$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: 42sVBQAxUgOdJFt6prgv/dSuKLlgwfuJTG6qlVhwfl4= Subject key identifier: 6D:40:4A:7F:E4:D6:5F:72:79:63:7B:46:A0:A9:E3:DF:F9:D0:AB:D2 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 07A0 Signing time: Sat 10 May 2025 20:54:33 +0000 Manifest this update: Sat 10 May 2025 20:54:33 +0000 Manifest next update: Sat 17 May 2025 20:54:33 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: ftivP3gv9SyxJsMiiI4JSb+zynu5H4t2irFf9b7doew=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: May 10 20:54:33 2025 GMT Not After : May 17 20:54:33 2025 GMT Subject: CN=681fbd09-7025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:76:44:9e:76:73:58:ad:a2:0f:af:2d:30: 9b:e0:d6:bc:74:76:c3:e4:1a:f0:c0:60:b7:bb:a8: d3:ed:54:5e:fd:da:de:48:77:d7:aa:c7:cd:66:88: c0:f3:ed:cf:53:dc:b6:fe:07:9c:17:2d:64:80:10: 7e:17:08:95:b4:05:51:34:57:92:3e:d4:91:5e:98: 62:54:af:7a:30:02:59:6f:33:7d:38:aa:f2:76:01: 1f:fb:38:9e:d7:b3:f0:04:46:1e:8e:76:3a:db:a4: 55:1e:5d:50:9f:ba:c1:e9:1a:6d:83:b8:f6:a8:da: 64:c3:47:4e:00:90:41:60:95:91:88:7f:b6:24:08: e4:c8:1b:6c:9c:63:ca:b7:23:72:1c:5a:09:9e:a7: ee:17:0a:f8:45:02:3b:6c:fd:b1:1a:fb:6b:ed:69: 55:8a:8b:ef:bf:ed:8c:38:cd:59:ba:1a:ca:6f:2d: 02:34:b0:20:a5:79:9b:95:c7:f1:90:1f:0f:35:cf: bd:02:37:1f:20:af:64:2f:f1:ac:b5:be:19:c2:57: 20:de:f1:5a:d2:86:a0:61:25:75:c3:75:0e:5b:c3: 0d:a8:c6:6e:d9:cf:a7:30:ce:e1:51:6d:a1:ed:a3: fd:a2:b8:4b:8e:d2:00:68:b3:f9:0a:f4:c9:42:a7: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:4A:7F:E4:D6:5F:72:79:63:7B:46:A0:A9:E3:DF:F9:D0:AB:D2 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ba:f1:c6:1c:39:bc:3d:9a:47:d5:40:75:01:b8:f7:2f:86: 5c:53:b0:1b:d2:23:8b:28:2b:69:9b:42:1c:3b:72:3e:6b:6d: b3:5e:8d:9c:bf:eb:02:d0:33:3e:a1:18:8b:83:2b:b1:76:02: 22:53:2e:d2:86:fa:5d:e6:b4:22:d7:c9:7e:28:80:6c:c0:28: e0:42:84:de:d9:9d:a4:d5:48:f8:6e:97:12:c0:62:26:1a:21: 03:47:0d:1a:71:0e:0a:b2:59:21:08:1a:9e:98:94:70:0a:8d: b4:44:44:2d:c0:67:4b:6f:01:f7:18:36:15:ca:83:0e:ed:a6: 62:c7:2f:4a:b7:db:e9:25:c1:5f:ff:a8:28:9f:98:4a:d9:20: 64:ee:f0:6e:fd:2a:61:d7:90:20:a0:f6:9a:18:79:85:e1:b4: 64:b2:6e:e6:d7:a6:02:f2:16:99:b7:de:58:a2:17:38:94:a4: 29:83:a7:27:63:72:a0:46:1e:6d:26:59:67:c3:5a:03:5c:27: ca:f9:7a:5d:41:ab:be:8d:7f:8f:98:a2:c1:fa:14:3d:18:50: ac:50:26:2b:21:51:5b:42:0f:ee:ef:ab:8d:ed:b2:eb:3f:97: 5f:8f:e5:96:c3:30:66:55:61:a5:ab:c1:df:f6:5e:21:8e:7c: c6:68:1b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUwNTEwMjA1NDMzWhcNMjUwNTE3MjA1NDMzWjAYMRYwFAYD VQQDEw02ODFmYmQwOS03MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWN2RJ52c1itog+vLTCb4Na8dHbD5BrwwGC3u6jT7VRe/dreSHfXqsfNZojA 8+3PU9y2/gecFy1kgBB+FwiVtAVRNFeSPtSRXphiVK96MAJZbzN9OKrydgEf+zie 17PwBEYejnY626RVHl1Qn7rB6Rptg7j2qNpkw0dOAJBBYJWRiH+2JAjkyBtsnGPK tyNyHFoJnqfuFwr4RQI7bP2xGvtr7WlViovvv+2MOM1ZuhrKby0CNLAgpXmblcfx kB8PNc+9AjcfIK9kL/Gstb4Zwlcg3vFa0oagYSV1w3UOW8MNqMZu2c+nMM7hUW2h 7aP9orhLjtIAaLP5CvTJQqcRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1ASn/k 1l9yeWN7RqCp49/50KvSMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjuvHGHDm8PZpH1UB1Abj3L4ZcU7Ab0iOLKCtpm0IcO3I+a22zXo2c v+sC0DM+oRiLgyuxdgIiUy7Shvpd5rQi18l+KIBswCjgQoTe2Z2k1Uj4bpcSwGIm GiEDRw0acQ4KslkhCBqemJRwCo20REQtwGdLbwH3GDYVyoMO7aZixy9Kt9vpJcFf /6gon5hK2SBk7vBu/Sph15AgoPaaGHmF4bRksm7m16YC8haZt95Yohc4lKQpg6cn Y3KgRh5tJllnw1oDXCfK+XpdQau+jX+PmKLB+hQ9GFCsUCYrIVFbQg/u76uN7bLr P5dfj+WWwzBmVWGlq8Hf9l4hjnzGaBsB -----END CERTIFICATE-----Generated at Mon May 12 22:01:49 2025 by rpki-client