$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: XOUS2u4VgQcvLxNkU0BhumQSxrEVP+cAW3nlcco2LeI= Subject key identifier: 50:76:98:9A:46:98:14:7A:03:E1:30:BB:32:82:92:A9:E3:7E:52:72 Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0C2D Signing time: Wed 14 May 2025 19:37:09 +0000 Manifest this update: Wed 14 May 2025 19:37:08 +0000 Manifest next update: Wed 21 May 2025 19:37:08 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: fqYHChaFXLycXm9/Isyo89GLrxe6fTdiwxPdBFONmMs=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: OjHAxH1Hw9gy0UQ2CMawY3+U2L8V8cVsXKI6o/DCSes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: May 14 19:37:08 2025 GMT Not After : May 21 19:37:08 2025 GMT Subject: CN=6824f0e4-8328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:cb:77:d4:69:c6:71:d2:03:00:36:fe:66: 27:11:63:db:65:2d:44:c3:ef:dc:a0:2f:69:1b:a3: f9:c5:ac:24:29:8c:fa:df:70:38:26:03:9c:e6:b7: 80:57:49:42:f5:e1:c6:95:80:e4:44:bf:6d:b2:01: b1:84:55:41:12:46:ff:52:d9:62:fa:d6:3a:dc:11: 7b:88:e2:d7:4a:c5:ae:ee:81:b5:f3:26:b8:1c:43: 71:3e:89:33:f4:96:7b:13:56:d9:d0:f9:c3:f0:72: 33:49:6a:1e:61:bc:f7:46:b1:9b:b7:a1:fe:08:96: 1b:e2:cb:df:6a:65:d8:ed:f8:ed:f9:60:cb:ba:f2: 5c:a3:95:89:97:4b:c2:b1:97:d6:9c:26:2f:7e:05: 16:d7:7f:8b:b4:1f:0d:f6:65:eb:ed:75:47:e1:c7: e8:e4:2e:14:b3:3f:d0:66:03:3d:ad:e9:7f:93:22: c7:87:fc:c7:a8:57:09:5d:ac:ce:df:f3:b4:4a:eb: 33:8a:81:23:70:4c:56:e1:92:b0:f6:3d:3d:fa:ef: a2:aa:78:11:9c:87:3a:98:0b:79:1e:db:31:bf:60: e9:4b:77:fb:68:60:cc:41:da:fc:aa:e1:b0:d0:dc: cd:22:c6:af:2b:b7:b9:73:25:e7:67:d7:75:88:64: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:98:9A:46:98:14:7A:03:E1:30:BB:32:82:92:A9:E3:7E:52:72 X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:30:f5:31:10:c4:d8:7c:3f:d2:6c:f4:b6:da:7e:35:a4:ce: 55:97:6b:0c:bf:fc:21:89:b5:d3:de:8b:e8:f9:4e:ca:19:3a: 92:08:fb:f6:df:93:1e:08:d4:31:db:72:7d:48:70:c9:aa:52: 24:f4:5e:88:ec:97:7d:22:25:28:4d:a2:9f:9f:13:d2:60:26: 3d:67:ba:9c:ae:52:6f:90:68:03:78:be:22:73:9c:df:4b:d8: 8b:14:6c:b5:37:a2:0b:ba:ab:2c:af:e0:0a:14:5d:95:90:12: 4f:ae:68:03:8b:00:e5:38:a1:3f:fb:bb:b3:7e:dc:70:72:c3: a9:84:70:8b:a4:5c:86:ef:60:4e:bc:73:a7:e3:aa:40:19:13: f4:db:28:20:10:7b:05:28:3c:78:ec:ad:07:7a:b9:96:47:56: 95:07:d6:cc:0f:1e:dd:a6:bf:17:7e:e6:de:34:87:bb:74:59: 8e:69:df:11:c2:2a:1c:02:58:35:c9:a4:37:16:13:a9:4f:7c: 94:ef:6c:2d:b4:ca:57:f0:ac:d9:2f:30:56:4a:2f:b9:c7:04: 83:7f:2c:ff:04:2b:a3:db:dc:61:6a:ed:39:c7:10:c9:b6:11: df:a9:7d:82:db:ea:2b:07:ef:29:e6:ae:61:31:3e:4d:39:7e: 28:63:15:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUwNTE0MTkzNzA4WhcNMjUwNTIxMTkzNzA4WjAYMRYwFAYD VQQDEw02ODI0ZjBlNC04MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rDLd9RpxnHSAwA2/mYnEWPbZS1Ew+/coC9pG6P5xawkKYz633A4JgOc5reA V0lC9eHGlYDkRL9tsgGxhFVBEkb/Utli+tY63BF7iOLXSsWu7oG18ya4HENxPokz 9JZ7E1bZ0PnD8HIzSWoeYbz3RrGbt6H+CJYb4svfamXY7fjt+WDLuvJco5WJl0vC sZfWnCYvfgUW13+LtB8N9mXr7XVH4cfo5C4Usz/QZgM9rel/kyLHh/zHqFcJXazO 3/O0SuszioEjcExW4ZKw9j09+u+iqngRnIc6mAt5Htsxv2DpS3f7aGDMQdr8quGw 0NzNIsavK7e5cyXnZ9d1iGTf3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB2mJpG mBR6A+EwuzKCkqnjflJyMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJMPUxEMTYfD/SbPS22n41pM5Vl2sMv/whibXT3ovo+U7KGTqSCPv2 35MeCNQx23J9SHDJqlIk9F6I7Jd9IiUoTaKfnxPSYCY9Z7qcrlJvkGgDeL4ic5zf S9iLFGy1N6ILuqssr+AKFF2VkBJPrmgDiwDlOKE/+7uzftxwcsOphHCLpFyG72BO vHOn46pAGRP02yggEHsFKDx47K0HermWR1aVB9bMDx7dpr8XfubeNIe7dFmOad8R wiocAlg1yaQ3FhOpT3yU72wttMpX8KzZLzBWSi+5xwSDfyz/BCuj29xhau05xxDJ thHfqX2C2+orB+8p5q5hMT5NOX4oYxU0 -----END CERTIFICATE-----Generated at Fri May 16 11:21:38 2025 by rpki-client