$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: ClHuQQ0paztIoH3VRtdIxJyv2W70LybpoY2sEn0OiB8= Subject key identifier: 00:1C:E8:A9:81:80:3E:6B:4F:CA:F0:7C:2E:9C:2E:73:7B:18:4C:21 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 015C Signing time: Thu 15 May 2025 03:30:07 +0000 Manifest this update: Thu 15 May 2025 03:30:06 +0000 Manifest next update: Thu 22 May 2025 03:30:06 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: OTsxEPTzM4cvX/+o84r5PLRKrPBNRLVJjGuJCqKm1Zk=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: F0IorjVoRNdR/rnfERSJA3kDGcWRN5xMt/uZPHyNwMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: May 15 03:30:06 2025 GMT Not After : May 22 03:30:06 2025 GMT Subject: CN=68255fbe-62b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:e8:ea:7d:19:7b:a9:bf:4b:9c:ee:57:15: 10:94:bb:2e:29:38:e8:ec:2d:e5:4b:81:8d:bf:1e: e4:9b:8b:b9:07:60:47:e3:60:d8:49:e3:49:06:4d: 13:52:e2:5d:da:f0:df:f7:30:23:aa:b8:6a:d0:e3: b1:f8:22:09:16:47:59:67:fb:a7:3f:72:be:9e:03: 54:4e:47:c7:6c:f3:a6:61:30:e3:a5:0a:04:3e:ed: 15:7b:18:84:20:7d:10:1e:6e:c4:ef:df:b4:9a:f1: b6:8f:1c:a6:47:db:f7:3c:62:54:e3:eb:f0:f2:4c: 7a:a2:b6:2f:6a:be:71:39:e9:8e:4c:91:c0:16:fc: e9:4e:83:06:32:9b:c2:b6:f5:24:49:bb:bc:ed:1c: 85:17:73:18:43:5c:bb:0e:72:9f:f2:ac:20:8a:2f: 72:83:b8:1b:c7:e7:ec:8a:32:34:d9:0e:e1:4b:04: 87:33:e6:13:69:01:b0:93:6e:85:7a:5b:af:df:4b: 6b:c1:f9:f4:1f:31:29:2e:9e:8d:e4:d1:7c:cd:46: 7c:b4:31:47:23:e9:ef:34:54:d8:ce:c9:61:74:f5: c4:4d:c8:93:22:89:d7:3a:1e:0c:59:45:e7:a0:0e: 5d:ec:47:a6:e7:1d:85:8b:3d:21:0e:4c:fa:25:f1: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:E8:A9:81:80:3E:6B:4F:CA:F0:7C:2E:9C:2E:73:7B:18:4C:21 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:d9:ec:70:6b:d9:cc:10:a7:e9:ba:cd:26:13:fc:a1:d0: 27:ae:2a:75:d0:e2:af:df:99:ae:68:2a:24:99:b5:c4:b5:ca: 8a:71:19:a9:93:bd:b8:d7:69:3a:b3:25:0f:bf:18:55:4a:db: dd:0c:ad:31:b8:5f:00:81:43:da:f6:08:7e:60:e0:cc:fa:f6: ca:08:b5:7b:fd:64:62:9f:79:22:e7:8e:dc:a0:c2:5f:e5:77: f8:ae:47:9c:ae:9d:86:42:25:2b:e8:6a:85:bd:ef:7a:00:63: b6:14:24:66:1e:70:55:0b:07:43:f1:7f:60:3b:63:72:6e:18: dc:e1:1d:b6:c8:18:59:8a:e0:16:bc:78:44:a6:67:80:62:71: 35:23:26:b6:b6:7e:aa:50:27:bd:4f:08:da:a1:ae:e9:2f:f6: 10:f3:b8:9d:62:8c:6e:d7:65:dc:a1:8d:6c:15:02:06:34:1c: 84:ff:67:31:8b:e4:90:e6:73:25:cc:66:81:58:88:95:bb:06: 43:8d:77:52:50:73:9e:01:97:3d:4f:04:7c:61:30:29:05:6d: b3:66:81:9b:42:f6:c3:fe:6a:78:ae:fb:0e:e7:a0:5b:56:0a: ef:79:bd:61:38:9c:cd:8d:88:1b:9a:c6:38:65:a1:69:ce:a9: ae:e5:0d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNTE1MDMzMDA2WhcNMjUwNTIyMDMzMDA2WjAYMRYwFAYD VQQDEw02ODI1NWZiZS02MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqbo6n0Ze6m/S5zuVxUQlLsuKTjo7C3lS4GNvx7km4u5B2BH42DYSeNJBk0T UuJd2vDf9zAjqrhq0OOx+CIJFkdZZ/unP3K+ngNUTkfHbPOmYTDjpQoEPu0VexiE IH0QHm7E79+0mvG2jxymR9v3PGJU4+vw8kx6orYvar5xOemOTJHAFvzpToMGMpvC tvUkSbu87RyFF3MYQ1y7DnKf8qwgii9yg7gbx+fsijI02Q7hSwSHM+YTaQGwk26F eluv30trwfn0HzEpLp6N5NF8zUZ8tDFHI+nvNFTYzslhdPXETciTIonXOh4MWUXn oA5d7Eem5x2Fiz0hDkz6JfF9WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAc6KmB gD5rT8rwfC6cLnN7GEwhMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwS9nscGvZzBCn6brNJhP8odAnrip10OKv35muaCokmbXEtcqKcRmp k72412k6syUPvxhVStvdDK0xuF8AgUPa9gh+YODM+vbKCLV7/WRin3ki547coMJf 5Xf4rkecrp2GQiUr6GqFve96AGO2FCRmHnBVCwdD8X9gO2Nybhjc4R22yBhZiuAW vHhEpmeAYnE1Iya2tn6qUCe9Twjaoa7pL/YQ87idYoxu12XcoY1sFQIGNByE/2cx i+SQ5nMlzGaBWIiVuwZDjXdSUHOeAZc9TwR8YTApBW2zZoGbQvbD/mp4rvsO56Bb Vgrveb1hOJzNjYgbmsY4ZaFpzqmu5Q2M -----END CERTIFICATE-----Generated at Fri May 16 12:41:15 2025 by rpki-client