2:33:44:45:4e:4d: 65:d7:40:86:02:36:f0:bb:00:b8:24:94:17:62:5b:4d:92:83: f4:7d:e0:c1:45:f8:fb:2d:30:8b:43:d7:5a:8b:99:07:39:94: e3:07:bb:5f:d3:59:2c:1f:0b:a8:6e:f0:f8:99:78:7d:ee:4b: 65:a7:a6:93:56:e9:ac:31:89:84:3d:60:54:3b:35:fb:29:9b: cf:eb:7c:f9:11:3a:e7:84:32:58:02:47:71:3f:8c:12:a2:0f: a0:14:fb:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2ODkxMTAvBgNVBAUTKDYzRkMyRjVERTA5NEM4Mzk2REM4QkM5NzQ0RUQ2ODJG RjRCMjM4ODEwHhcNMjUwNTEzMDQzMDQ5WhcNMjUwNTIwMDQzMDQ5WjAYMRYwFAYD VQQDEw02ODIyY2FmOS1kNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+m34gF2zhX69QFicHEl/T/ZTUIbtf4jMEioVLf3IMnvSzH6C70/iOQUu310 I063VHAopiih32xj7Ab17TPZxJqGUyj8dxcoIwiTiouJkNszj8WXosQQYIdLhEeD V3Bjriihz2/TsOkxTr8lPr2u/xvkPqPP5CQCr95RxxMzs1iGeIqYZSLXzzmyU52x 3x5ymghRPB64OU+YFGSMml3WNko5+MjmUN1TnigurpeojukfU2KdHrmzXG8LKOTJ 8XKJLArFC8XbHimb+nvKQXO9C+seA0EjRLXmmPLAbj20vnbdEb0d8MXecBZOYmA0 B7xDiye4mheEJ8gMNQjA9WIzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDzRJt2 u1rfHjKG3AGFllpEyOTZMB8GA1UdIwQYMBaAFGP8L13glMg5bci8l0TtaC/0sjiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODY4OS81MTVFQ0IzMkM0 QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlEbHR5THlYUk8xb0xfU3lP SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfd3ZYZUNVeURsdHlMeVhSTzFvTF9TeU9JRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODY4OS81MTVFQ0IzMkM0QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlE bHR5THlYUk8xb0xfU3lPSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIKI0FUT8lseyZ4OgLGZ2WqX2GIjJJXoNe1JnEII0NII1WOIkJk6S/ qoL8mTiskEZe34G71Igk2TK0IQTteSazwJ/JhVjhI0SVhQYz8aJ7sBV4bjoxfk41 3TD19aqB3tT+rRF6hwwb/Y8MAXJfzcfEFQniwSeH4sTMmm32qsPboVk4jMdIGIJs 7NTk3GGezNxFdBJv8VHU+zkjXtfSM0RFTk1l10CGAjbwuwC4JJQXYltNkoP0feDB Rfj7LTCLQ9dai5kHOZTjB7tf01ksHwuobvD4mXh97ktlp6aTVumsMYmEPWBUOzX7 KZvP63z5ETrnhDJYAkdxP4wSog+gFPu9 -----END CERTIFICATE-----Generated at Thu May 15 03:51:59 2025 by rpki-client